Potential difficulties during investigations due to solid state drive (SSD) technology

James Cox*, Peter Bednar

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

This paper discusses potential complications for Forensic Investigations due to the spread of Solid State Disc (SSD) technologies and influence of socio-technical factors. The discussion is drawing upon a study based on interviews with an experienced Forensic Investigator from Hampshire Constabularies Hi-Tech Crime Unit (HTCU), located in the United Kingdom. The goal of this study was to identify examples of what experienced forensic investigators believe the biggest drawbacks with examining SSDs are. Background case studies have been made in assistance to identify specific characteristics and features that may impact forensic investigations. Key characteristics include that SSD features may pose a threat as potential evidence can be rendered inaccessible; possibly impacting the case or project negatively. The main themes discussed in this paper are related to: Hardware-based encryption, Garbage Collection (GC), the TRIM command, Controller technology, SSD Interfaces, and SSD User needs. Socio-technical influences were acknowledged during the interviews with the Investigator, showing uncertainty to alternative Forensic methods. These themes have been scrutinized to identify how they impact and limit investigations.

Original languageEnglish
Title of host publicationOrganizing the Digital World
Subtitle of host publicationIT for Individuals, Communities and Societies
EditorsFederico Cabitza, Carlo Batini, Massimo Magni
PublisherSpringer Cham
Pages75-91
Number of pages17
Edition1st
ISBN (Electronic)9783319905037
ISBN (Print)9783319905020
DOIs
Publication statusPublished - 21 Aug 2019

Publication series

NameLecture Notes in Information Systems and Organisation
Volume28
ISSN (Print)2195-4968
ISSN (Electronic)2195-4976

Keywords

  • Digital forensic investigations
  • socio-technical
  • solid state drives (SSDs)

Fingerprint

Dive into the research topics of 'Potential difficulties during investigations due to solid state drive (SSD) technology'. Together they form a unique fingerprint.

Cite this