CRITERIA FOR VALIDATING SECURE WIPING TOOLS

Abstract : The validation of forensic tools is an important requirement in digital forensics. The National Institute of Standards and Technology has defined standards for many digital forensic tools. However, a standard has not yet been specified for secure wiping tools. This chapter defines secure wiping functionality criteria for NTFS specific to Windows 7 and magnetic hard drives. The criteria were created based on the remnants of user actions – file creation, modification and deletion – in $MFT records, the $LogFile and the hard disk. Of particular relevance is the fact that the $LogFile, which holds considerable forensic artifacts of user actions, is not wiped properly by many tools. The use of the proposed functionality criteria is demonstrated in an evaluation of the Eraser secure wiping tool.
Type de document :
Communication dans un congrès
Gilbert Peterson; Sujeet Shenoi. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. IFIP Advances in Information and Communication Technology, AICT-462, pp.321-339, 2015, Advances in Digital Forensics XI. 〈10.1007/978-3-319-24123-4_19〉
Liste complète des métadonnées

Littérature citée [8 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01449066
Contributeur : Hal Ifip <>
Soumis le : lundi 30 janvier 2017 - 09:13:33
Dernière modification le : vendredi 1 décembre 2017 - 01:16:44

Fichier

978-3-319-24123-4_19_Chapter.p...
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Muhammad Zareen, Baber Aslam, Monis Akhlaq. CRITERIA FOR VALIDATING SECURE WIPING TOOLS. Gilbert Peterson; Sujeet Shenoi. 11th IFIP International Conference on Digital Forensics (DF), Jan 2015, Orlando, FL, United States. IFIP Advances in Information and Communication Technology, AICT-462, pp.321-339, 2015, Advances in Digital Forensics XI. 〈10.1007/978-3-319-24123-4_19〉. 〈hal-01449066〉

Partager

Métriques

Consultations de la notice

111

Téléchargements de fichiers

49