1 / 33

Hard Drive Mini Boot Camp Education on Hard Drives

Hard Drive Mini Boot Camp Education on Hard Drives. Presented by James Wiebe CRU-DataPort / WiebeTech. Presented at Techno Security 2012. Visit us on the web at www.wiebetech.com www.cru-dataport.com. CRU-WiebeTech. WiebeTech Wichita, Kansas wiebetech.com (316) 744-8722. CRU-DataPort

roderick
Download Presentation

Hard Drive Mini Boot Camp Education on Hard Drives

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Hard Drive Mini Boot CampEducation on Hard Drives Presented by James Wiebe CRU-DataPort / WiebeTech Presented at Techno Security 2012 Visit us on the web at www.wiebetech.com www.cru-dataport.com

  2. CRU-WiebeTech WiebeTech Wichita, Kansas wiebetech.com (316) 744-8722 CRU-DataPort Vancouver, Washington CRU-DataPort.com (360) 816-1800

  3. NorthStar 18MB Hard Drive: $4999. At comparable cost, today’s consumer hard drives would cost $1 per 3600 bytes. That’s $278 million for a Terabyte drive.

  4. June, 2012: Hitachi 4TB Hard Drive is priced at $368. Today’s consumer hard drives now cost $1 per 11 gigabytes. Back to NorthStar: Comparably speaking, it would have been a small fraction of a penny for the 18MB storage device on the prior slide.

  5. Let’s talk about how personal hard drives have evolved. We’ll cover these topics: Early Personal Hard Drives IDE and ATA standards BIOS Limitations on Storage Size OS Limitations on Storage Size Why your job gets harder – Growth in physical imaging times on hard drives Musings on future capacity and performance growth in hard drives Hard Drive Mini Boot CampEducation on Hard Drives

  6. IBM PC The original business personal computer March 1983: PC XT, the first personal computer with a standard hard drive Hard Drive Capacity of 10MB Hard Drive Mini Boot CampEducation on Hard Drives

  7. Just a quick mention of Floppy Drives: 8 inch 5.25 inch 3.50 inch Hard Drive Mini Boot CampEducation on Hard Drives

  8. Can anyone identify the function of this device? Hard Drive Mini Boot CampEducation on Hard Drives

  9. Can anyone identify the function of this device? Hard Drive Mini Boot CampEducation on Hard Drives

  10. Seagate ST4053 Voice coil actuator Multiple platters Typical cost: $450 Hard Drive Mini Boot CampEducation on Hard Drives • Seek times on similar hard drives moved from 180ms (early 80’s) to 15ms (late 80’s) • Transfer rate of 625,000 bytes per second

  11. All of the early hard drives used IDE Cables. Still somewhat common 40 pin or 80 pin Hard Drive Mini Boot CampEducation on Hard Drives

  12. What fairly recent national case was broken with analysis of a floppy drive? Hard Drive Mini Boot CampEducation on Hard Drives

  13. The BTK task force enlisted the expertise of Randy Stone, a 39-year-old Desert Storm vet who started in the Wichita police department's Forensic Computer Crime Unit in 1998. When Stone checked the disk, it contained only one file, named "Test A.rtf." The text of the file instructed investigators to read the index card. No clues there. Hard Drive Mini Boot CampEducation on Hard Drives

  14. Stone checked the disk properties to see the previous user: someone named Dennis. Then he checked to see where the disk was last used: Wichita's Christ Lutheran Church. On the church Web site's list of officers, there was one Dennis, a man named Dennis Rader. "On a scale of one to 10, it was about a three in terms of computer forensics," Stone says. "As simple as that was, the sad thing is 95 percent of law enforcement in the U.S. could not have done something like that." Hard Drive Mini Boot CampEducation on Hard Drives

  15. The most important question in early personal hard drives is their capacity limitations. IDE 2GB limit; 22 bit LBA’s ATA-1 128GB limit, 28 bit LBA’s ATA-2 same ATA-3 same ATA-4 same ATA-5 same ATA-6 2.2PB limit, 48 bit LBA’s ATA-7 same ATA-8 TBD Hard Drive Mini Boot CampEducation on Hard Drives

  16. Alternate Names and New Features IDE IDE; Pre-ATA ATA-1 ATA, IDE, DMA ATA-2 DMA, PCMCIA Connector ATA-3 DMA, 44 pin connector for 2.5 inch drives; S.M.A.R.T. ATA-4 HPA’s, ATAPI (CD-ROM), CF Features ATA-5 CF Connector ATA-6 DCO’s, Acoustic Management ATA-7 SATA-1 ATA-8 TBD Hard Drive Mini Boot CampEducation on Hard Drives

  17. Introduction Dates IDE Dinosaurs & Meteor Destruction ATA-1 1994 (Obsolete: 1999) ATA-2 1996 (Obsolete: 2001) ATA-3 1997 (Obsolete: 2002) ATA-4 1998 ATA-5 2000 ATA-6 2002 ATA-7 2005 ATA-8 TBD Hard Drive Mini Boot CampEducation on Hard Drives

  18. Broad Classifications IDE Really old 2.2GB drives ATA-1 through ATA-5 Drives up to 128GB ATA-5+ 160GB drives – special case ATA-6 160GB (250GB and up) ATA-7 SATA drives to 3TB ATA-8 TBD Hard Drive Mini Boot CampEducation on Hard Drives

