Share Email Print

Proceedings Paper

Possibilities and modification of the forensic investigation process of solid-state drives
Author(s): Frank Irmler; Knut Kröger; Reiner Creutzburg
Format Member Price Non-Member Price
PDF $17.00 $21.00

Paper Abstract

This paper addresses the possibilities of a forensic investigation of solid-state drives. The aim of this study is to clarify information gained via a forensic analysis of these media, and explain the differences to conventional forensic examinations of hard disk drives. Within each test design a series and a variety of hard- and software were used. An interesting result is that the built-in TRIM function of the SSD has an adverse affect in a forensic investigation.

Paper Details

Date Published: 7 March 2013
PDF: 10 pages
Proc. SPIE 8667, Multimedia Content and Mobile Devices, 866714 (7 March 2013); doi: 10.1117/12.2004028
Show Author Affiliations
Frank Irmler, Brandenburg Univ. of Applied Sciences (Germany)
Knut Kröger, Brandenburg Univ. of Applied Sciences (Germany)
Reiner Creutzburg, Brandenburg Univ. of Applied Sciences (Germany)

Published in SPIE Proceedings Vol. 8667:
Multimedia Content and Mobile Devices
Reiner Creutzburg; Todor G. Georgiev; Dietmar Wüller; Cees G. M. Snoek; Kevin J. Matherson; David Akopian; Andrew Lumsdaine; Lyndon S. Kennedy, Editor(s)

© SPIE. Terms of Use
Back to Top
Sign in to read the full article
Create a free SPIE account to get access to
premium articles and original research
Forgot your username?