Schneider J, Eichhorn M, Dreier LM, Hargreaves CJ (2024)
Publication Type: Journal article, Original article
Publication year: 2024
Book Volume: 49
Pages Range: 1-11
URI: https://www.sciencedirect.com/science/article/pii/S2666281724000805
DOI: 10.1016/j.fsidi.2024.301761
Open Access Link: https://doi.org/10.1016/j.fsidi.2024.301761
Previous work has shown that second-hand or even new devices with
recycled components can contain remnants of old data. Given a situation
where incriminating evidence is found in non-allocated space of such a
device, this presents an attribution problem. In archaeology or geology,
stratigraphy studies the arrangement of strata, or layers, often used
as a dating technique based on the premise that newer layers are
situated above older layers. The digital stratigraphy technique applies
the concept to digital forensics and considers how data is positioned
and overlayed on disk to make inferences about when data was created.
This research investigates the extent to which this technique could
resolve the data provenance challenge associated with recycled digital
storage media. This paper presents an automated file system activity
simulation framework that allows creation, deletion and modification
actions to be carried out at scale using specific file system drivers.
Using this tool, a series of experiments are carried out to gain an
understanding of file system driver behaviour and address this practical
question of provenance of data in non-allocated space.
APA:
Schneider, J., Eichhorn, M., Dreier, L.M., & Hargreaves, C.J. (2024). Applying digital stratigraphy to the problem of recycled storage media. Forensic Science International: Digital Investigation, 49, 1-11. https://doi.org/10.1016/j.fsidi.2024.301761
MLA:
Schneider, Janine, et al. "Applying digital stratigraphy to the problem of recycled storage media." Forensic Science International: Digital Investigation 49 (2024): 1-11.
BibTeX: Download