University of Hertfordshire

By the same authors

A discussion on the recovery of data from a virtual machine

Research output: Chapter in Book/Report/Conference proceedingConference contribution

View graph of relations
Original languageEnglish
Title of host publicationProceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
Pages603-606
Number of pages4
DOIs
Publication statusPublished - 2013
Event4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013 - Xi'an, China
Duration: 9 Sep 201311 Sep 2013

Conference

Conference4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
CountryChina
CityXi'an
Period9/09/1311/09/13

Abstract

This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.

ID: 9588054