“…Different from MFR, CFR does not rely on metadata. It leverages syntactic signatures (e.g., file header-footer pairs) (Tang et al, 2016), semantic structures (e.g., explicit control flow paths within a binary executable) (Hand et al, 2012), heuristic technologies (Garfinkel & McCarrin, 2015;Gladyshev & James, 2017;Pal et al, 2008), timestamps (Nordvik et al, 2020;Portera et al, 2021) or deep learning technologies (Heo et al, 2019;Mohammad & Alqahtani, 2019) to restore files. Unlike MFR, which can precisely recover a file under the "direct guidance" of metadata, CFR "indirectly infers" which data blocks belong to the file to be recovered.…”