본문 바로가기
  • Home

A Study on Characteristics and Techniques that Affect Data Integrity for Digital Forensic on Flash Memory-Based Storage Devices

  • Journal of Internet of Things and Convergence
  • Abbr : JKIOTS
  • 2023, 9(3), pp.7-12
  • DOI : 10.20465/KIOTS.2023.9.3.007
  • Publisher : The Korea Internet of Things Society
  • Research Area : Engineering > Computer Science > Internet Information Processing
  • Received : March 23, 2023
  • Accepted : May 7, 2023
  • Published : June 30, 2023

Hyun-Seob Lee 1

1백석대학교

Accredited

ABSTRACT

One of the most important characteristics of digital forensics is integrity. Integrity means that the data has not been tampered with. If evidence is collected during digital forensic and later tampered with, it cannot be used as evidence. With analog evidence, it's easy to see if it's been tampered with, for example, by taking a picture of it. However, the data on the storage media, or digital evidence, is invisible, so it is difficult to tell if it has been tampered with. Therefore, hash values are used to prove that the evidence data has not been tampered with during the process of collecting evidence and submitting it to the court. The hash value is collected from the stored data during the evidence collection phase. However, due to the internal behavior of NAND flash memory, the physical data shape may change over time from the acquisition phase. In this paper, we study the characteristics and techniques of flash memory that can cause the physical shape of flash memory to change even if no intentional data corruption is attempted.

Citation status

* References for papers published after 2022 are currently being built.