Solid state drive data recovery in open source environment

Abdulaziz Aldaej, Mohammad Gulam Ahamad, Mohammad Yousuf Uddin

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

6 Scopus citations

Abstract

Data recovery process for magnetic hard disk drives has remained forensic friendly for digital investigation team. Since solid state drive (SSD) with transistor based storage started gaining popularity among desktop and laptop users, it has become challenging to recover data from SSD, due to its implementation of background garbage collection and wear leveling and TRIM command which sanitizes the disk in few seconds. In this paper we experiment and analyses the data recovery from solid state drive in an open source test environment, sample data of multiple file format is copied in to two partitions, data from first partition (sdc1) is deleted and second partition (sdc2) is formatted. Data recovery is performed in two different approaches one is directly from the disk drive and the other is imaging the SSD and recovering the data from image. Results shown that data recovery partition-wise from disk image is extracting more data.

Original languageEnglish
Title of host publication2017 2nd International Conference on Anti-Cyber Crimes, ICACC 2017
EditorsSalem Alelyani, Fahad Alahmari, Ali Aseere, Justin Varghese, Amjad M. Mohanna, Adnan Mustafa AlBar, Nasser Tairan
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages228-231
Number of pages4
ISBN (Electronic)9781509058136
DOIs
StatePublished - 19 Apr 2017
Event2nd International Conference on Anti-Cyber Crimes, ICACC 2017 - Abha, Saudi Arabia
Duration: 26 Mar 201727 Mar 2017

Publication series

Name2017 2nd International Conference on Anti-Cyber Crimes, ICACC 2017

Conference

Conference2nd International Conference on Anti-Cyber Crimes, ICACC 2017
Country/TerritorySaudi Arabia
CityAbha
Period26/03/1727/03/17

Keywords

  • data recovery
  • digital investigation
  • files carving
  • Solid state drive

Fingerprint

Dive into the research topics of 'Solid state drive data recovery in open source environment'. Together they form a unique fingerprint.

Cite this