Analysis of File Carving Approaches : A Literature Review

• Main Authors: NOR IKA SHAHIRAH, RAMLI, SYIFAK IZHAR, HISHAM, GRAN, BADSHAH
• Format: Proceeding
• Language: English; English
• Published: 2021
• Subjects: QA75 Electronic computers. Computer science
• Online Access: http://ir.unimas.my/id/eprint/42061/1/Scopus%20-%20Document%20details%20-%20Analysis%20of%20File%20Carving%20Approaches_%20A%20Literature%20Review.pdf; http://ir.unimas.my/id/eprint/42061/3/978-981-16-8059-5_16; http://ir.unimas.my/id/eprint/42061/; https://link.springer.com/chapter/10.1007/978-981-16-8059-5_16#
• Institution: Universiti Malaysia Sarawak

Home Advances in Cyber Security Conference paper Analysis of File Carving Approaches: A Literature Review Nor Ika Shahirah Ramli, Syifak Izhar Hisham & Gran Badshah Conference paper First Online: 01 January 2022 1262 Accesses 2 Citations Part of the Communications in Computer and Information Science book series (CCIS,volume 1487) Abstract Digital forensics is a crucial process of identifying, conserving, retrieving, evaluating, and documenting digital evidence obtained on computers and other electronic devices. Data restoration and analysis on file systems is one of digital forensic science’s most fundamental practices. There is a lot of research being done in developing file carving approaches and different researches focused on different aspects. With the increasing numbers of literature that are covering this research area, there is a need to review this literature for further reference. A review is carried out reviewing different works of literature covering various aspects of carving approaches from multiple digital data sources including IEEE Xplore, Google Scholar, Web of Science, etc. This analysis is done to consider several perspectives which are the current research direction of the file carving approach, the classification for the file carving approaches, and also the challenges are to be highlighted. Based on the analysis, we are able to state the current state of the art of file carving. We classify the carving approach into five classifications which are general carving, carving by specific file type, carving by structure, carving by the file system, and carving by fragmentation. We are also able to highlight several of the challenges for file carving mentioned in the past research. This study will serve as a reference for scientists to evaluate different strategies and obstacles for carving so that they may choose the suitable carving approaches for their study and also future developments.