Applying digital stratigraphy to the problem of recycled storage media

Schneider J, Eichhorn M, Dreier LM, Hargreaves CJ (2024)

Publication Language: English

Publication Type: Conference contribution, Conference Contribution

Publication year: 2024

Publisher: Elsevier

Series: DFRWS USA 2024 - Selected Papers from the 24th Annual Digital Forensics Research Conference USA

Book Volume: 49

Conference Proceedings Title: Forensic Science International: Digital Investigation

Event location: Baton Rouge US

URI: https://www.sciencedirect.com/science/article/pii/S2666281724000805

DOI: 10.1016/j.fsidi.2024.301761

Open Access Link: https://www.sciencedirect.com/science/article/pii/S2666281724000805

Abstract

Previous work has shown that second-hand or even new devices with recycled components can contain remnants of old data. Given a situation where incriminating evidence is found in non-allocated space of such a device, this presents an attribution problem. In archaeology or geology, stratigraphy studies the arrangement of strata, or layers, often used as a dating technique based on the premise that newer layers are situated above older layers. The digital stratigraphy technique applies the concept to digital forensics and considers how data is positioned and overlayed on disk to make inferences about when data was created. This research investigates the extent to which this technique could resolve the data provenance challenge associated with recycled digital storage media. This paper presents an automated file system activity simulation framework that allows creation, deletion and modification actions to be carried out at scale using specific file system drivers. Using this tool, a series of experiments are carried out to gain an understanding of file system driver behaviour and address this practical question of provenance of data in non-allocated space.

Authors with CRIS profile

Janine Schneider Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Maximilian Eichhorn Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Lisa Marie Dreier Graduiertenkolleg 2475 Cyberkriminalität und Forensische Informatik

Involved external institutions

University of Oxford GB United Kingdom (GB)

How to cite

APA:

Schneider, J., Eichhorn, M., Dreier, L.M., & Hargreaves, C.J. (2024). Applying digital stratigraphy to the problem of recycled storage media. In Elsevier (Eds.), Forensic Science International: Digital Investigation. Baton Rouge, US: Elsevier.

MLA:

Schneider, Janine, et al. "Applying digital stratigraphy to the problem of recycled storage media." Proceedings of the DFRWS USA 2024, Baton Rouge Ed. Elsevier, Elsevier, 2024.

BibTeX: Download