<p> Solid State Disks (SSDs) are reaching the point of being a practical replacement for traditional spinning media hard disk drives. With no moving parts and containing only semiconductor memory components, SSDs are faster and more reliable than spinning media drives but carry a price and size penalty. While the forensic analysis of the contents of spinning media drives is well understood and legally accepted, the increased complexity and autonomous actions of SSDs create serious challenges to the reliability of analysis on such devices. The limited lifespan and the slow erase times for blocks of memory have caused manufactures to create behavior that eliminates most forensic artifacts from unallocated space. Because of the autonomous actions of these intelligent devices, forensic analysis can produce different results in the absence of any user initiated changes. In a limited number of cases, data may still remain on an SSD's unallocated areas, but examiners should continue to focus on the allocated files and the rich set of information left behind there.</p>
| Identifer | oai:union.ndltd.org:PROQUEST/oai:pqdtoai.proquest.com:1555597 |
| Date | 18 June 2014 |
| Creators | Fulton, John William |
| Publisher | Utica College |
| Source Sets | ProQuest.com |
| Language | English |
| Detected Language | English |
| Type | thesis |
Page generated in 0.0013 seconds