| Popis: |
With the popularity of the Android smart phone, life of people has become more and more convenient, it also bring new ways for criminals to commit a crime. Data recovery is an important part of forensic, because it can mine potential evidences. In this paper ,we find chance to recover the data which is deleted but not erased after analyzing the structure of NAND and YAFFS2 file system, especially the mechanism of deleting data, this paper put forward a method to recover data of Android smart phone with Yaffs2 file system. KeywordsAndroid; forensic; YAFFS2;data recovery;NAND |
