Testing a file carving tool using realistic datasets generated with openness by a user level file system

Abstract

During the development phase of a file carver, it is inappropriate to use a used hard disk as an input medium due to the fact that the file system does not provide openness regarding file fragmentation and location of data on the disk. In this paper, we propose a method that provides realistic datasets with openness which can be used to test carving tools. Realistic property of datasets is achieved by implementing a file system at user level. A large file is used to mimic a hard disk in this process. The large file, on the hard disk, is handled by the host file system. The same large file to mimic as a test hard disk is handled by a file system at user level and hence openness is achieved.