Forensic Analysis of YAFFS2

Zimmermann C, Spreitzenbarth M, Schmitt S, Freiling F (2012)

Publication Language: German

Publication Type: Conference contribution

Publication year: 2012

Pages Range: 59-69

Conference Proceedings Title: Proceedings of GI Sicherheit 2012

Event location: Darmstadt, Germany DE

ISBN: 978-3-88579-289-5

URI: https://dl.gi.de/handle/20.500.12116/18263

Open Access Link: https://dl.gi.de/handle/20.500.12116/18263

Abstract

In contrast to traditional file systems designed for hard disks, the file systems used within smartphones and embedded devices have not been fully analyzed from a forensic perspective. Many modern smartphones make use of the NAND flash file system YAFFS2. In this paper we provide an overview of the file system YAFFS2
from the viewpoint of digital forensics. We show how garbage collection and wear leveling techniques affect recoverability of deleted and modified files.

Authors with CRIS profile

Michael Spreitzenbarth Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Sven Schmitt Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Felix Freiling Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen)

How to cite

APA:

Zimmermann, C., Spreitzenbarth, M., Schmitt, S., & Freiling, F. (2012). Forensic Analysis of YAFFS2. In Proceedings of GI Sicherheit 2012 (S. 59-69). Darmstadt, Germany, DE.

MLA:

Zimmermann, Christian, et al. "Forensic Analysis of YAFFS2." Tagungsband GI Sicherheit 2012, Darmstadt, Germany 2012. 59-69.

BibTeX: Download