The impact of U3 devices on forensic analysis
Document Type
Conference Proceeding
Faculty
Faculty of Computing, Health and Science
School
School of Computer and Information Science / Centre for Security Research
RAS ID
6053
Abstract
Flash and USB portable drives are now in common place use in computing environments. The U3 smart drive is one emerging type of enhanced flash drive. It is believed that U3 smart drive devices do not leave any record or evidence on a host PC after use. Therefore, it is conceivable that it could be used in a digital crime or attack on a computer or networked system. In circumstances where a portable device such as a U3 has been used, it is more complex for a forensic analyst to find evidence of its use. This paper discusses the impact of U3 smart drive devices on a forensic investigation. Further, it describes the forensic investigation undertaken of a computer in which U3 was used.
DOI
10.4225/75/57b27e1f40cc6
Access Rights
Free_to_read
Comments
Tank, R. & Williams, P. (2008). The Impact of U3 Devices on Forensic Analysis. Proceedings of the 6th Australian Digital Forensics Conference, (pp. 197-203). Perth, Western Australia. : SECAU _ Security Research Centre, ECU. Available here