In Search of Lost Data: A Study of Flash Sanitization Practices

• URL: http://arxiv.org/abs/2505.14067v1
• Date: Tue, 20 May 2025 08:15:23 GMT
• Title: In Search of Lost Data: A Study of Flash Sanitization Practices
• Abstract summary: Poor sanitization practices have been reported for second-hand hard disk drives.<n>Data has been found on original storage devices based on flash technology.
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: To avoid the disclosure of personal or corporate data, sanitization of storage devices is an important issue when such devices are to be reused. While poor sanitization practices have been reported for second-hand hard disk drives, it has been reported that data has been found on original storage devices based on flash technology. Based on insights into the second-hand chip market in China, we report on the results of the first large-scale study on the effects of chip reuse for USB flash drives. We provide clear evidence of poor sanitization practices in a non-negligible fraction of USB flash drives from the low-cost Chinese market that were sold as original. More specifically, we forensically analyzed 614 USB flash drives and were able to recover non-trivial user data on a total of 75 devices (more than 12 %). This non-negligible probability that any data (including incriminating files) already existed on the drive when it was bought has critical implications to forensic investigations. The absence of external factors which correlate with finding data on new USB flash drives complicates the matter further.

Related papers

• Auditable and Transparent Fully Authenticated Disk Encryption via USB Storage Interposition [0.0]
  Full Disk Encryption (FDE) has become increasingly important in the last decades due to the evident confidentiality concerns.<n>In most systems, encryption is provided by an operating system driver, through which the user can transparently access the encrypted disk.<n>We explore an alternative approach: the use of an intermediate USB device placed between the host system and the external hard disk.
  arXiv  Detail & Related papers  (2026-07-14T12:42:17Z)
• Extraction of Secrets from 40nm CMOS Gate Dielectric Breakdown Antifuses by FIB Passive Voltage Contrast [0.0]
  Antifuses are widely used for storing small amounts of data in integrated circuits.<n>We demonstrate that data bits stored in a widely used antifuse block can be extracted by a semiconductor failure analysis technique.<n>We identify several potential mechanisms by which it may be possible to read the even and odd rows separately.
  arXiv  Detail & Related papers  (2025-01-22T23:40:21Z)
• Nyon Unchained: Forensic Analysis of Bosch's eBike Board Computers [0.0]
  The Bosch Nyon series of board computers are cutting-edge devices from one of the market leaders in the eBike business. We conducted an in-depth forensic analysis of the two available Nyon models released in 2014 and 2021. On a first-generation Nyon device, Telnet access could be established by abusing a design flaw in the update procedure. It was possible to forge the data on the device and transfer it to Bosch's servers to be persisted across their online service and smartphone app.
  arXiv  Detail & Related papers  (2024-04-19T13:03:14Z)
• Fact Checking Beyond Training Set [64.88575826304024]
  We show that the retriever-reader suffers from performance deterioration when it is trained on labeled data from one domain and used in another domain. We propose an adversarial algorithm to make the retriever component robust against distribution shift. We then construct eight fact checking scenarios from these datasets, and compare our model to a set of strong baseline models.
  arXiv  Detail & Related papers  (2024-03-27T15:15:14Z)
• Did You Train on My Dataset? Towards Public Dataset Protection with Clean-Label Backdoor Watermarking [54.40184736491652]
  We propose a backdoor-based watermarking approach that serves as a general framework for safeguarding public-available data. By inserting a small number of watermarking samples into the dataset, our approach enables the learning model to implicitly learn a secret function set by defenders. This hidden function can then be used as a watermark to track down third-party models that use the dataset illegally.
  arXiv  Detail & Related papers  (2023-03-20T21:54:30Z)
• Large-scale End-of-Life Prediction of Hard Disks in Distributed Datacenters [0.0]
  Large-scale predictive analyses are performed using severely skewed health statistics data. We present an encoder-decoder LSTM model where the context gained from understanding health statistics sequences aid in predicting an output sequence of the number of days remaining before a disk potentially fails.
  arXiv  Detail & Related papers  (2023-03-15T21:55:07Z)
• Black-box Dataset Ownership Verification via Backdoor Watermarking [67.69308278379957]
  We formulate the protection of released datasets as verifying whether they are adopted for training a (suspicious) third-party model. We propose to embed external patterns via backdoor watermarking for the ownership verification to protect them. Specifically, we exploit poison-only backdoor attacks ($e.g.$, BadNets) for dataset watermarking and design a hypothesis-test-guided method for dataset verification.
  arXiv  Detail & Related papers  (2022-08-04T05:32:20Z)
• Open-sourced Dataset Protection via Backdoor Watermarking [87.15630326131901]
  We propose a emphbackdoor embedding based dataset watermarking method to protect an open-sourced image-classification dataset. We use a hypothesis test guided method for dataset verification based on the posterior probability generated by the suspicious third-party model.
  arXiv  Detail & Related papers  (2020-10-12T16:16:27Z)
• A leak in PRNU based source identification. Questioning fingerprint uniqueness [75.33542585238497]
  Photo Response Non-Uniformity (PRNU) is considered the most effective trace for the image source attribution task. Recent devices may introduce non-unique artifacts that may reduce PRNU noise's distinctiveness. We show that the primary cause of high false alarm rates cannot be directly related to specific camera models, firmware, or image contents.
  arXiv  Detail & Related papers  (2020-09-10T14:18:38Z)
• Caveat Venditor, Used USB Drive Owner [0.6445605125467572]
  People sell used USB drives online -- presumably either their own or drives others have lost. This raises some interesting questions, such as whether sellers know how to ensure that private data is erased. Using forensic analysis, it was found that a great deal of private and sensitive information remained on many of the drives.
  arXiv  Detail & Related papers  (2020-06-19T20:20:29Z)
• Data Mining with Big Data in Intrusion Detection Systems: A Systematic Literature Review [68.15472610671748]
  Cloud computing has become a powerful and indispensable technology for complex, high performance and scalable computation. The rapid rate and volume of data creation has begun to pose significant challenges for data management and security. The design and deployment of intrusion detection systems (IDS) in the big data setting has, therefore, become a topic of importance.
  arXiv  Detail & Related papers  (2020-05-23T20:57:12Z)
• MAGNETO: Fingerprinting USB Flash Drives via Unintentional Magnetic Emissions [4.588028371034406]
  USB flash drives are one of the most common attack vectors used to gain unauthorized access to host devices. In such a way, an attacker can steal sensitive information via the USB-connected devices, as well as inject any kind of malicious software into the host. We propose a framework to verify the authenticity of a USB flash drive, rooted in the analysis of its unintentional magnetic emissions.
  arXiv  Detail & Related papers  (2020-02-14T08:09:54Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.