Home   >   CSC-OpenAccess Library   >    Manuscript Information
Full Text Available

(154.45KB)
This is an Open Access publication published under CSC-OpenAccess Policy.
Publications from CSC-OpenAccess Library are being accessed from over 74 countries worldwide.
A Survey On Solid-State Drive Forensic Analysis Techniques
Avinash Kumar, Ashar Neyaz, Narasimha Karpoor Shashidhar
Pages - 13 - 21     |    Revised - 30-04-2020     |    Published - 01-06-2020
Volume - 14   Issue - 2    |    Publication Date - June 2020  Table of Contents
MORE INFORMATION
KEYWORDS
Solid-state Drives (SSD), Digital Forensics, Flash Memory, SRAM, DRAM.
ABSTRACT
Solid-state drives (SSD) are predominantly being used as storage devices these days, which uses flash memory to store data. Most digital devices like desktop computers, laptops, tablets, smart phones use SSDs. Unlike traditional hard drives, it is comparably harder to recover deleted data from SSDs, which consequently impacts digital investigations detrimentally. Digital forensic researchers have come up with several strategies to acquire evidence from solid-state drives while maintaining the integrity of the device. In this paper, we present the latest forensic techniques and ideas presented in the literature in the field of solid-state drive forensics.
1 G.B. Bell, R. Boddington. "Solid State Drives: The Beginning of the End for Current Practice in Digital Forensic Recovery?". The Journal of Digital Forensics Security and Law, Volume 5, Number 3, 2010.
2 A. Nisbet, S. Lawrence, M. Ruff. "A forensic analysis and comparison of solid state drive data retention with trim enabled file systems." SRI Security Research Institute, Edith Cowan University, Perth, Western Australia, 2013.
3 C. King, T. Vidas. "Empirical analysis of solid state disk data retention when used with contemporary operating systems". In Proceedings of the eleventh annual DFRWS conference, Aug 2011, New Orleans, LA. p. S111-7.
4 C. J. Antonellis. "Solid state disks and computer forensics". ISSA Journal, pages 36-38, 2008.
5 G. Bonetti, M. Viglione, A. Frossi, F. Maggi, and S. Zanero. "A comprehensive black-box methodology for testing the forensic characteristics of solid-state drives". In Proceedings of the 29th Annual Computer Security Applications Conference, ACM, 2013, 269-278.
6 S.S.R. Marupudi. "Solid State Drive: New Challenge for Forensic Investigation". Culminating Projects in Information Assurance. 2017, 30.
7 P. Bednar, V. Katos, "SSD: New Challenges for Digital Forensics", ItAIS 2011, Proceedings of the 8th Conference of the Italian Chapter of the Association for Information Systems In Information Systems.
8 Z. Shah, A.N. Mahmood, J. Slay. "Forensic Potentials of Solid State Drives". In: Tian J., Jing J., Srivatsa M. (eds) International Conference on Security and Privacy in Communication Networks. SecureComm 2014. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 153. Springer, Cham.
9 J.W. Fulton. "Solid State Disk Forensics: Is there a Path Forward?" Utica College, May 2014. Web. 9 Oct 2015.
10 B.R. Joshi, R. Hubbard. "Forensics analysis of solid state drive (SSD)". In Proceedings of Universal Technology Management Conference, Omaha (2016).
11 A. Aldaej, M.G. Ahamad, M.Y. Uddin, "Solid state drive data recovery in open source environment". Proc. Int. Conf. Anti-Cyber Crimes (ICACC), pp. 228-231, Mar. 2017.
12 A. Neyaz, N. Shashidhar, U. Karabiyik. "Forensic Analysis of Wear Leveling on Solid-State Media". In 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/12th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE), 2018, pp. 1706-1710. IEEE.
13 A. Neyaz, B. Zhou, N. Shashidhar. "Comparative Study of Wear-leveling in Solid-State Drive with NTFS File System". In IEEE International Conference on Big Data (Big Data), 2019, pp. 4294-4298.IEEE.
14 B. Singh, R. Saharan, G. Somani, G. Gupta. "Secure file deletion for solid state drives". In IFIP International Conference on Digital Forensics, 2016, pp. 345-362.Springer,Cham.
15 C. Mao. "SDD TRIM Operations: Evaluation and Analysis" Site. Natinal Chiao Tung University, July 2013. Web. 9 Oct 2015.
16 I. Mitchell, T. Anandaraja, G. Hadzhinenov, S. Hara, D. Neilson. "Deconstruct and preserve (DaP): A method for the preservation of digital evidence on solid state drives (SSD)". In Global Security, Safety and Sustainability - The Security Challenges of the Connected World, 2017.
Mr. Avinash Kumar
Department of Computer Science, Sam Houston State University, Huntsville - United States of America
avinash@shsu.edu
Mr. Ashar Neyaz
Department of Computer Science, Sam Houston State University, Huntsville - United States of America
Dr. Narasimha Karpoor Shashidhar
Department of Computer Science, Sam Houston State University, Huntsville - United States of America