(电子科技大学 计算机科学与工程学院, 成都 610054)
摘 要:针对由主观或客观因素造成计算机中数据丢失的情况,提出一种Windows FAT32文件系统下基于孩子兄弟树的数据删除恢复算法。 介绍FAT32文件系统和孩子兄弟树,详细阐述了如何基于孩子兄弟树重建FAT32文件系统的目录树,快速搜索到被删除文件的目录项,并通过分析文件删除前后目录项中属性值的变化来恢复被删除的文件。
关键词:数据恢复; FAT32 文件系统; 文件分配表; 孩子兄弟树
Childbrother treebased deleted file recovery algorithm on Windows FAT32
ZHANG Hua, LIU Naiqi, GUO Jiandong
(School of Computer Science & Engineering, University of Electronic Science & Technology of China, Chengdu610054, China)
Abstract:For the subjective or objective factors caused the loss of data on the computer,this paper proposed a childbrother treebased deleted file recovery algorithm on Windows FAT32 file system. It introduced the structure of Windows FAT32 file system on disk and childbrother tree, an deeply expatiation that how to reconstruct the Windows FAT32 file system directory based on the childbrother tree, and how to quickly search and obtained the delete file directory table which could be used to recovery its related deleted FAT file by analyzing its value variety after removed was displayed by the paper as well as. ......