SSD Forensics: Evidence Generation and Analysis

Gibson, M.L.; Medina, Nicole; Nail, Zachary

doi:10.1007/978-3-030-23547-5_11

Cited by 4 publications

(3 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Digital forensics is a generic term for forensic techniques used for investigation by analyzing digital evidence. Recently, in connection with IoT devices, there is abundant research on digital forensics for NAND flash memory [15][16][17][18][19][20][21], which poses new questions about what the target of digital forensics in NAND flash memory is. Before defining this, though, it is first necessary to digitally grasp the concept of what original data is.…”

Section: Original Data In Nand Flash Memorymentioning

confidence: 99%

See 1 more Smart Citation

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

Ahn

Lee

2022

IEEE Access

View full text Add to dashboard Cite

NAND flash memory-based IoT device can potentially still leave behind original personal data in an invalid area even if the data has been deleted. In this paper, we raise the forensic issue of original data remaining in unmanaged blocks caused by NAND flash memory and introduce methods for secure deletion of such data in the invalid area. We also propose a verification technique for secure deletion that is performed based on cell count information, which refers to the difference in bits between personal data and data stored in the block. The pass/fail of the verification technique according to the cell count information is determined in consideration of error correction capabilities. With the forensic issue of de-identification being a vital theme in the big data industry, the threat of serious privacy breaches coupled with our proposal to prevent these attacks will prove to be critical technological necessities in the future.

show abstract

Section: Original Data In Nand Flash Memorymentioning

confidence: 99%

“…For this reason, NAND flash memory performs various internal operations to extend life span and improve performance. Related to these internal actions, studies on the dangers of forensics have recently been raised [15][16][17][18][19][20][21].…”

Section: Introductionmentioning

confidence: 99%

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

Ahn

Lee

2022

IEEE Access

View full text Add to dashboard Cite

show abstract

“…Disk forensics analyzes the structure of the disk and recovers deleted files that once existed in the hardware [6], [7]. Recently, since the main storage devices of computers mainly use SSD or flash memory, analysis techniques for these are the principal focus of research [8]. Disk forensics include USB Stick, CF Card, SD Card, eMMC, and UFS using NAND flash memory.…”

Section: Introductionmentioning

confidence: 99%

Forensics and Anti-Forensics of a NAND Flash Memory: From a Copy-Back Program Perspective

Ahn

Lee

2021

IEEE Access

View full text Add to dashboard Cite

This paper proposes a safe copy-back program operation in a NAND flash memory, which is targeting digital forensics for a variety of reasons. Due to the background management operation of the NAND flash memory, the original data is highly likely to remain without truly being deleted. We have carefully investigated the possibility of data exposure due to a copy-back program operation, among, frequently used management operations as such data exposure increases the possibility of privacy invasion. We propose a safe copy-back program operation that lowers the possibility of privacy invasion. And we additionally introduce various techniques for solving the reliability problem of adjacent cells caused by the proposed copy-back program operation. For example, when deleting the original data in a copy-back program operation, overwriting is performed to minimize program disturbance. Also, after acquiring the victim cell information of the adjacent cell before proceeding with overwriting, program prohibition is determined on each page buffer based on the victim cell information. Our research results are meaningful for forensics and anti-forensics issues to be raised regarding NAND flash memories. We look forward to the development of NAND flash memories that guarantee privacy in subsequent studies.

show abstract

Comparing HDD to SSD from a Digital Forensic Perspective

Jazzar

Hamad

2022

Algorithms for Intelligent Systems

View full text Add to dashboard Cite

SSD Forensics: Evidence Generation and Analysis

Cited by 4 publications

References 4 publications

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

Forensics and Anti-Forensics of a NAND Flash Memory: From a Copy-Back Program Perspective

Comparing HDD to SSD from a Digital Forensic Perspective

Contact Info

Product

Resources

About