Branch Forum

ACS WA September Branch Forum

PART 2: I know what you did last summer…An Investigation into Remnant Data on USB Storage Devices Sold in Australia in 2015 – 2016 causing alarming concerns

Adina Apartment Hotel, 33 Mounts Bay Road, PERTH, WA, 6000
Tue 19 Sep 2017 05:30 PM AWST
Duration: 2.0 hours
Register by Tue 19 Sep 2017 05:30 PM AWST
In Person
CPD Hours: 2
Skills Level: Information security (SCTY) -> Level 5

About this event

A continuation of the previous study presented in 2015, this time focusing on USB sticks.

USB storage devices, also known as USB sticks, pen drives, flash drives, thumb drives, and key drives, have replaced many other portable storage media. USB devices are popular given their robustness, low power consumption, rapid response rates, non-volatile nature, capacity, and ease of transportation. However, the data on these devices are most often unsecured and not deleted when disposed of.
Using a quantitative and case study method to assess the extent and potential impact of the problem, this study obtained second-hand USB devices, purchased from eBay Australia to determine the data and erasure status of the devices using forensic acquisition and analysis techniques. Where data fragments were recovered, the volume and potential sensitivity of were investigated. The findings from the research show that in most cases, the USB devices held a large volume of data, were owned by both individuals and organizations, and were used to store highly sensitive and confidential data.

This data were neither permanently nor securely destroyed prior to disposal (by sale) of the devices. Such incidents highlight the failure to meet regulatory obligations regarding privacy legislation in Australia. The paper provides recommendations for secure disposal of data from USB devices.

Come find out how we are casually discarding our privacy when we discard the drives.

Speakers

Speaker
Krishnun Sansurooah

Event Location

Adina Apartment Hotel, 33 Mounts Bay Road, PERTH, WA, 6000
Read