sign in sign up
<<
Home , Serial Attached SCSI, Thunderbolt (interface)

CSC414 USB External Universal Serial Bus - Hard Drives, Printers, Cameras, Flash Drives, System CD/DVD Drives, Readers, MP3 Players, Tablets, Scanners, Fax Machines, Fundamentals Speeds - USB 1 - 1.5 Mbits/s (Low-) - 12 Mbits/s (Full-Bandwidth) Digital Forensics Center - USB 2: high-speed data transfer Department of Computer Science and Statics THINK BIG WE DO - 480 Mbits/s (60 MB/s) - USB 3 U R I - Up to 4.8 Gbits/s (600 MB/s) http://www.forensics.cs.uri.edu

USB Memory Cards Type A Type A Universal Serial Bus Plug Jack Used in many devices SD CF USB Host Secure Digital Compact Flash - Multipoint bus Controller - Camera, Phones, PDA's, Camcorders - Hubs provide multiple connection points for I/O Mini Mini Connected to system through USB devices Type A Type A Root Hub to Plug Jack A A - Supports up to 127 B B devices Provide AHubA A USB Device B Memory - Specific Connectors B Stick - Type A Type B Type B USB Device USB Device Plug Jack SMC MMC - Connects to hub B Smart Media Micro XD Card Media Card - Type B AHubA A Extreme Digital - Connects to device B B B Mini Mini Type B Type B USB Device USB Device USB Device Plug Jack

FireWire PC Card Bus

IEEE 1394 Transfer rates are typically PCMCIA faster than USB 2 - Serial bus - Personal Card - Up to 63 devices in a tree (hub) - Spec may show USB 2 faster, but Interface Association topology (similar to USB) (DMA) and special hardware on FireWire - Designed to give the Used for full motion video and devices make it faster. kind of expendability that desktop computers have. hard drives - Special hardware also makes - Can function as a hard drive, a modem, - FW400 - 400 Mbits/s FireWire devices more expensive than USB. network adapter, SCSI or other - FW800 - 800 Mbits/s devices. Type I Type II Type III FW800 FW400 FW800 Type IV FW400 Express Card e-SATA SAS

External SATA Serial Attached SCSI SATA drives can be connected - comparable to Firewire and USB - Uses serial, point-to-point to SAS attachment - but SAS drives can not be Used for external hard drives or - No SCSI terminator needed connected to SATA backplanes other external devices e-SATA SAS supports thousands of - 1.5 Gbits/s Port - Speeds 3 - 6 Gbits/s devices - 3.0 Gbits/s - Uses SCSI command set - Many more than 8 or16 SCSI limit. - 6.0 Gbits/s - Better error recovery and reporting - Popular in server RAID SAS Internal e-SATA has an I shaped connector connector instead of the normal L shape that e-SATA Connector to SATA regular SATA has. connectors Mini-SAS SATA Internal Connector Connector

Thunderbolt iSCSI

Intel Light Peak Internet SCSI - Copper or Optical Connection - Uses SCSI commands carried in Internet (TCP/IP) packets - PCI Express (PCIe) Connection - DMA Allows connecting SCSI devices to a computer through internet Speed (network card, routers, etc). - 10 Gbit/s PCIe bi-directional - Host Bus Adapter (HBA) is card that connects to SCSI - 10 Gbit/s DisplayPort bus and Network Interface Card (NIC) - 100 Gbit/s (with fiber optics) Popular in Storage Area Networks (SANs) - where companies have their data central and remote, accessible using less expensive Internet connectivity.

Fiber Channel Forensics and Busses

Designed to support SANs All interfaces potentially Hardware write blockers are - More efficient than iSCSI provide access to evidence used - data stored on devices. - Need a different write blocker for Giga bit network to using SCSI commands each interface over fiber channel network Investigator requires forensically sound access to all - Kits cost $2,000 Uses different (more expensive) switches, devices cards, Host Bus Adapters, etc - No viable HWB for SAS, Fiber - no writes (changes) to data Channel, and iSCI - active investigation cannot change Software write blocking is now data or evidence can be called into becoming viable question - faster, less expensive, block all interfaces