Title

Information leakage through second hand USB flash drives within the United Kingdom

Document Type

Conference Proceeding

Publisher

secau Security Research Centre, Edith Cowan University, Perth, Western Australia

Faculty

Faculty of Computing, Health and Science

School

School of Computer and Security Science / Security Research Centre (secAU)

RAS ID

13022

Comments

This article was originally published as: Widya, C., Clarke, N., & Bolan, C. (2011). Information leakage through second hand USB flash drives within the United Kingdom. Paper presented at the 9th Australian Digital Forensics Conference, Edith Cowan University, Perth, Western Australia.

Abstract

The pervasiveness of flash based USB storage alongside increasing capacity and lowering price points has lead to a documented potential for information leakage. Such a potential is significantly raised when employees are able to use personal devices within a business environment with little regard to safe disposal practices. This study purchased a range of USB storage devices from UK based auction sites to determine what if any data was recoverable. The study found a total of 36136 recoverable files including a range of data detailing private information of previous owners, confidential corporate data, with twenty percent of the purchased USB devices securely wiped before sale.