파일시스템의 클러스터를 임의로 할당하여 디스크를 단편화하기 위한 방법
An Arbitrary Disk Cluster Manipulating Method for Allocating Disk Fragmentation of Filesystem
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
This study proposes a method to manipulate fragmentation of disks by arbitrarily allocating and releasing the status of a disk cluster in the NTFS file system. This method allows experiments to be performed in several studies related to fragmentation problems on disk cluster. Typical applicable research examples include testing the performance of disk defragmentation tools according to the state of fragmentation, establishing an experimental environment for fragmented file carving methods for digital forensics, setting up cluster fragmentation for testing the robustness of data hiding methods within directory indexes, and testing the file system's disk allocation methods according to the various version of Windows. This method suggests how a single file occupies a cluster and presents an algorithm with a flowchart. It raises three tricky problems to solve the method, and we propose solutions to the problems. Experiments for allocating the disk cluster to be fragmented to the maximum extent possible, it then performs a disk defragmentation experiment to prove the proposed method is effective.
Abstract
This study proposes a method to manipulate fragmentation of disks by arbitrarily allocating and releasing the status of a disk cluster in the NTFS file system. This method allows experiments to be performed in several studies related to fragmentation problems on disk cluster. Typical applicable research examples include testing the performance of disk defragmentation tools according to the state of fragmentation, establishing an experimental environment for fragmented file carving methods for digital forensics, setting up cluster fragmentation for testing the robustness of data hiding methods within directory indexes, and testing the file system's disk allocation methods according to the various version of Windows. This method suggests how a single file occupies a cluster and presents an algorithm with a flowchart. It raises three tricky problems to solve the method, and we propose solutions to the problems. Experiments for allocating the disk cluster to be fragmented to the maximum extent possible, it then performs a disk defragmentation experiment to prove the proposed method is effective.
참고문헌 (12)
- "File System Fragmentation"[URL]
- "Inside Windows NT Disk Defragmenting"[URL]
- "Microsoft Drive Optimizer"[URL]
- Conlan, K., "Anti-forensics: Furthering digital forensic science through a new extended, granular taxonomy", Digital Investigation, 18, pp.S66~S75 (2016)
- Hassan, N. A., "Data Hiding Techniques in Windows OS" (2017), Elsevier
- 조규상, "새로운 NTFS 디렉토리 인덱스 안티포렌식 기법", 한국정보전자통신기술학회 논문지, 8(4), pp.327~337 (2015), 한국정보전자통신기술학회
- Berghel, H., "Data Hiding Tactics for Windows and Unix File Systems", Advances in Computers, 74, pp.1~17 (2008)
- Huebner, E., "Data Hiding in the NTFS File System", Digital Investigation, 3(4), pp.211~226 (2006)
- Karresand, M., "Using NTFS Cluster Allocation Behavior to Find the Location of User Data", Digital Investigation, 29, pp.S51~S60 (2019)
- Bahjat, A., "Deleted file fragment dating by analysis of allocated neighbors", Digital Investigation, 28, pp.S60~S67 (2019)
- Carrier, B., "File System Forensic Analysis" (2005), Addison-Wesley
- 조규상, "A Maximum Data Allocation Rule for an Anti-forensic Data Hiding Method in NTFS Index Record", The International Journal of Internet, Broadcasting and Communication, 9(3), pp.17~26 (2017), 한국인터넷방송통신학회[DOI]