Research of Word 2007 File Carving
Ming Zhou Xu · Journal of Hangzhou Dianzi University · 2012
Microsoft Word is in a dominant position in the market of the word-processing products.It becomes one of the most important source to the digital forensics.Therefore,the study on carving technology for Word file is very important.This paper proposes a Word 2007 file carving algorithm.This method makes use of the structure and content characteristic of Word 2007 file and combines with the existing carving technology,presents the settlement of carving problem including local-bifragment in Word 2007 file and non-critical parts of Word 2007 file data damage or loss.In the paper,comparative experiments on real world data set show that the carving algorithm has superiority than other similar algorithms.In summary,the paper presents Word file carving algorithms and authenticity verifying method which have been proved the feasibility and effectiveness by the experiments.These research achievements not only provide new approach for file carving technology in further development,but also construct the foundation for implementing practical file carving system.