JUCS - Journal of Universal Computer Science 11(1): 20-36, doi: 10.3217/jucs-011-01-0020
Low-Intrusive Consistent Disk Checkpointing: A Tool for Digital Forensics
expand article infoSriranjani Sitaraman‡, S. Venkatesan‡
‡ Department of Computer Science, University of Texas, Dallas, United States of America

Corresponding author: Sriranjani Sitaraman ( ginss@student.utdallas.edu )

© Sriranjani Sitaraman, S. Venkatesan.
This article is freely available under the J.UCS Open Content License.
Citation: Sitaraman S, Venkatesan S (2005) Low-Intrusive Consistent Disk Checkpointing: A Tool for Digital Forensics. JUCS - Journal of Universal Computer Science 11(1): 20-36. https://doi.org/10.3217/jucs-011-01-0020
Open Access
Abstract
An important problem in digital forensics is to record a checkpoint of a disk drive mounted as a file system on a host machine without disrupting the disk s normal operations. We present a checkpointing methodology for a disk that has a Unix-like file system. While our algorithm is built around the Unix file system, it can be used to checkpoint disks formatted for other file systems such as NTFS, etc. Our algorithm satisfies several correctness conditions.
Keywords
Checkpointing, Backup, Consistency, Snapshot, Digital Forensics, File system, Operating System