The Linux Kernel and the Forensic Acquisition of Hard Discs with an Odd Number of Sectors
نویسنده
چکیده
No official version of the Linux kernel, up through and including version 2.4, allowed a user land process to access the last sector of a hard disk or hard disk partition with an odd number of sectors. Although the inability to access this last sector did not affect normal operation of the system, it did prevent the complete forensic acquisition of such a disk. The author repeats an earlier experiment to verify the issue in version 2.4 of the kernel and then shows that the issue has been resolved in version 2.6. Systems using version 2.6 of the Linux kernel can completely forensically acquire disks or partitions with an odd number of sectors.
منابع مشابه
Improving Super-resolution Techniques via Employing Blurriness Information of the Image
Super-resolution (SR) is a technique that produces a high resolution (HR) image via employing a number of low resolution (LR) images from the same scene. One of the degradations that attenuates performance of the SR is the blurriness of the input LR images. In many previous works in the SR, the blurriness of the LR images is assumed to be due to the integral effect of the image sensor of the im...
متن کاملUsing Matlab-simulink Rtw to Build Real Time Control Applications in User Space with Rtai-lxrt
The paper presents a hard real time Linux environment that can be effectively used to design and implement data acquisition and digital control systems, integrating the functionality of the MATLAB/ Simulink/ Real-Time-Workshop suite and RTAI, a freeware hard real time extension for Linux. The development process requires only the ability to use the cited MATLAB suite, almost without any knowled...
متن کاملRobust Linux memory acquisition with minimal target impact
Software based Memory acquisition on modern systems typically requires the insertion of a kernel module into the running kernel. On Linux, kernel modules must be compiled against the exact version of kernel headers and the exact kernel configuration used to build the currently executing kernel. This makes Linux memory acquisition significantly more complex in practice, than on other platforms d...
متن کاملInvestigation of the Factors Affecting on Probability of Company Acquisition (Focusing on Refining and Petrochemical Companies)
Business expansions along with number of new companies being engaged in variety of industries aimed at getting bigger market share, underscored the role of corporate governance within the financial sphere. One of the important issues in corporate governance is acquisition. Due to the significant impact of companies in refining and petrochemical sectors on capital market and whole economy, their...
متن کاملUse of a Two-Channel Moiré Wavefront Sensor for Measuring Topological Charge Sign of the Vortex Beam and Investigation of Its Change Due to an Odd Number of Reflections
One of the solutions of the Helmholtz equation is the vortex beams. In the recent decades, production and applications of these types of beams have found serious attentions. Determination of the vortex beam topological charge and its sign are very important issues. Odd number of reflections of the vortex beam changes its vorticity. In this paper, we have used a q-plate to generate a vortex beam...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید
ثبت ناماگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید
ورودعنوان ژورنال:
- IJDE
دوره 3 شماره
صفحات -
تاریخ انتشار 2004