solid state drive f...
 
Notifications
Clear all

solid state drive forensic wipe?

5 Posts
4 Users
0 Reactions
570 Views
(@research1)
Estimable Member
Joined: 17 years ago
Posts: 165
Topic starter  

Quick Question, I've just been told of a secure wipe function with SSD drives, unsure of the accuracy. I cant really find much on-line about it, appreciate other peoples comments.

Apparently, SSD drives are soon to have a function (may already be available) in which when a disk is idol, the file system or operating system (not sure which level) securely wipes unallocated data blocks. Also, before writing data to a sector, the SSD disk will secure wipe all of that sector, removing any residing previous data in RAM and slack space.

Any validity in this?


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Apparently, SSD drives are soon to have a function (may already be available) in which when a disk is idol, the file system or operating system (not sure which level) securely wipes unallocated data blocks.

I presume you are talking of the way Corsair/Samsung are addressing the PAGEs issues.

I.e. the "Performance Recovery Feature" or "Background Garbage Collection"
http//forum.corsair.com/v3/showthread.php?t=81190
http//forum.corsair.com/v3/showthread.php?t=83325
http//www.anandtech.com/storage/showdoc.aspx?i=3631&p=14

Or of the "Indilinx Wiper Tool"
http//www.anandtech.com/storage/showdoc.aspx?i=3631&p=13

Also, before writing data to a sector, the SSD disk will secure wipe all of that sector, removing any residing previous data in RAM and slack space.

Any validity in this?

I presume you are talking of the way PAGEs work on SSD?

I.e. the TRIM command
http//www.boot-land.net/forums/index.php?showtopic=9615

jaclaz


   
ReplyQuote
(@jonathan)
Prominent Member
Joined: 20 years ago
Posts: 878
 

Yes, the TRIM function means that when a file is deleted, it really is deleted. There was a thread on this a while back http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=4787&highlight=trim

Big implications for the way computer forensics investigations are carried out.


   
ReplyQuote
(@research1)
Estimable Member
Joined: 17 years ago
Posts: 165
Topic starter  

Thanks Jonathan. spot on.


   
ReplyQuote
(@matto)
New Member
Joined: 15 years ago
Posts: 4
 

This is a great read on SSDs. It's a long read but worth it IMHO.

http//www.anandtech.com/storage/showdoc.aspx?i=3631

page 4 & 5 is what you're really looking for, where he breaks down how a SSD functions when it comes to r/w, and then explains more about TRIM support from both the hardware controller and built in OS support what you are now finding in Win7 and Win2008.


   
ReplyQuote
Share: