Browse > Article
http://dx.doi.org/10.9723/jksiis.2010.15.4.039

Forensic Investigation of External USB Drive  

Song, Yu-Jin (한서대학교 전자.컴퓨터 통신학부)
Lee, Jae-Yong (한서대학교 전자.컴퓨터 통신학부)
Publication Information
Journal of Korea Society of Industrial Information Systems / v.15, no.4, 2010 , pp. 39-45 More about this Journal
Abstract
Because of portable storage device's technical improvement, it's speeding up the conversion of mass storage. It means it's easier to move and save data. Generally, USB is using for portable storage device and forensic perspective, it's possible us to study data drain through portable storage device under securement of using vestige of USB. If we can secure using vestige of USB from boot domain it's possible to investigate data drain & prove criminal act. This thesis is suggesting Key/Thumb drive & USB Drive Enclosure's confirmation of using or not and division way though Disk Signature analysis.
Keywords
Disk Signature; USB Key/Thumb drive; USB Drive Enclosure; Portable storage device;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Microsoft, FAT32 File System Specification, http://www.microsoft.com/whdc/system/platform/firmware/fatgen.mspx
2 Rob Lee, "Profile Windows XP USB Drive Enclosures," SANS, Sep, 2009.
3 Rob Lee, "Profile Windows XP USB Keys/Thumb drives," SANS, Sept, 2009.
4 J. Axelson, USB Mass Storage: Designing and Programming Devices and Embedded Hosts, Lakeview Research, 2006.
5 Harlan Carvey, "Windows Forensic Analysis, 2nd Edition," June, 2009.