CRITERIA FOR VALIDATING SECURE WIPING TOOLS - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2015

CRITERIA FOR VALIDATING SECURE WIPING TOOLS

Résumé

The validation of forensic tools is an important requirement in digital forensics. The National Institute of Standards and Technology has defined standards for many digital forensic tools. However, a standard has not yet been specified for secure wiping tools. This chapter defines secure wiping functionality criteria for NTFS specific to Windows 7 and magnetic hard drives. The criteria were created based on the remnants of user actions – file creation, modification and deletion – in $MFT records, the $LogFile and the hard disk. Of particular relevance is the fact that the $LogFile, which holds considerable forensic artifacts of user actions, is not wiped properly by many tools. The use of the proposed functionality criteria is demonstrated in an evaluation of the Eraser secure wiping tool.
Fichier principal
Vignette du fichier
978-3-319-24123-4_19_Chapter.pdf (286.9 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01449066 , version 1 (30-01-2017)

Licence

Identifiants

Citer

Muhammad Sharjeel Zareen, Baber Aslam, Monis Akhlaq. CRITERIA FOR VALIDATING SECURE WIPING TOOLS. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. pp.321-339, ⟨10.1007/978-3-319-24123-4_19⟩. ⟨hal-01449066⟩
120 Consultations
362 Téléchargements

Altmetric

Partager

More