Loading presentation...

Present Remotely

Send the link below via email or IM

Copy

Present to your audience

Start remote presentation

  • Invited audience members will follow you as you navigate and present
  • People invited to a presentation do not need a Prezi account
  • This link expires 10 minutes after you close the presentation
  • A maximum of 30 users can follow your presentation
  • Learn more about this feature in our knowledge base article

Do you really want to delete this prezi?

Neither you, nor the coeditors you shared it with will be able to recover it again.

DeleteCancel

Make your likes visible on Facebook?

Connect your Facebook account to Prezi and let your likes appear on your timeline.
You can change this under Settings & Account at any time.

No, thanks

Solid State Drives in Digital Forensics

No description
by

Susan Walsh

on 28 April 2015

Comments (0)

Please log in to add your comment.

Report abuse

Transcript of Solid State Drives in Digital Forensics

Roadmap
Description
History of SSD
Current State
Future of SSD
Conclusion
Description
Flash memory chips
wear out
data written in blocks not sectors
1976-2014
Current State
Digital Forensics methods are not designed for SSDs.
Modern SSDs:
Wear Leveling
TRIM
Unallocated files are 100% unrecoverable if a quick format is performed
Some data recoverable, but no guarantee
Future of SSD
As time progresses SSD Nand chips will become faster and cheaper
SSDs will make their way into cheaper laptops
SSD firmware - Trim or no trim?
Conclusion
Digital forensics relies on being able to recover deleted data
Methods are designed for mechanical drives
Trim command means that once you "delete" files they are at risk of being zeroed within minutes.
SSDs are a serious problem for computer investigations today
Solid State Drives in Digital Forensics
Questions???
Innovative storage architecture
block re-use
trim command
The 1st SSD
Current State
19inx16in
2 MB of storage
$9700 in 1977 (equivalent to >$36000)
HDD cost:
1TB - $53 ($.05/GB)
3TB - $101 ($.03/GB)
SSD cost:
120GB - $60 ($.50/GB)
240GB - $90 ($.38/GB)
SSDs are steadily dropping in price
In January 2012 120GB SSD was $235
1st Flash SSD (1988)
Flashdisk- first SSD to use flash memory
Plug in board for IBM PCs
16MB data
$5000
1st Modern SSD Flash Drives
3-5inches
Still thousands of dollars (1995)
aeronautical and military
1st Cheap SSD (2003)
1st commonly available SSD to consumers
16MB-512MB
as low as $50
Problem for forensics investigators
History of SSD
Example Case
Example Case
Two Australian computer forensics experts
Paper investigating how Trim affects the ability to collect data in SSDs
Example Case
Full transcript