Abstract
A write blocker allows read-only access to digital data on a secondary storage device by placing a hardware or software filter between the host computer and the storage device. The filter monitors I/O commands sent from the application on the host computer, only allowing commands to the device that make no changes to its data. This paper examines the I/O commands used to access secondary storage devices and discusses their implications for BIOS-based and hardware-based write blockers.
Chapter PDF
References
National Institute of Justice (NIJ), Computer Forensic Tool Testing Project (http://www.ojp.usdoj.gov/nij/topics/ecrime/cftt.htm).
National Institute of Justice (NIJ), Test Results for Hardware Write Block Device: FastBloc IDE (Firmware Version 16), NIJ Report NCJ 212956, Washington, DC (http://www.ncjrs.gov/pdffilesl/nij/212956.pdf), 2006.
National Institute of Justice (NIJ), Test Results for Hardware Write Block Device: MyKey NoWrite (Firmware Version 1.05), NIJ Report NCJ 212958, Washington, DC (http://www.ncjrs.gov/pdffilesl/nij/212958.pdf), 2006.
National Institute of Standards and Technology (NIST), Computer Forensic Tool Testing Project (http://www.cftt.nist.gov).
[5] National Institute of Standards and Technology (NIST), Hardware Write Block, (http://www.cftt.nist.gov/hardware_write_block.htm).
National Institute of Standards and Technology (NIST), Software Write Block (http://www.cftt.nist.gov/software_write_block.htm).
Phoenix Technologies, PhoenixBIOS 4.0 Revision 6 User’s Manual, Phoenix Technologies, San Jose, California, 2000.
Technical Committee T13 —International Committee on Information Technology Standards (T13-INCITS), AT Attachment (ATA) Storage (http://www.t13.org).
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2007 International Federation for Information Processing
About this paper
Cite this paper
Lyle, J., Mead, S., Rider, K. (2007). Disk Drive I/O Commands and Write Blocking. In: Craiger, P., Shenoi, S. (eds) Advances in Digital Forensics III. DigitalForensics 2007. IFIP — The International Federation for Information Processing, vol 242. Springer, New York, NY. https://doi.org/10.1007/978-0-387-73742-3_11
Download citation
DOI: https://doi.org/10.1007/978-0-387-73742-3_11
Publisher Name: Springer, New York, NY
Print ISBN: 978-0-387-73741-6
Online ISBN: 978-0-387-73742-3
eBook Packages: Computer ScienceComputer Science (R0)