摘要:在国民经济和社会信息化推进的过程中,政府、军队、企业以及个人越来越多关注的时信息的安全。信息安全的核心是数据的安全。黑客、病毒、误操作、存储介质的质量缺陷等众多因素都在威胁着数据的安全。数据一旦损坏或丢失,其损失往往无法用金钱来衡量。而在实际工作中又很难避免出现数据损坏与丢失现象。因此,数据恢复技术、数据恢复服务需求飙升。由于FAT32文件系统渐渐淡出应用范围,NTFS文件系统逐步发展替代。而且国内对于数据软恢复这方面的研究虽然较深但是与国外仍然有一定距离的差距。随着信息化进程的不断推进,人类对信息资源的依赖程度的不断增长,息设备的普及应用,随着淘汰、损坏设备的增多,信息毁损和窃取手段的增多,数据恢复技术将日益显示出其重要性。因而本课题提出的NTFS文件系统数据恢复软件也会在这一趋势中有广泛的应用。35019 毕业论文关键词:NTFS文件系统;MFT记录;文件属性;数据
Design of NTFS file system data recovery software
Abstract:In the national economy and promote the process of social informatization, the government, army, enterprise and inpidual more and more attention to information security. Data security is the key of Information security. Hackers, viruses, wrong operation, storage medium quality defects, and many other factors are threatening the security of data. Once the data damage or loss, the loss is often unable to use money to measure. But in the actual work and it is difficult to avoid even the appearance of data damage and loss. Therefore, data recovery technology, data recovery service demand to soar. Due to the FAT32 file system gradually fade out application scope, it will gradually develop alternative by NTFS file system.And domestic in recovering the research data of soft though deep and abroad still has certain gap distance. With the advancement of information process, human the growing of the dependence of information resources, interest and equipment to popularize and apply, along with the increase in elimination, damage to equipment, information is damaged and stolen means increasing, data recovery technology will increasingly shows its importance. So this topic put forward by the NTFS file system data recovery software will also have a wide range of applications in the trend.
Keywords: NTFS file system; MFT record; File Attribute; Data
目录
1. 绪论 4
2. 数据的表示和存储结构 6
2.1. 数据的表示方法 6
2.1.1. 进位计数制 6
2.1.2. 二进制 7
2.1.3. 数据的单位 7
2.1.4. 定点数的表示方法 8
2.2. 数据存储的字节序与位序 9
2.2.1. Endian的含义 9
2.2.2. Little-endian的含义 9
2.2.3. Big-endian的含义 10
2.2.4. NTFS数据的存储结构 10
2.2.5. 硬盘的逻辑结构 10
3. NTFS文件系统 13
3.1. NTFS 文件系统介绍 13
3.2. NTFS 文件系统结构总览 14
4. NTFS 文件系统分析 17
4.1. NTFS 文件系统引导扇区分析 17
4.2. 元文件 18
4.2.1.NTFS 文件系统的元文件 18
4.3. $MFT元文件 19
4.3.1. 文件记录分析 20
4.3.2. 10H属性分析 25
4.3.3. 20H属性分析 27
4.3.4. 30H属性分析 28
4.3.5. 40H属性分析 29
4.3.6. 50H属性分析 30