Hidden Disk Areas: HPA and DCO

نویسندگان

  • Mayank R. Gupta
  • Michael D. Hoeschele
  • Marcus K. Rogers
چکیده

This paper focuses on certain manufacturer hidden areas of a hard disk, specifically Host Protected Areas (HPA) and Device Configuration Overlays (DCO). These areas can be problematic for computer forensic investigators, since many of the common industry tools cannot detect the presence of the HPA and DCO. A review of the ATA specifications and recent white papers indicate that these areas can be accessed, modified, and written to by end users using specific open source and freely available tools, allowing data to be stored and/or hidden in these areas. This greatly increases the risk that image acquisitions may not be a true copy of the physical drive in question. This also could result in the obfuscation of data, leading to incomplete or erroneous investigative conclusions. The paper provides an introduction to these commonly used manufacturer areas and discusses their implication to the computer forensics investigative process. Suggestions for future study and testing are also provided.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Detection of DCO in a circumstellar disk

We report the first detection of DCO in a circumstellar disk. The DCO J=5–4 line at 360.169 GHz is observed with the 15m James Clerk Maxwell Telescope in the disk around the pre-main sequence star TW Hya. Together with measurements of the HCO and HCO J=4–3 lines, this allows an accurate determination of the DCO/HCO ratio in this disk. The inferred value of 0.035±0.015 is close to that found in ...

متن کامل

Deuterated molecules in DM Tau: DCO, but no HDO

We report the detection of the J=2-1 line of DCO in the proto-planetary disk of DM Tau and re-analyze the spectrum covering the 465 GHz transition of HDO in this source, recently published by Ceccarelli et al. (2005). A modelling of the DCO line profile with the source parameters derived from high resolution HCO observations yields a DCO/HCO abundance ratio of ≃ 4×10−3, an order of magnitude sm...

متن کامل

Resolving the Chemistry in the Disk of Tw Hydrae. I. Deuterated Species

We present Submillimeter Array observations of several deuterated species in the disk around the classical T Tauri star TW Hydrae at arcsecond scales, including detections of the DCN J 1⁄4 3Y2 and DCO J 1⁄4 3Y2 lines and upper limits to the HDO 31;2Y22;1, ortho-H2D 11;0Y11;1, and para-D2H 11;0Y10;1 transitions. We also present observations of the HCN J 1⁄4 3Y2, HCO J 1⁄4 3Y2, and HCO J 1⁄4 4Y3 ...

متن کامل

Communicating object group and protocols for distributed systems

Distributed communicating object groups, relevant algorithms and object communication protocols are presented. The distributed communicating object group system (called DCO) is built on the basis of hierarchy group communication protocols for networks. The system can be used as a speci®cation and design environment for distributed fault-tolerant object-oriented (OO) applications. By combining d...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:
  • IJDE

دوره 5  شماره 

صفحات  -

تاریخ انتشار 2006