- Practical Mobile Forensics
- Rohit Tamma Oleg Skulkin Heather Mahalik Satish Bommisetty
- 244字
- 2021-06-24 16:39:04
The APFS structure
So, APFS is structured in a single container that may contain one or more volumes. The APFS structure is presented in the following diagram:
Overview of the APFS structure
Each filesystem structure in APFS starts with a block header. The block header starts with a checksum (Fletcher's checksum algorithm is used) for the whole block and also contains the copy-on-write version of the block, the block ID, and the block type.
The APFS structure can be explained as follows:
- The Container Superblock contains information on the block size, the number of blocks and pointers to the space manager for this task, the block IDs of all volumes, and a pointer to a block map B-Tree (which contains entries for each volume, along with its ID and offset).
- Nodes are used for storing different kinds of entries. They can be part of a B-Tree or exist on their own and can contain either flexible or fixed-sized entries.
- The Space Man(ager) manages the allocated blocks in the APFS container, and stores the number of free blocks and a pointer to the Allocation Info File.
- The Allocation Info File stores the allocation file's length, version, and the offset.
- The B-Trees manage multiple nodes and contain the offset of the root node.
- A Volume Superblock contains the name of the volume, its ID, and a timestamp.
As for allocation files, they are simple bitmaps and do not have a block header and type ID.
推薦閱讀
- Extending Symfony2 Web Application Framework
- DevSecOps敏捷安全
- 安全技術(shù)運營:方法與實踐
- 軟件開發(fā)安全之道:概念、設(shè)計與實施
- 同態(tài)密碼學原理及算法
- 模糊測試:強制發(fā)掘安全漏洞的利器
- 數(shù)據(jù)安全與隱私計算(第3版)
- 軟件安全保障體系架構(gòu)
- Instant Java Password and Authentication Security
- 信息安全導論(第2版)
- 網(wǎng)絡(luò)安全態(tài)勢感知
- 持續(xù)集成:軟件質(zhì)量改進和風險降低之道
- Mastering Malware Analysis
- 隱私保護機器學習
- 一本書讀透金融科技安全