{"id":213701,"date":"2021-03-29T15:58:35","date_gmt":"2021-03-29T12:58:35","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/forensic-analysis-and-data-recovery-from-water-submerged-hard-drives\/"},"modified":"2021-03-29T15:58:35","modified_gmt":"2021-03-29T12:58:35","slug":"forensic-analysis-and-data-recovery-from-water-submerged-hard-drives","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/forensic-analysis-and-data-recovery-from-water-submerged-hard-drives\/","title":{"rendered":"#Forensic analysis and data recovery from water-submerged hard drives"},"content":{"rendered":"

“#Forensic analysis and data recovery from water-submerged hard drives<\/strong>”<\/p>\n

\n
\n
\n
\"water\"
\n Credit: Pixabay\/CC0 Public Domain
\n <\/figcaption><\/figure>\n<\/div>\n<\/div>\n

A computer hard drive can be a rich source of evidence in a forensic investigation\u2026but only if the device is intact and undamaged otherwise many additional steps to retrieve incriminating data from within are needed and not always successful even in the most expert hands. Research published in the International Journal of Electronic Security and Digital Forensics<\/i> considers the data retrieval problems for investigators faced with a hard drive that has been submerged in water.<\/p>\n

Alicia Francois and Alastair Nisbet of the Cybersecurity Research Laboratory at Auckland University of Technology<\/a> in New Zealand, point out that under pressure suspects in an investigation may attempt to destroy digital evidence prior to a seizure by the authorities. A common app<\/a>roach is simply to put a hard drive in water in the hope that damage to the circuitry and the storage media<\/a> within will render the data inaccessible.<\/p>\n

The team has looked at the impact of water ingress on solid-state and conventional spinning magnetic disc hard drives and the timescale over which irreparable damage occurs and how this relates to the likelihood of significant data loss from the device. Circuitry and other components begin to corrode rather quickly following water ingress. However, if a device can be retrieved and dried within seven days, there is a reasonable chance of it still working and the data being accessible.<\/p>\n

“Ultimately, water submersion can damage a drive quickly but with the necessary haste and skills, data may still be recoverable from a water-damaged hard drive,” the team writes.<\/p>\n

However, if the device has been submerged in saltwater, then irreparable damage can occur within 30 minutes. The situation is worse for a solid-state drive which will essentially be destroyed within a minute of saltwater ingress. The research provides a useful guide for forensic investigators retrieving hard drives that have been submerged in water.\n <\/p>\n\n

\n

Microwave-assisted recording technology promises high-density hard disk performance<\/a>\n <\/div>\n

\n
\n More information:<\/strong>
\n Alicia Francois et al. Forensic analysis and data recovery from water-submerged hard drives, International Journal of Electronic Security and Digital Forensics<\/i> (2021). DOI: 10.1504\/IJESDF.2021.113374<\/a><\/p><\/div>\n

<\/p>\n

\n

Citation<\/strong>:
\n Wetware data retrieval: Forensic analysis and data recovery from water-submerged hard drives (2021, March 29)
\n retrieved 29 March 2021
\n from https:\/\/techxplore.com\/news<\/a>\/2021-03-wetware-forensic-analysis-recovery-water-submerged.html<\/p>\n

This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
\n part may be reproduced without the written permission. The content is provided for information purposes only.<\/p><\/div>\n<\/p><\/div>\n