Windows-Based Analysis for HFS+ File System

Long Jiang Su; Shun Xiang Wu; Da Cao

doi:10.4028/www.scientific.net/AMR.179-180.538

Paper Titles

Adsorption Properties of Self-Assembly Synthesized Microporous Silica Material from Acidic Aqueous Media
p.519

Study on Dynamic Characteristics of the Engine Mounts System Based on the Virtual Prototype
p.523

I²C-Bus Design Based on FPGA
p.528

Development & Application for a Visual Casting Process CAD System of Copper Alloy
p.534

Windows-Based Analysis for HFS+ File System
p.538

Diagnosis Technique Based on BP and D-S Theory
p.544

A Study on Heart Load Affected by Industrial Noise
p.549

An Extraction Algorithm for Image Edge Based on Multifractal Analysis
p.554

Research on Density Control of Wind Jig Dry Coal Preparation System
p.558

HomeAdvanced Materials ResearchAdvanced Materials Research Vols. 179-180Windows-Based Analysis for HFS+ File System

Windows-Based Analysis for HFS+ File System

Abstract:

HFS+ file system is a file system of the Mac OS. In order to achieve data manipulation of the file system based on the Windows OS for further computer forensics, not only do we introduce the principle and structure of HFS+ file system, but also propose a efficient method to analyze the file system. Research contains the exploration of the file system and program implementation to analyze the file system.

You might also be interested in these eBooks

View Preview

Info:

Periodical:

Advanced Materials Research (Volumes 179-180)

Pages:

538-543

DOI:

https://doi.org/10.4028/www.scientific.net/AMR.179-180.538

Citation:

Cite this paper

Online since:

January 2011

Authors:

Long Jiang Su, Shun Xiang Wu, Da Cao

Keywords:

Data Manipulation, File System, HFS+, Mac OS, Window

Export:

RIS, BibTeX

Price:

Permissions CCC:

Request Permissions

Permissions PLS:

Request Permissions

Сopyright:

Citation:

References

[1] Apple. Technical note TN1150: HFS plus volume format. http: /developer. apple. com/mac/library/technotes/tn/tn1150. html.

Google Scholar

[2] Aaron Burghardt, Adam J. Feldman: Using the HFS+ journal for deleted file recovery [J]. Digital Investigation, Vol. 5(2008), P. S76-S82.

DOI: 10.1016/j.diin.2008.05.013

Google Scholar

[3] Ewa Huebner, Derek Bem, Cheong Kai Wee: Data hiding in the NTFS file system [J]. Digital Investigation, Vol. 3(2006), P. 211-226.

DOI: 10.1016/j.diin.2006.10.005

Google Scholar

[4] Stanley B. Lippman, Josee Lajoie, Barbara E. Moo: C++ Primer [M]. Posts & Telecom Press, (2006).

Google Scholar

[5] Sedgewick Robert: Algorithms in C [M]. Addison-Wesley Professional, January (1990).

Google Scholar

[6] Kevin. M. White: Mac OS X 10. 5 Sup port Essentials system supports standard tutorial [M]. Electronic Industry Press, (2008).

Google Scholar

[7] Marin: Data reproduce [M]. Beijing: Tsinghua University Press, (2009).

Google Scholar

[8] Laurent Marteau: Mac OS X & security-an overview [J]. Network Security, Vol (2005), P. 11-13.

DOI: 10.1016/s1353-4858(05)70236-1

Google Scholar

[9] Singh Amit. Hfsdebug: a debugger for hfs plus volumes. http: /osxbook. com/software/hfsdebug.

Google Scholar

[10] M.K. Aguilera, W. Golab, and M.A. Shah. A practical scalable distributed b-tree. VLDB, pp.598-609, 2008. Corresponding author: Shunxiang Wu, Automation Department, Xiamen University, Xiamen 361005, China. Email: wsx1009@163. com.

DOI: 10.14778/1453856.1453922

Google Scholar