Live Forensics Method for Acquisition on the Solid State Drive (SSD) NVMe TRIM Function
نویسندگان
چکیده
منابع مشابه
Vis: Virtualization Enhanced Live Forensics Acquisition for Native System
Live forensic is becoming one significant part in modern digital investigation. It is effective in obtaining criminal evidence which only exists in memory. Unfortunately, current efforts either fail to provide accurate acquisition of native system state at the given time point or require suspending the machine and altering the execution environment drastically. To address this issue, we propose...
متن کاملVis: Virtualization enhanced live forensics acquisition for native system
Focusing on obtaining in-memory evidence, current live acquisition efforts either fail to provide accurate native system physical memory acquisition at the given time point or require suspending the machine and altering the execution environment drastically. To address this issue, we propose Vis, a light-weight virtualization approach to provide accurate retrieving of physical memory content wh...
متن کاملEnabling TRIM Support in SSD RAIDs
Deploying solid state drives (SSDs) in RAID configurations can leverage the performance of persistent storage systems into a new dimension. However, the Achilles’ heel of SSDs and, therefore, also SSD RAIDs is their write performance, especially for small random requests. To prevent a degradation of the write throughput, it is important to maintain an adequate amount of free flash capacity. Thi...
متن کاملSSD: New Challenges for Digital Forensics
ICT changes continuously and we are used to look at IT in a slightly different way every year. Things are developed and manufactured to be smaller and faster but few changes are truly technologically revolutionary. Some changes creep up on us as they arrive under cover of previously known technology. Solid State Disks (SSD) is such a technology. The use of SSD is simple enough and for many purp...
متن کاملNVM express drives and digital forensics
This paper provides an overview of NVME technology and discusses the relevance to the digital forensics community. The NVM Express standard defines an interface and command set for communication between a host and non-volatile memory devices (SSD’s). It allows the direct attachment of SSD storage to the PCI Express bus using PCIe slots, M.2, and U.2 interfaces. NVME was developed with a new com...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Kinetik: Game Technology, Information System, Computer Network, Computing, Electronics, and Control
سال: 2020
ISSN: 2503-2267,2503-2259
DOI: 10.22219/kinetik.v5i2.1032