Recovery of intact but previously deleted digital files is a staple of data recovery services and digital forensics investigations. Although more challenging, the recovery and analysis of fragments from deleted files remains an active area of research and application. In this work, we study the decay of MP3 formatted audio files on a portable voice recorder with internal flash storage, and we recover usable audio fragments. Our approach captures media snapshots over time, then analyzes them to measure deleted file decay. Our results in this work and elsewhere indicate that fragments of deleted files are (a) surprisingly persistent, (b) recoverable, and (c) interpretable. This work is relevant for law enforcement, the intelligence community, and data recovery specialists.

Author: Jones, James
Affiliation: George Mason University, Fairfax, VA, USA
AES Conference: 2017 AES International Conference on Audio Forensics (June 2017)
Paper Number: 1-7
Publication Date: June 6, 2017
Subject: Authentication

Download Now (1.3 MB)

This paper is Open Access which means you can download it for free.

No AES members have commented on this paper yet.

Subscribe to this discussion

To be notified of new comments on this paper you can subscribe to this RSS feed. Forum users should login to see additional options.

Start a discussion!

If you would like to start a discussion about this paper and are an AES member then you can login here:
Username:
Password:

If you are not yet an AES member and have something important to say about this paper then we urge you to join the AES today and make your voice heard. You can join online today by clicking here.