1.Data RecoveryAakash Mehta Bhaumik Chaudhari10IT026 10IT053 Shankersinh Vaghela Bapu Institute Of TechnologyNov 22nd, 2012

2. Overview What is Data Recovery? Disk Structure Software used Real World Uses Advantages & Disadvantages DemoShankersinh Vaghela Bapu Institute Of Technology 2 3. What is data recovery? Retrieving deleted/inaccessible data from electronicstorage media (hard drives, removable media, opticaldevices, etc...) Typical causes of loss include: Computer Virus Data Corruption Computer Crime Human ErrorShankersinh Vaghela Bapu Institute Of Technology 3 4. Disk Structure A. Track B. Geometrical Sector C. Track Sector D. Cluster Shankersinh Vaghela BapuInstitute Of Technology 4 5. Several forms of Disk Storage Comparison of severalforms of disk storageshowing tracks. Shankersinh Vaghela BapuInstitute Of Technology 5 6. How data is Stored ? Data is stored into magnetic blocks which are insectors. Every time you format HDD, new layer iscreated. With the increase of layers memory blocks arealso increased and it results to variations in datatransfer(Speed Decrease, Memory consumptionhigh). Shankersinh Vaghela BapuInstitute Of Technology 6 7. How Data Is Recovered? At the First time Low Level Format(LLF) isperformed on the hard disk, the disks plattersstart out empty. Thats the last time the platterswill be empty for the life of the drive. If an LLF is done on a disk with data on italready, the data is permanently erased. The type of formatting that most users arefamiliar with is called high-level formatting and itis the process of setting up an empty file system. Shankersinh Vaghela BapuInstitute Of Technology7 8. How Data Is Recovered? Data stored on the hard drive is not physicallydeleted during formatting. The hard drive is re-organized and the table withinformation where files are stored is reset. As long as the file system and its settings remainthe same, none of the actual data previouslystored on the hard drive is deleted or overwrittencan subsequently be recovered.Shankersinh Vaghela Bapu Institute Of Technology 8 9. How Data Is Recovered? When Data is overwritten, the magnetic domainson the HDD are re-magnetized. This is an irreversible process that physicallyremoves information previously stored in thislocation. This would require the use of a Magnetic forcemicroscopy (MFM) or similar technologies, torecover overwritten data successfully. There is no software or other technical wayknown to the public that can restore overwrittendata. Shankersinh Vaghela Bapu Institute Of Technology 9 10. Software For Data Recovery Stellar Phoenix Windows Data Recovery Stellar phoenix Linux Data Recovery Get Data Back-NTFS Get Data Back-FAT Shankersinh Vaghela BapuInstitute Of Technology 10 11. Operating Systems Helix:- Helix is a Linux based forensics operatingsystem.- It is combined system used to analyse the filesystem and also generates the reports. Encase:- It is also very rich utility designed for theprofessionals.Shankersinh Vaghela Bapu Institute Of Technology 11 12. Real World Uses Average User: Recover important lost files Keep your private information private Law enforcement: Locate illegal data Restore deleted/overwritten information. Prosecute criminals based on discovered data Shankersinh Vaghela BapuInstitute Of Technology 12 13. Advantages Recover important data easily by using varioussoftware. If you work for an organization than your datashould be most important and you need torecover at any cost if it is lost. Recover your personal photos, files and etcwhich is precious to you.Shankersinh Vaghela Bapu Institute Of Technology 13 14. Disadvantages There is no surety that all of the lost data can berecovered. Shankersinh Vaghela BapuInstitute Of Technology 14 15. Private Recovery Services Many private companies offer quick, secure, andconfidential data recovery: Computer Disk Service http://www.compdisk.com 20 GB from $195.00 46 GB and up from $895.00 Action Front http://www.datarec.com/ External cases - $500 to $1500 Internal cases -$2500 to $4000 for a single hard drive Critical Response services start at $5,000. Data Recovery Services -http://www.datarecovery.net/ Shankersinh Vaghela BapuInstitute Of Technology 15 16. References "Data Recovery Solutions". R3 Data Recovery. Retrieved 13 October 2012. "Computer Forensics Schools and Training" . Legal-Criminal-Justice-Schools.com. Retrieved 13October 2012. Zeno, Keneth (27 September 2011). "How Does Data Recovery Work?" . Data Recovery Box.Retrieved 29 February 2012. Secure Deletion of Data from Magnetic and Solid-State Memory , Peter Gutmann, Department ofComputer Science, University of Auckland Data Remanence in Semiconductor Devices , Peter Gutmann, IBM T.J. Watson Research Center Feenberg, Daniel (14 May 2004)."Can Intelligence Agencies Read Overwritten Data? A response to Gutmann." . National Bureauof Economic Research. Retrieved 21 May 2008. Data Removal and Erasure from Hard Disk Drives "Disk Wiping - One Pass is Enough" . Anti-Forensics. 17 March 2009. "Disk Wiping - One Pass is Enough - Part 2 (this time with screenshots)" . Anti-Forensics. 18March 2009. Wright, Dr. Craig (15 January 2009)."Overwriting Hard Drive Data" . "Data Recovery Possible on Securely Erased SSDs" . Retrieved 22 November 2011. Shankersinh Vaghela BapuInstitute Of Technology16 17. QUESTIONS? Shankersinh Vaghela BapuInstitute Of Technology 17