Paper Info
Title
Cluster size determination using JPEG files
Abstract
File can be recovered by simply using traditional recovery means. However, a technique is required to distinguish one file to another when dealing with hard disk with corrupted filesystem metadata. As in a computer file system, a cluster is the smallest allocation of disk space to hold a file, information about the cluster size can help in determining the start of file which can be used to distinguish one file to another. This paper introduces a method for acquiring the cluster size by using data sets from DFRWS 2006 and DFRWS 2007. A tool called PredClus is developed to automatically display the predicted cluster size according to probabilistic percentage. By using PredClus, the cluster size used in both DFRWS 2006 and DFRWS 2007 can be determined. Thus, JPEG images that are not located at the starting address of any cluster are most probably thumbnails or embedded files.
Year
DOI
Venue
2012
10.1007/978-3-642-31128-4_26
ICCSA (4)
Keywords
Field
DocType
cluster size determination,computer file system,smallest allocation,corrupted filesystem metadata,embedded file,hard disk,jpeg file,disk space,traditional recovery,cluster size,jpeg image,jpeg files
Data mining,Metadata,Computer science,Computer network,JPEG,Unix file types,File carving,Probabilistic logic,Data file,File system fragmentation,Database,Computer file
Conference
Volume
ISSN
Citations 
7336
0302-9743
3
PageRank 
References 
Authors
0.44
8
3
Name
Order
Citations
PageRank
Nurul Azma Abdullah141.14
Rosziati Ibrahim24613.87
Kamaruddin Malik Mohamad3265.01