A Study of Forensic Imaging to Evaluate “Unsanitized” Destination Storage Media

View Sample PDF

Author(s): Gregory H. Carlton (California State Polytechnic University, Pomona, USA)and Gary C. Kessler (Embry-Riddle Aeronautical University, Daytona Beach, USA)
Copyright: 2020
Pages: 7
Source title: Digital Forensics and Forensic Investigations: Breakthroughs in Research and Practice
Source Author(s)/Editor(s): Information Resources Management Association (USA)
DOI: 10.4018/978-1-7998-3025-2.ch023

Keywords: Criminal Science and Forensics / Digital Crime & Forensics / Information Science Reference / Security & Forensics

Purchase

View A Study of Forensic Imaging to Evaluate “Unsanitized” Destination Storage Media on the publisher's website for pricing and purchasing information.

Abstract

Best practices in digital forensics include a procedure to sanitize media on which forensic images will be stored, thus eliminating potential challenges that contamination of the evidence may occur due to data that exist on the media prior to storing forensic images. This article describes a research project to empirically evaluate the extent to which wiping destination storage media affects evidence. The authors specifically address whether the contents of forensic images differ in any way when written to a freshly wiped and formatted medium when compared to the images being written to a similar medium that had been populated with data and not wiped. They performed these experiments on different types of storage devices.

The IRMA Community

Research IRM

A Study of Forensic Imaging to Evaluate “Unsanitized” Destination Storage Media

Purchase

Abstract

Related Content

IRMA Sponsors