Retrieved from https://studentshare.org/information-technology/1687790-nftsexfs2extfs3
https://studentshare.org/information-technology/1687790-nftsexfs2extfs3.
Journaling File Systems due: Journaling File Systems Journaling file systems areinspired by techniques applied in the design of a database that preserve database consistency. In a journaling file system, the storage device is treated as an unbound linear array of blocks. In the array of blocks, a journal is kept that records information about every update to the file system. The update information is sufficient for replaying each update, and ensures that the update is complete resulting in a consistent file system.
File system such as ext3 contains journaling features which guarantee the safety of data after unexpected shutdowns. NTFS, on the other hand, is very useful in the event where file systems are needed in sharing files with newer Windows systems. Advantages of journalingJournaling improves data integrity and recovery, especially after unclean system shutdowns. This avoids file system checks which take so long during the next reboot following an unintended shutdown. This is because the changes that occurred since the most recent write to disk are saved and ready to be restored.
Journaled file systems guarantee fast crash recovery. The journaled file system also makes it faster to scan a partition and restore a system once the system has failed, unlike non-journaled file systems that take so long. Journaled file system also ensures better performance. A journaled file system is faster due to its codes that are highly optimized (Negus & Caen, 2008).DisadvantagesJournaled file systems are usually slower than other file systems. The slowdown is a result of the many operations that have to be performed on the journal every time there is a file system change (EMC Education Services, 2012).
Application in forensicsJournaled file systems such as Ext.3 have become important especially in Linux distributions, and knowledge of the file system is applied in recovering evidence such as deleted files and file activity. A forensic investigator will, therefore, use the first mode, called the journal to obtain the information pertaining to the activity of the file system. This facilitates the recovery of file content, with an added advantage of recovering metadata activity on the file system (Easttom, 2011).
In conclusion, journaling of file systems has proved to offer more advantages, thus the suitability in forensics and investigations. Its suitability in the restoration of systems after unintended shutdowns has been a great success.ReferencesEasttom, C. (2011). Computer crime, investigation, and the law. Cengage Learning.EMC Education Services. (2012). Information storage and management: Storing, managing, and protecting digital information in classic, virtualized, and cloud environments. Hoboken: John Wiley & Sons.Negus, C., & Caen, F. (2008). Fedora Linux toolbox: 1000+ commands for Fedora, CentOS, and Red Hat power users.
Indianapolis, IN: Wiley.
Read More