TITLE

EXPLORING FORENSIC IMPLICATIONS OF THE FUSION DRIVE

AUTHOR(S)
Gupta, Shruti; Rogers, Marcus
PUB. DATE
June 2014
SOURCE
Journal of Digital Forensics, Security & Law;2014, Vol. 9 Issue 2, p145
SOURCE TYPE
Academic Journal
DOC. TYPE
Article
ABSTRACT
This paper explores the forensic implications of Apple's Fusion Drive. The Fusion Drive is an example of auto-tiered storage. It uses a combination of a ash drive and a magnetic drive. Data is moved between the drives automatically to maximize system performance. This is different from traditional caches because data is moved and not simply copied. The research included understanding the drive structure, populating the drive, and then accessing data in a controlled setting to observe data migration strategies. It was observed that all the data is first written to the ash drive with 4 GB of free space always maintained. If data on the magnetic drive is frequently accessed, it is promoted to the ash drive while demoting other information. Data is moved at a block-level and not a file-level. The Fusion Drive didn't alter the timestamps of files with data migration.
ACCESSION #
99202201

 

Share

Read the Article

Courtesy of THE LIBRARY OF VIRGINIA

Sorry, but this item is not currently available from your library.

Try another library?
Sign out of this library

Other Topics