Digital Forensics – Coursework Example
Digital Forensics Affiliation: Digital Forensics SSD cards use semi-conductor chips to store data. SSD cards store data bywriting on new blocks of memory through application of smart wear leveling techniques (Gubanov & Afonin, n.d).
Data in SSD drives is deleted through the use of ATAANSI specification that can permanently remove any information stored in all types of flash chips. It contains secure wipe tools with ability to overwrite data in several passes (Gubanov & Afonin, n.d). The ATA sends commands to controllers in the SSD and instructs them to erase all flash chips (Gubanov & Afonin, n.d). This command is irreversible, and wipes clean all the blocks and makes them ready for immediate write. After the SE command, the SSD card is reverted back to its factory default settings. Discarded data in an SSD card is considered indeterminate until the blocks are erased by the garbage collector (Gubanov & Afonin, n.d).
The drives storage has been cleared it can be used many other times. Constant writing and deleting of information reduces SSD’s writing speed. Unlike other storage devices such as USBs and floppy disks, SSDs have a self-destroy mechanism which makes is extremely difficult to recover data (Gubanov & Afonin, n.d). The flash technology used in SSD drives is unique and different from the technology in other storage devices, and it ensures that a block can only be written after an erase command has operated. Recovery of data in SSD is hence very difficult and in most cases impossible unless the original binary decryption keys are known (Gubanov & Afonin, n.d).
Gubanov, Y., & Afonin, O. (n.d.). Why SSD Drives Destroy Court Evidence, and What Can Be Done About It. Retrieved from http://forensic.belkasoft.com/download/info/SSD%20Forensics%202012.pdf