Unlock instant, AI-driven research and patent intelligence for your innovation.

Memory mirror image file analysis method for Android intelligent terminal

A smart terminal and memory mirroring technology, applied in the direction of responding to errors, error detection of redundant data in calculations, and instruments, can solve problems such as difficult analysis, low efficiency, and missing important information, and achieve easy analysis, The effect of fast recovery

Inactive Publication Date: 2021-03-16
NANJING UNIV OF SCI & TECH
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The memory image file physically extracted from the Android smart terminal is binary data, which is not easy to parse. If the string matching method is used, the efficiency will be too low and a lot of important information will be missed.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Memory mirror image file analysis method for Android intelligent terminal
  • Memory mirror image file analysis method for Android intelligent terminal
  • Memory mirror image file analysis method for Android intelligent terminal

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0028] Below in conjunction with accompanying drawing and example of the present invention its specific implementation mode is described in further detail:

[0029] combine figure 1 , a method for analyzing memory image files facing an Android smart terminal, comprising the following steps:

[0030] Step 1, obtain the partition format information of the non-volatile memory of the Android smart terminal;

[0031] Step 2, analyze the non-volatile memory partition format information of the Android smart terminal obtained in step 1, and partition the data in the Android smart terminal memory image file;

[0032] Step 3, analyzing the data format of the memory partition of the Android smart terminal, determining the file system type of the partition so as to reconstruct the corresponding partition file system metadata, file system structure and file system data;

[0033] Step 4. Analyze the file system metadata, file system structure, and file system data obtained through reconst...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

According to the memory mirror image file analysis method for the Android intelligent terminal, partition information in the memory mirror image file is analyzed, the memory mirror image of the Android intelligent terminal is restored into the corresponding file system according to the file system structure described by each partition table, analysis of the mirror image file can be achieved more easily, and meanwhile, the deleted data which is not physically covered in the file system is recovered, and the log transaction is analyzed according to the structure of the log domain of the file system, so that recovery of part of deleted data can be realized more accurately, comprehensively and quickly.

Description

technical field [0001] The invention belongs to the technical field of intelligent terminals, and in particular relates to a memory image file analysis method for Android intelligent terminals. Background technique [0002] The memory of the Android smart terminal includes volatile memory and non-volatile memory. The volatile memory of the Android smart terminal is mainly the main memory, which refers to the memory used when the mobile phone runs the program. It can only store data temporarily and is used for exchanging with the CPU. Cache data and cannot be used for long-term storage of data. Non-volatile memory is a large-capacity memory for storing system files and user data. After the device is powered off and restarted, the data will not be lost, such as flash memory. [0003] The acquisition of the memory image file of the Android smart terminal is realized through data extraction technology, and data extraction usually includes logical extraction and physical extract...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F11/14
CPCG06F11/1458
Inventor 俞研陈文浩邓芳伟张雪王琼
Owner NANJING UNIV OF SCI & TECH
Features
  • R&D
  • Intellectual Property
  • Life Sciences
  • Materials
  • Tech Scout
Why Patsnap Eureka
  • Unparalleled Data Quality
  • Higher Quality Content
  • 60% Fewer Hallucinations
Social media
Patsnap Eureka Blog
Learn More