Forensic Acqusition of Solid State Storage Devices

Award Information
Agency:
Department of Homeland Security
Branch
n/a
Amount:
$99,987.33
Award Year:
2012
Program:
SBIR
Phase:
Phase I
Contract:
HSHQDC-12-C-00075
Award Id:
n/a
Agency Tracking Number:
DHS SBIR-2012.2-H-SB012.2-001-0006-I
Solicitation Year:
2012
Solicitation Topic Code:
H-SB012.2-001
Solicitation Number:
n/a
Small Business Information
730 East Cowboy Way, LaBelle, FL, 33935-4483
Hubzone Owned:
Y
Minority Owned:
N
Woman Owned:
N
Duns:
879408193
Principal Investigator:
TonyFessel
tony.fessel@cprtools.net
Business Contact:
JohnBenkert
johnb@cprtools.net
Research Institute:
n/a
Abstract
Solid state drives (SSD) suffer from data modification issues caused by internal influences such as those caused by manufacturer implemented functionality designed to increase product life and maintain performance. The purpose of the proposed innovation is to address these issues to provide the capability of acquiring a full forensic data copy while maintaining the forensic integrity of the subject SSD. The solution will be software and firmware based and will not require physical modification of the SSD. Work will include the research and implementation of a method of leveraging manufacturer based commands in order to attain forensic level access to the flash memory. Drive controller firmware research and modification will also be performed with the goal of providing similar forensic level access as well as write-protection of the device interface. An application suite providing a user interface to the proposed functionality as well as a method of reassembling physical memory images into a standard, logical format will also be developed. The output of the reassembly software will be compatible with existing analysis tools. Completion of Phase I and Phase II efforts will result in a comprehensive suite of software and firmware tools capable of retrieving data from SSD drives in a complete and forensically sound manner without physical drive modification. Commercial applications resulting from research and development efforts include a forensic quality SSD image acquisition toolkit for lab or field use, an SSD drive and flash chip data recovery toolkit, and an SSD drive and flash chip data destruction toolkit.

* information listed above is at the time of submission.

Agency Micro-sites


SBA logo

Department of Agriculture logo

Department of Commerce logo

Department of Defense logo

Department of Education logo

Department of Energy logo

Department of Health and Human Services logo

Department of Homeland Security logo

Department of Transportation logo

Enviromental Protection Agency logo

National Aeronautics and Space Administration logo

National Science Foundation logo
US Flag An Official Website of the United States Government