Data recovery from damaged electronic memory devices
نویسندگان
چکیده
High value crime involving mobile phones sometimes require examination of highly damaged, possibly exploded devices, currently beyond the capabilities of existing methods. In the pursuit of a forensically sound method to examine damaged memory devices we are investigating a number of techniques to access and analyse samples. Backside processing involving lapping steps, followed by a BOE / TMAH etch is used to access the underside of the bare die, allowing scanning probe techniques, such as Scanning Kelvin Probe Microscopy (SKPM), to examine the charges held on individual floating gate transistors. Despite various remaining challenges and possible techniques to be investigated, this methodology is proving promising for the development of a viable forensic tool.
منابع مشابه
Improving the reliability of chip-off forensic analysis of NAND flash memory devices
Digital forensic investigators often need to extract data from a seized device that contains NAND flash memory. Many such devices are physically damaged, preventing investigators from using automated techniques to extract the data stored within the device. Instead, investigators turn to chip-off analysis, where they use a thermal-based procedure to physically remove the NAND flash memory chip f...
متن کاملLogical recovery from single-page failures
Modern hardware technologies and ever-increasing data sizes increase probability and frequency of local storage failures, e.g., unrecoverable read errors on individual disk sectors or pages on flash storage. Our prior work has formalized singlepage failures and outlined efficient methods for their detection and recovery. These prior techniques rely on old backup copies of individual pages, e.g....
متن کاملData Recovery from Windows CE Based Handheld Devices
Data hiding creates serious problems for digital forensic practitioners attempting to recover evidence. It is possible to conceal large amounts of sensitive data in handheld devices in a manner that prevents their recovery using standard forensic tools. This paper describes a technique for recovering data stored in the slack memory of Windows CE based devices. A case study involving data hiding...
متن کاملRetention of data in heat-damaged SIM cards and potential recovery methods.
Examination of various SIM cards and smart card devices indicates that data may be retained in SIM card memory structures even after heating to temperatures up to 450 degrees C, which the National Institute of Standards and Technology (NIST) has determined to be approximately the maximum average sustained temperature at desk height in a house fire. However, in many cases, and certainly for temp...
متن کاملSecond-harmonic magnetoresistive imaging to authenticate and recover data from magnetic storage media
A scanning magnetoresistive (MR) microscope is developed for high-resolution imaging of magnetic tapes and digital media. Second-harmonic detection is used to remove thermal anomalies. We are able to image sufficient lengths of tape for authentication purposes and for data recovery from damaged samples. The second-harmonic technique provides high-contrast magnetic images of the magnetic storage...
متن کامل