A discussion on the recovery of data from a virtual machine

Nathaniel James Healey; Olga Angelopoulou; David Evans

doi:10.1109/EIDWT.2013.110

A discussion on the recovery of data from a virtual machine

Nathaniel James Healey, Olga Angelopoulou, David Evans

School of Physics, Engineering & Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Citations (Scopus)

Abstract

This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.

Original language	English
Title of host publication	Proceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
Pages	603-606
Number of pages	4
DOIs	https://doi.org/10.1109/EIDWT.2013.110
Publication status	Published - 2013
Event	4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013 - Xi'an, China Duration: 9 Sept 2013 → 11 Sept 2013

Conference

Conference	4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013
Country/Territory	China
City	Xi'an
Period	9/09/13 → 11/09/13

Keywords

Deleted files
File recovery
Virtual machine
Virtualization

Access to Document

10.1109/EIDWT.2013.110

Cite this

@inproceedings{374a14d00e62413a8474c017aac836be,

title = "A discussion on the recovery of data from a virtual machine",

abstract = "This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.",

keywords = "Deleted files, File recovery, Virtual machine, Virtualization",

author = "Healey, {Nathaniel James} and Olga Angelopoulou and David Evans",

year = "2013",

doi = "10.1109/EIDWT.2013.110",

language = "English",

isbn = "9780769550442",

pages = "603--606",

booktitle = "Proceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013",

note = "4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013 ; Conference date: 09-09-2013 Through 11-09-2013",

}

Healey, NJ, Angelopoulou, O & Evans, D 2013, A discussion on the recovery of data from a virtual machine. in Proceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013., 6631686, pp. 603-606, 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013, Xi'an, China, 9/09/13. https://doi.org/10.1109/EIDWT.2013.110

TY - GEN

T1 - A discussion on the recovery of data from a virtual machine

AU - Healey, Nathaniel James

AU - Angelopoulou, Olga

AU - Evans, David

PY - 2013

Y1 - 2013

N2 - This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.

AB - This paper aims to provide an initial point of reference for future research within the field of recovering files from virtual machines. We discuss the current methods of file recovery from a physical machine, we define virtualization, and expand on how virtual machines differ from physical machines. We present a brief scenario that involves the use of a virtual machine in a cyber crime. We build upon that on the potential issues faced that could be faced by a forensic investigator. We then conclude with recommendations of future research in the field, aiming to address the issue of recovering files from a virtual machine.

KW - Deleted files

KW - File recovery

KW - Virtual machine

KW - Virtualization

UR - http://www.scopus.com/inward/record.url?scp=84889601938&partnerID=8YFLogxK

U2 - 10.1109/EIDWT.2013.110

DO - 10.1109/EIDWT.2013.110

M3 - Conference contribution

AN - SCOPUS:84889601938

SN - 9780769550442

SP - 603

EP - 606

BT - Proceedings - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013

T2 - 4th International Conference on Emerging Intelligent Data and Web Technologies, EIDWT 2013

Y2 - 9 September 2013 through 11 September 2013

ER -

A discussion on the recovery of data from a virtual machine

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this