NTFS ((New Technology File System) deletion file recovery method and device based on log

A technology for deleting files and restoring methods, which is applied in the field of information security, can solve problems such as inability to process data recovery, inability to process recovery of fragmented files, inability to recover, etc., and achieve the effect of perfect recovery technology

Active Publication Date: 2016-07-06
XIAMEN MEIYA PICO INFORMATION
View PDF4 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] For the existing NTFS deleted file recovery technology, it cannot handle the data recovery when the file record is overwritten, and the traditional feature recovery cannot handle the recovery of frag

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • NTFS ((New Technology File System) deletion file recovery method and device based on log
  • NTFS ((New Technology File System) deletion file recovery method and device based on log
  • NTFS ((New Technology File System) deletion file recovery method and device based on log

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0090] To further illustrate the various embodiments, the present invention is provided with accompanying drawings. These drawings are a part of the disclosure of the present invention, which are mainly used to illustrate the embodiments, and can be combined with related descriptions in the specification to explain the operating principles of the embodiments. With reference to these contents, those skilled in the art should understand other possible implementations and advantages of the present invention. Components in the figures are not drawn to scale, and similar component symbols are generally used to denote similar components.

[0091] The present invention will be further described in conjunction with the accompanying drawings and specific embodiments.

[0092] The present invention proposes a kind of log-based NTFS delete file recovery method, comprises following definition in this method:

[0093] 1), assuming RS={R 1 , R 2 , R 3 ,...,R n} represents a list of op...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention belongs to the technical field of information security, and particularly relates to an NTFS (New Technology File System) deletion file recovery method and device based on a log. The method can analyze log information associated with MFT and combine with the own information of an MFT (Master File Table) to regroup a covered file record so as to better recover a corresponding deletion file. The method solves the problem that a traditional technical scheme can not recover a record file under a situation that the file record is covered, and the recovery technology of the NTFS deletion file is further perfected.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to a log-based NTFS deleted file recovery method and device. Background technique [0002] The NTFS file system is the most mainstream and widely used file system under the Windows operating system, and its deleted file recovery technology has always been a hot spot in the field of information security. At present, there are many technical materials and recovery software related to NTFS deleted files, and these technologies and software are all based on MFT for data recovery. [0003] Reference patent document CN100429628C discloses the method for rebuilding directory structure and recovering data in NTFS volume, and this method comprises file scanning process and file recovery process, and file scanning process mainly is $MFT (master file table file) of traversing disk, by scanning the $MFT in MFT Various attribute information of all files, get the data at...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F11/14G06F17/30
CPCG06F11/1435G06F11/1471G06F16/182
Inventor 沈长达赵宪伟吴少华黄志炜申强
Owner XIAMEN MEIYA PICO INFORMATION
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap