Forensic Analysis of Plug Computers

  • Scott Conrad
  • Greg Dorn
  • Philip Craiger
Part of the IFIP Advances in Information and Communication Technology book series (IFIPAICT, volume 361)

Abstract

A plug computer is essentially a cross between an embedded computer and a traditional computer, and with many of the same capabilities. However, the architecture of a plug computer makes it difficult to apply commonly used digital forensic methods. This paper describes methods for extracting and analyzing digital evidence from plug computers. Two popular plug computer models are examined, the SheevaPlug and the Pogoplug.

Keywords

Plug computers forensic analysis SheevaPlug Pogoplug 

References

  1. 1.
    Amontec, Open On-Chip Debugger (OpenOCD), Vuippens, Swit- zerland (www.amontec.com/openocd/doc/index.html).Google Scholar
  2. 2.
    M. Breeuwsma, M. de Jongh, C. Klaver, R. van der Knijff and M. Roeloffs, Forensic data recovery from flash memory, Small Scale Digital Device Forensics Journal, vol. 1(1), 2007.Google Scholar
  3. 3.
    C. Brune, Lost art of computer programming, Das U-Boot: The universal boot loader (www.cucy.net/lacp/archives/000022.html), 2004.Google Scholar
  4. 4.
    Cloud Engines, Pogoplug, San Francisco, California (pogoplug.com).Google Scholar
  5. 5.
    DENX Software Engineering, Memory commands, DENX U-Boot and Linux Guide, Groebenzell, Germany (www.denx.de/wiki/view/DULG/UBootCmdGroupMemory#Section_5.9.2.4).Google Scholar
  6. 6.
    DENX Software Engineering, U-Boot, Groebenzell, Germany (www.denx.de/wiki/U-Boot).Google Scholar
  7. 7.
    Hwaci Applied Software Research, SQLite (sqlite.org).Google Scholar
  8. 8.
    IEEE Standards Association, 1149.1-1990 – IEEE Standard Test Access Port and Boundary-Scan Architecture, Piscataway, New Jersey, 1990.Google Scholar
  9. 9.
    Iomega, Iomega iConnect wireless data station, San Diego, California (go.iomega.com/en-us/products/network-storage-desktop/wireless-data-station/network-hard-drive-iconnect).Google Scholar
  10. 10.
    Marvell Semiconductor, SheevaPlug Development Kit Reference Design, Santa Clara, California (www.plugcomputer.org/index.php /us/resources/downloads?func=startdown&id=90), 2010.Google Scholar
  11. 11.
    plugcomputer.org, Plug Wiki (plugcomputer.org/plugwiki/index.php/Main_Page).Google Scholar
  12. 12.
    Pogoplugged.com, Forums (www.pogoplugged.com/forums).Google Scholar
  13. 13.
    Pogoplugged.com, How to find mkfs, jffs and other tools on Pogoplug (www.pogoplugged.com/forum/thread/11515/How-To-Find-mkfs-jffs2-and-other-tools-on-Pogoplug/?highlight=find+mkfs).Google Scholar
  14. 14.
    D. Rath, Open On-Chip Debugger (openocd.berlios.de/web).Google Scholar
  15. 15.
    D. Rath, OpenOCD User’s Guide (openocd.berlios.de/doc/html/index.html#Top).Google Scholar
  16. 16.
    J. Regan, The Forensic Potential of Flash Memory, Master’s Thesis, Department of Computer Science, Naval Postgraduate School, Monterrey, California, 2009.Google Scholar
  17. 17.
    M. Rosenbum and J. Ousterhout, The design and implementation of a log-structured file system, Proceedings of the Thirteenth ACM Symposium on Operating System Principles, pp. 1–15, 1991.CrossRefGoogle Scholar
  18. 18.
    Seagate Technology, FreeAgent DockStar, Scotts Valley, California (www.seagate.com/www/en-us/products/network_storage/free agent_dockstar).Google Scholar
  19. 19.
    Sun Microelectronics, Introduction to JTAG Boundary Scan, White Paper, Sun Microsystems, Santa Clara, California (www.johnloomis.org/ece446/notes/jtag/wpr-0018-01.pdf), 1997.Google Scholar
  20. 20.
    UBIfs Wiki (osl.sed.hu/wiki/ubifs/index.php/Main_Page).Google Scholar
  21. 21.
    D. Woodhouse, JFFS: The Journaling Flash File System (linux-mtd.infradead.org/~dwmw2/jffs2.pdf).Google Scholar
  22. 22.
    D. Woodhouse, UBI – Unsorted Block Images (www.linux-mtd.infradead.org/doc/ubi.html).Google Scholar

Copyright information

© IFIP International Federation for Information Processing 2011

Authors and Affiliations

  • Scott Conrad
    • 1
  • Greg Dorn
    • 1
  • Philip Craiger
    • 2
    • 1
  1. 1.National Center for Forensic ScienceUniversity of Central FloridaOrlandoUSA
  2. 2.Daytona State CollegeDaytona BeachUSA

Personalised recommendations