if you want the report on this topic "data recovery" then contact me on bhaumik.31.10@gmail.com

1. Data Recovery
Aakash Mehta Bhaumik Chaudhari
10IT026 10IT053
Shankersinh Vaghela Bapu
Institute Of Technology
Nov 22nd, 2012

2. Overview
 What is Data Recovery?
 Disk Structure
 Software used
 Real World Uses
 Advantages & Disadvantages
 Demo
Shankersinh Vaghela Bapu
Institute Of Technology 2

3. What is data recovery?
 Retrieving deleted/inaccessible data from electronic
storage media (hard drives, removable media, optical
devices, etc...)
 Typical causes of loss include:
 Computer Virus
 Data Corruption
 Computer Crime
 Human Error
Shankersinh Vaghela Bapu
Institute Of Technology 3

4. Disk Structure
 A. Track
 B. Geometrical Sector
 C. Track Sector
 D. Cluster
Shankersinh Vaghela Bapu
Institute Of Technology 4

5. Several forms of Disk Storage
 Comparison of several
forms of disk storage
showing tracks.
Shankersinh Vaghela Bapu
Institute Of Technology 5

6. How data is Stored ?
 Data is stored into magnetic blocks which are in
sectors.
 Every time you format HDD, new layer is
created.
 With the increase of layers memory blocks are
also increased and it results to variations in data
transfer(Speed Decrease, Memory consumption
high).
Shankersinh Vaghela Bapu
Institute Of Technology 6

7. How Data Is Recovered?
 At the First time Low Level Format(LLF) is
performed on the hard disk, the disk’s platters
start out empty. That’s the last time the platters
will be empty for the life of the drive.
 If an LLF is done on a disk with data on it
already, the data is permanently erased.
 The type of formatting that most users are
familiar with is called high-level formatting and it
is the process of setting up an empty file system.
Shankersinh Vaghela Bapu
Institute Of Technology 7

8. How Data Is Recovered?
 Data stored on the hard drive is not physically
deleted during formatting.
 The hard drive is re-organized and the table with
information where files are stored is reset.
 As long as the file system and its settings remain
the same, none of the actual data previously
stored on the hard drive is deleted or overwritten
can subsequently be recovered.
Shankersinh Vaghela Bapu
Institute Of Technology 8

9. How Data Is Recovered?
 When Data is overwritten, the magnetic domains
on the HDD are re-magnetized.
 This is an irreversible process that physically
removes information previously stored in this
location.
 This would require the use of a Magnetic force
microscopy (MFM) or similar technologies, to
recover overwritten data successfully.
 There is no software or other technical way
known to the public that can restore overwritten
data. Shankersinh Vaghela Bapu
Institute Of Technology 9

10. Software For Data Recovery
 Stellar Phoenix Windows Data Recovery
 Stellar phoenix Linux Data Recovery
 Get Data Back-NTFS
 Get Data Back-FAT
Shankersinh Vaghela Bapu
Institute Of Technology 10

11. Operating Systems
 Helix:
- Helix is a Linux based forensics operating
system.
- It is combined system used to analyse the file
system and also generates the reports.
 Encase:
- It is also very rich utility designed for the
professionals.
Shankersinh Vaghela Bapu
Institute Of Technology 11

12. Real World Uses
 Average User:
 Recover important lost files
 Keep your private information private
 Law enforcement:
 Locate illegal data
 Restore deleted/overwritten information.
 Prosecute criminals based on discovered data
Shankersinh Vaghela Bapu
Institute Of Technology 12

13. Advantages
 Recover important data easily by using various
software.
 If you work for an organization than your data
should be most important and you need to
recover at any cost if it is lost.
 Recover your personal photo's, files and etc
which is precious to you.
Shankersinh Vaghela Bapu
Institute Of Technology 13

14. Disadvantages
 There is no surety that all of the lost data can be
recovered.
Shankersinh Vaghela Bapu
Institute Of Technology 14

15. Private Recovery Services
 Many private companies offer quick, secure, and
confidential data recovery:
 Computer Disk Service http://www.compdisk.com
 20 GB from $195.00
 46 GB and up – from $895.00
 Action Front http://www.datarec.com/
 External cases - $500 to $1500
 Internal cases -$2500 to $4000 for a single hard drive
 Critical Response services start at $5,000.
 Data Recovery Services -
http://www.datarecovery.net/
Shankersinh Vaghela Bapu
Institute Of Technology 15

16. References
 "Data Recovery Solutions". R3 Data Recovery. Retrieved 13 October 2012.
 "Computer Forensics Schools and Training" . Legal-Criminal-Justice-Schools.com. Retrieved 13
October 2012.
 Zeno, Keneth (27 September 2011). "How Does Data Recovery Work?" . Data Recovery Box.
Retrieved 29 February 2012.
 Secure Deletion of Data from Magnetic and Solid-State Memory , Peter Gutmann, Department of
Computer Science, University of Auckland
 Data Remanence in Semiconductor Devices , Peter Gutmann, IBM T.J. Watson Research Center
 Feenberg, Daniel (14 May 2004).
"Can Intelligence Agencies Read Overwritten Data? A response to Gutmann." . National Bureau
of Economic Research. Retrieved 21 May 2008.
 Data Removal and Erasure from Hard Disk Drives
 "Disk Wiping - One Pass is Enough" . Anti-Forensics. 17 March 2009.
 "Disk Wiping - One Pass is Enough - Part 2 (this time with screenshots)" . Anti-Forensics. 18
March 2009.
 Wright, Dr. Craig (15 January 2009). "Overwriting Hard Drive Data" .
 "Data Recovery Possible on Securely Erased SSDs" . Retrieved 22 November 2011.
Shankersinh Vaghela Bapu
Institute Of Technology 16

17. QUESTIONS?
Shankersinh Vaghela Bapu
Institute Of Technology 17