A discussion on the recovery of data from a virtual machine

Nathaniel James Healey, Olga Angelopoulou, David Evans

Research output: Chapter in Book/Report/Conference proceedingConference contribution

2 Citations (Scopus)

Abstract

This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.

Original languageEnglish
Title of host publicationProceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
Pages603-606
Number of pages4
DOIs
Publication statusPublished - 2013
Event4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013 - Xi'an, China
Duration: 9 Sep 201311 Sep 2013

Conference

Conference4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
Country/TerritoryChina
CityXi'an
Period9/09/1311/09/13

Keywords

  • Deleted files
  • File recovery
  • Virtual machine
  • Virtualization

Fingerprint

Dive into the research topics of 'A discussion on the recovery of data from a virtual machine'. Together they form a unique fingerprint.

Cite this