You are here

Forensic Acqusition of Solid State Storage Devices

Award Information
Agency: Department of Homeland Security
Branch: N/A
Contract: HSHQDC-12-C-00075
Agency Tracking Number: DHS SBIR-2012.2-H-SB012.2-001-0006-I
Amount: $99,987.33
Phase: Phase I
Program: SBIR
Solicitation Topic Code: H-SB012.2-001
Solicitation Number: DHS SBIR-2012.2
Solicitation Year: 2012
Award Year: 2012
Award Start Date (Proposal Award Date): 2012-09-15
Award End Date (Contract End Date): 2013-03-14
Small Business Information
730 East Cowboy Way, LaBelle, FL, 33935-4483
DUNS: 879408193
HUBZone Owned: Y
Woman Owned: N
Socially and Economically Disadvantaged: N
Principal Investigator
 Tony Fessel
 (863) 517-4233
Business Contact
 John Benkert
Title: CEO
Phone: (863) 674-0120
Research Institution
Solid state drives (SSD) suffer from data modification issues caused by internal influences such as those caused by manufacturer implemented functionality designed to increase product life and maintain performance. The purpose of the proposed innovation is to address these issues to provide the capability of acquiring a full forensic data copy while maintaining the forensic integrity of the subject SSD. The solution will be software and firmware based and will not require physical modification of the SSD. Work will include the research and implementation of a method of leveraging manufacturer based commands in order to attain forensic level access to the flash memory. Drive controller firmware research and modification will also be performed with the goal of providing similar forensic level access as well as write-protection of the device interface. An application suite providing a user interface to the proposed functionality as well as a method of reassembling physical memory images into a standard, logical format will also be developed. The output of the reassembly software will be compatible with existing analysis tools. Completion of Phase I and Phase II efforts will result in a comprehensive suite of software and firmware tools capable of retrieving data from SSD drives in a complete and forensically sound manner without physical drive modification. Commercial applications resulting from research and development efforts include a forensic quality SSD image acquisition toolkit for lab or field use, an SSD drive and flash chip data recovery toolkit, and an SSD drive and flash chip data destruction toolkit.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government