Title: Proposal of Unified Data Management and Recovery Tool Using Shadow Copy

Year of Publication: Sep - 2016
Page Numbers: 54-60
Authors: Naoki Matsutaka, Masato Eguchi, Takuya Okazaki, Tahashi Matsumoto, Tetsutaro Uehara, Ryoichi Sasaki
Conference Name: The Third International Conference on Digital Security and Forensics (DigitalSec2016)
- Malaysia


In recent years, solid state drives (SSD) have started to replace hard disk drives. A SSD is a high-speed storage device with a TRIM function. However, a SSD cannot restore deleted files. Therefore, the user is required to back up data for protection. The Volume Shadow Copy Service by Microsoft is often recommended for backups. Although Shadow Copy has tools for backup, the tools involve complicated methods of operation. In addition, Shadow Copy does not have enough implemented functions. Therefore, we propose a unified tool named ShadowBox, which easily helps typical users to create a shadow copy and to restore data from Shadow Copy. In addition, we discuss the protection of Shadow Copy from attacks due to malicious persons and ransomware.