Abstract
HFS+ file system is a file system of the Mac OS. In order to achieve data manipulation of the file system based on the Windows OS for further computer forensics, not only do we introduce the principle and structure of HFS+ file system, but also propose a efficient method to analyze the file system. Research contains the exploration of the file system and program implementation to analyze the file system.
Publisher
Trans Tech Publications, Ltd.
Reference10 articles.
1. Apple. Technical note TN1150: HFS plus volume format. http: /developer. apple. com/mac/library/technotes/tn/tn1150. html.
2. Aaron Burghardt, Adam J. Feldman: Using the HFS+ journal for deleted file recovery [J]. Digital Investigation, Vol. 5(2008), P. S76-S82.
3. Ewa Huebner, Derek Bem, Cheong Kai Wee: Data hiding in the NTFS file system [J]. Digital Investigation, Vol. 3(2006), P. 211-226.
4. Stanley B. Lippman, Josee Lajoie, Barbara E. Moo: C++ Primer [M]. Posts & Telecom Press, (2006).
5. Sedgewick Robert: Algorithms in C [M]. Addison-Wesley Professional, January (1990).
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献