Open AccessPerformance Comparison of Forensic Software for Carving Files using NIST Method
Author(s) -
Doddy Teguh Yuwono,
Abdul Fadlil,
Sunardi Sunardi
Publication year - 2019
Publication title -
jurnal teknologi dan sistem komputer
Language(s) - English
Resource type - Journals
eISSN - 2620-4002
pISSN - 2338-0403
DOI - 10.14710/jtsiskom.7.3.2019.89-92
Subject(s) - carving , digital forensics , computer science , nist , software , image file formats , file format , jpeg , database , engineering , computer security , artificial intelligence , operating system , data compression , image (mathematics) , mechanical engineering , natural language processing
Data lost due to the fast format or system crash will remain in the media sector of storage. Digital forensics needs proof and techniques for retrieving data lost in storage. This research studied the performance comparison of open-source forensic software for data retrieval, namely Scalpel, Foremost, and Autopsy, using the National Institute of Standards Technology (NIST) forensic method. The testing process was carried out using the file carving technique. The carving file results are analyzed based on the success rate (accuracy) of the forensic tools used in returning the data. Scalpel performed the highest accuracy for file carving of 100% success rate for 20 document files in pdf and Docx format, and 90% for 10 image files in png and jpeg format.