CAJ | 학술논문

在进行硬盘数据恢复时，如果每次都从头到尾地进行扫描，需要耗费大量的时间，而且恢复的数据大部分是不需要的。为了节约时间提高效率，应对特定的重要数据文件进行恢复。论文从硬盘启动及文件读写的原理出发，分析文件被修改或删除时操作系统所做的操作，对比分析文件分配表(FAT)和文件目录表(FDT)在特定文件修改或删除时产生的变化，针对现有的数据恢复技术无法自动恢复不连续簇文件的问题，通过FAT表内连续簇的分布规律来进行特定文件恢复，并在实验中进行验证。
재진행경반수거회복시，여과매차도종두도미지진행소묘，수요모비대량적시간，이차회복적수거대부분시불수요적。위료절약시간제고효솔，응대특정적중요수거문건진행회복。논문종경반계동급문건독사적원리출발，분석문건피수개혹산제시조작계통소주적조작，대비분석문건분배표(FAT)화문건목록표(FDT)재특정문건수개혹산제시산생적변화，침대현유적수거회복기술무법자동회복불련속족문건적문제，통과FAT표내련속족적분포규률래진행특정문건회복，병재실험중진행험증。
During data recovery, it would cost a lot of time to scan from begin to end, and most of the recovered data would be not required. Restoring the particular data files can be useful to save time and improve efficiency. Paper begins with presenting the principle of file reading and writing, and analyzes the OS’ actions when the file is modified or deleted, as well as the changes of the File Associate Table (FAT) and File Directory Table (FDT). Aiming at the problem that the current data recovery method is not in effect for the lost files without continuous clusters, we can do the job for the particular file according to its clusters’ distribution characteristics, and paper tests it in some experiment.