Data recombination method for Symbia system

Abstract

The invention discloses a data recombination method for a Symbia system. The data recombination method comprises the following steps of: S1, performing physical mirroring of data of a mobile phone having the Symbia system; S2, judging whether a data area exists in a mirror image or not, starting to scan XSR2 from the head part of the mirror image, if so, showing that the data area exists in the mirror image, executing the S3, and otherwise, ending; S3, analyzing the structure of the data area, and sorting blocks in the data area; S4, analyzing a data structure in each block, and sorting data in the block; and S5, recombining and extracting the resorted data in the block, and recovering normal data. The data recombination method disclosed by the invention has the benefits that: whether data exists in the data area of the Symbia system or not can be judged; data for recombining the Symbia system is completed; the recombined data cannot be corrupted; the recombination success rate is high; polices are assisted to recover mobile phone data; cracking of a criminal case can be assisted; and loss due to data loss can be reduced.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for reorganizing data for Symbian systems. Background technique [0002] With the continuous improvement and expansion of the service level and service types provided by mobile communication technology, mobile phones have increasingly become an indispensable contact tool in people's work and life. Not uncommon. Mobile phone forensics is an effective means of combating such crimes. Conceptually speaking, mobile phone forensics is to collect, preserve and analyze relevant electronic evidence from the internal / external memory card of the mobile phone SIM card and the mobile network operator database, and finally obtain legally effective evidence that can be accepted by the court. the process of. At present, there are generally three types of criminal acts involving mobile phones: one is that mobile phones are used as communication tools during the implementa...

AI Technical Summary

Problems solved by technology

[0003] However, at present, the data recovery technology for smartphones in mobile phone forensics is very mature, but there is no better method for data extraction in China for the Saipan system. When encountering such a mobile phone, the case will be deadlocked, because the Saipan system uses management bytes and the structure of the data area to store mobile phone data, ordinary analysis methods can not analyze useful information at all, in order to solve this kind of problem, so introduce the method of Saipan system data reorganization

Images