Browse > Article
http://dx.doi.org/10.13089/JKIISC.2015.25.5.1059

A Study on Hard Disk Drive ATA Passwords  

Lee, Ju-young (Graduate School of Information Security, Korea University)
Lee, Sang-jin (Graduate School of Information Security, Korea University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.25, no.5, 2015 , pp. 1059-1065 More about this Journal
Abstract
Hard disk passwords are commonly not well known. If the passwords are set, forensic investigators are not allowed to access data on hard disks, so they can be used to obstruct investigations. Expensive tools such as PC-3000 are necessary for unlocking such hard disk passwords. But it would be a burden on both organizations that should pay for these tools and forensic investigators that are unfamiliar with these tools. This paper discusses knowledge required for unlocking hard disk passwords and proposes methods for unlocking the passwords without high-priced tools. And with a vendor-specific method, this paper provides procedures for acquiring passwords and unlocking hard disk drives.
Keywords
ATA Password; Unlock Hard Disk Drive; System Area; Anti-anti Forensics;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Huw Read, Konstantinos Xynos, Iain Sutherland, Gareth Davies, Tom Houiellebecq, Frode Roarson and Andrew Blyth, "Manipulation of hard drive firmware to conceal entire partitions," Digital Investigation, vol. 10, issue 4, pp. 281-286, Dec. 2013.   DOI
2 M. R. Gupta, M. D. Hoeschele, and M. K. Rogers, "Hidden Disk Areas: HPA and DCO," International Journal of Digital Evidence, vol. 5, issue 1, Fall 2006.
3 Harald Baier, Julian Knauer, "AFAUC - anti-forensics of storage devices by alternative use of communication channels," 2014 8th International Conference on IT Security Incident Management & IT Forensics, pp. 14-26, 2014.
4 Iain Sutherland, Gareth Davies, Andrew Blyth, "Malware and steganography in hard disk firmware," Journal in Computer Virology, vol. 7, issue 3, pp. 215-219, Aug. 2011.   DOI
5 Gareth Davies, Iain Sutherland, "Hard Disk Storage: Firmware Manipulation and Forensic Impact and Current Best Practice," ADFSL Conference on Digital Forensics, Security and Law, 2010.
6 Julian Knauer, Harald Baier, "Zur Sicherheit von ATA-Festplattenpasswortern," Proceedings of D-A-CH Security 2012, pp. 26-37, Sep. 2012.
7 "ATA Passw0rd Unl0cking for all drives," http://forum.hddguru.com/viewtopic.php?f=1&t=16429&p=108750&hilit=dump+script+register#p108750
8 "Writing/reading a drive's firmware youuru.com/viewtopic.php?f=13&t=26971
9 T13, "AT Attachment 8 - ATA/ATAPI Command Set (ATA8-ACS)," http://www.t13.org/documents/uploadeddocume nts/docs2007/d1699r4a-ata8-acs.pdf, May 2007.
10 T13, "AT Attachment with Packet Interface - 7 Volume 1 - Register Delivered Command Set, Logical Register Set(ATA/ATAPI-7V1)," http://www.t13.org/documents/uploadeddocuments/docs2007/d1532v1r4b-at_attachment_with_packet_interface_-_7_volume_1.pdf, Apr. 2004.
11 "newbie info, from and for newbies :) About firmware, SA, etc," http://forum.hddgur u.com/viewtopic.php?f=16&t=6562
12 "Hddhackr V1.40 Build 20130303," http://forums.xbox-scene.com/index.php?/topic/746020-hddhackr-v140-build-20130303/, Mar. 2013.
13 "List of hard disk ata master passwords," https://ipv5.wordpress.com/2008/04/14/list-of-hard-disk-ata-master-passwords/
14 Thomas Schneider, "ATA security lock removal for seagate [Solved] ;)," https://blacklotus89.wordpress.com/2013/11/27/ata-security-lock-2/
15 Thomas Schneider, "seaget," https://github.com/BlackLotus/seaget
16 "Sending ATA commands directly to device in Windows?," http://stackoverflow.com/questions/5070987/sending-ata-commands-directly-to-device-in-windows/5071027#5071027
17 "Estrarre le password ATA da un Hard Disk," http://elettrofreak.blogspot.kr/2011/02/estrarre-le-password-ata-da-un-hard.html
18 Dmitry Postrigan, "MHDD Documentation," http://hddguru.com/software/2005.10.02-MHDD/mhdd_manual.en.html
19 T13, "SMART Command Transport(SCT)," http://www.t13.org/Documents/UploadedDocuments/docs2005/DT1701r5-SCT.pdf, Feb. 2005.