On the Recoverability of Data in Android YAFFS2

With the popularity of mobile devices, especially Android devices, digital forensics have become a hot issue. In digital forensics, data recoverability is one of the most important problems and has drawn increasingly more attention. This is because data may contain the information about important events, making it indispensable digital evidence. In this paper, according to some special characteristics of YAFFS2, we discuss the possibility of recovering multiple versions of YAFFS2 files and then propose a method to recover multiple versions of YAFFS2 files. To verify the effectiveness of our proposed method, we perform some experiments to show that our method is more effective on the recovery of multiple versions of files than some other existing methods.