Abstract
Storage media has become more complex in structure. This matter has been observed during the past years and this was the result of the big expansion in the integrated circuits and electronics industry. Hard disk drives (HDDs) were traditionally used to store data. Solid-state drives (SSDs) are being used for the same purpose, but they can be represented as the new replacement of HDD. Even though the industry of storage media started with hard disk drives, every tool has its age, and for the current age, hard disk drives proved that they cannot afford the desired speed for users and for the whole industry in general. Since SSDs are still relatively new products, with new products come new challenges and new difficulties. Therefore, this paper deeply analyzes the results obtained from forensics tools on HDD and SSD to determine the difference between the two drives from a digital forensic perspective.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Gibson, M., Medina, N., Nail, Z.: SSD forensics: evidence generation and analysis. Studies Big Data, pp. 203–218 (2019)
Geier, F.: The differences between SSD and HDD technology regarding forensic investigations. Linnaeus University (Sweden), pp. 1–67 (2015)
Bednar, P., Katos, V.: SSD: new challenges for digital forensics. lund university (Sweden), Oct., pp. 1–8 (2011)
Iqbal, M., Soewito, B.: Digital forensics on solid state drive (SSD) with TRIM feature enabled and deep freeze configuration using static forensic methods and ACPO framework. Int. J. Comput. Sci. Inf. Secur. (IJCSIS) 18(11), (2020)
Bell, G., Boddington, R.: Solid state drives: the beginning of the end for current practice in digital forensic recovery? J. Digit. Forensics, Secur. Law 5(3), (2010)
Vieyra, J., Scanlon, M.: Solid state drive forensics: where do we stand? University College Dublin (Ireland), Mar., pp. 1–16 (2018)
Gubanov, Y., Afonin, O.: Why SSD drives destroy court evidence, and what can be done about it. Belkasoft Ltd, pp. 1–10 (2013)
Yug, Y.G.: Why SSD drives destroy court evidence, and what can be done about it. Q 3 2012: State of the art in SSD forensics (2012)
Tom, B.: SSD vs. HDD: What's the difference? https://www.pcmag.com/news/ssd-vs-hdd-whats-the-difference
Micron: An introduction to NAND flash and how to design it in to your next product. TN -29–19: NAND Flash 101. https://user.eng.umd.edu/~blj/CS-590.26/micron-tn2919.pdf
Wiebe, J.: Forensic insight into solid stat drives. DFI News, CRU-DataPort/WeibeTech (2013)
Kumar, V.: Pros and cons of cassette player. Sooper Articles (2013)
Bonetti, G., Viglione, M., Frossi, A., Maggi, S., Zanero, S.: A comprehensive black-box methodology for testing the forensic characteristics of solid-state drives. In: Proceedings of the 29th Annual Computer Security Applications Conference (ACSAC ‘13). Association for Computing Machinery, New York, NY, USA, 269–278 (2013)
Nisbet, A., Lawrence, S., Ruff, M.: A forensic analysis and comparison of solid state drive data retention with trim enabled file systems. Edith Cowan University, Perth, Western Australia, SRI Security Research Institute (2013)
Cox, J., Bednar, P.: Potential difficulties during investigations due to solid state drive (SSD) technology. In: Cabitza F., Batini C., Magni M. (eds) Organizing for the Digital World. Lecture Notes in Information Systems and Organisation, vol 28. Springer, Cham. (2019) https://doi.org/10.1007/978-3-319-90503-7_7
Reddy, N.: Solid state device (SSD) forensics. In: Practical Cyber Forensics. Apress, Berkeley, CA. (2019) https://doi.org/10.1007/978-1-4842-4460-9_12
Shah, Z., Mahmood, A., Slay, J.: Forensic potentials of solid state drives, pp. 113–126. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering (2015)
King, C., Vidas, T.: Empirical analysis of solid state disk data retention when used with contemporary operating systems. Digit. Investig. 8, S111–S117 (2011)
Afonin, O.: Life after trim: using factory access mode for imaging SSD drives (2019), https://blog.elcomsoft.com/2019/01/life-after-trim-using-factory-access-mode-for-imaging-ssd-drives/
Acknowledgements
The authors wish to thank Palestine Technical University-Kadoorie (PTUK) for supporting this research work as part of the PTUK research fund.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2022 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Jazzar, M., Hamad, M. (2022). Comparing HDD to SSD from a Digital Forensic Perspective. In: Agarwal, B., Rahman, A., Patnaik, S., Poonia, R.C. (eds) Proceedings of International Conference on Intelligent Cyber-Physical Systems. Algorithms for Intelligent Systems. Springer, Singapore. https://doi.org/10.1007/978-981-16-7136-4_14
Download citation
DOI: https://doi.org/10.1007/978-981-16-7136-4_14
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-16-7135-7
Online ISBN: 978-981-16-7136-4
eBook Packages: EngineeringEngineering (R0)