  19. Matching Drive Sizes and BIOS Limitations BIOS Date Effect Aug ’94 May not support > 528MB Feb ‘96 May not support > 2.1GB Jan ‘98 May not support > 8.4GB June ‘99 May not support > 32GB Hard Drive Mini Boot CampEducation on Hard Drives

  20. NTFS Maximum Volume Size In theory, the maximum NTFS volume size is 264−1 clusters. However, the maximum NTFS volume size as implemented in Windows XP Professional is 232−1 clusters. For example, using 64 KB (64 × 1024 bytes) clusters, the maximum Windows XP NTFS volume size is 256 TB (256 × 10244 bytes) minus 64 KB. Using the default cluster size of 4 KB, the maximum NTFS volume size is 16 TB minus 4 KB. (Both of these are vastly higher than the 128 GB (128 × 10243 bytes) limit lifted in Windows XP SP1.) Because partition tables on master boot record (MBR) disks only support partition sizes up to 2 TB, dynamic or GPT volumes must be used to create NTFS volumes over 2 TB. Booting from a GPT volume to a Windows environment requires a system with EFI and 64-bit support. --- Wikipedia, Oct 2010 Hard Drive Mini Boot CampEducation on Hard Drives

  21. Apple Maximum Volume Size Maximum number of volumes (all Mac OS X versions): no limit Maximum number of files (or files and folders) in a folder (all Mac OS X versions): up to 2.1 billion Maximum volume size and file size (Mac OS X 10.0 - 10.1.5): 2 TB Maximum volume size and file size (Mac OS X 10.2 - 10.2.8): 8 TB Maximum volume size and file size (Mac OS X 10.3 - 10.3.9): 16 TB Maximum volume size and file size (Mac OS X 10.4 or later): close to 8 EB --- Apple, 2010 Hard Drive Mini Boot CampEducation on Hard Drives

  22. Hard Drive Mini Boot CampEducation on Hard Drives

  23. James makes predictions on future capacities: 2015: 2020: (Based on extension of graph on prior slide) Hard Drive Mini Boot CampEducation on Hard Drives

  24. James makes predictions on future capacities: 2015: 10TB 2020: (Based on extension of graph on prior slide) Hard Drive Mini Boot CampEducation on Hard Drives

  25. James makes predictions on future capacities: 2015: 10TB 2020: 75TB (Based on extension of graph on prior slide) Hard Drive Mini Boot CampEducation on Hard Drives

  26. Transfer Time vs Capacity 80GB: 38 mins (@ 40MB/sec) (2004?) 250GB: 1+15 (@ 60MB/sec) (2006?) 1TB: 3 hours (@ 100MB/sec) (2010) 4TB: 11 hours (@ 100MB/sec) (2012) Hard Drive Mini Boot CampEducation on Hard Drives

  27. Questioning the future of Hard Drives: Huey says that - unless there is a revolutionary advance in the underlying materials used in standard magnetic hard drives - the future market for this media looks bleak: “Right now hard drives are very impressive and have been for the last 20 years; however, in the next 5 to 10 years, unless something completely unforeseen occurs, it is unlikely they can continue to compete for the functions they now provide.” Bryan Huey, interviewed on Physorg.com Feb 15, 2010 Hard Drive Mini Boot CampEducation on Hard Drives

  28. There are two reasons: The first is high cost. For hard drive performance to keep improving at the rate demanded by consumers, costs will go through the roof. One of the reasons is that continuous films are currently used in the manufacture of every magnetic hard drive, making them very cheap to produce. Future high performance drives, however, will require films broken up into regular nanoscale patterns to achieve the necessarily high data densities. This lithographic process is dramatically more expensive, opening the door for competing technologies. The second issue driving current hard drive technology toward obsolescence is power use. “IBM completed a study where they looked at the amount of data Google stored over the last 10 years and projected that out to the year 2020,” says Huey. “The amount of power to run just their hard drives, just to store all of this information we access every day, will be about 100 megawatts. That is essentially a coal plant just to run Google’s supply of information.” Hard Drive Mini Boot CampEducation on Hard Drives

  29. Hard Drive Mini Boot CampEducation on Hard Drives Just 12 atoms per bit of storage.

  30. Hard Drive Mini Boot CampEducation on Hard Drives • Computer hard drives could suddenly become far faster, thanks to a new technology that uses heat to write information to the magnetic storage systems, instead of magnetic fields. • Drives using the technology  will be hundreds of times faster than previous drives, say University of York researchers - able to record thousands of gigabytes per second. • Read more: http://www.dailymail.co.uk/sciencetech/article-2097748/New-hard-drive-technology-hundreds-times-faster--allow-drives-record-terabytes-data-second.html#ixzz1wnC83qat

  31. Hard Drive Mini Boot CampEducation on Hard Drives Seagate has already announced another density enhancing technology, known as HAMR: Seagate has become the first hard drive maker to achieve the milestone storage density of 1 terabit (1 trillion bits) per square inch, producing a demonstration of the technology that promises to double the storage capacity of today's hard drives upon its introduction later this decade and give rise to 3.5-inch hard drives with an extraordinary capacity of up to 60 terabytes over the 10 years that follow. The bits within a square inch of disk space, at the new milestone, far outnumber stars in the Milky Way, which astronomers put between 200 billion and 400 billion.

  32. Hard Drive Mini Boot CampEducation on Hard Drives Is the future found in SSD?? Maybe. Maybe Not. But it’s clear that the drive makers are giving SSD a huge amount of respect, and are working very hard to develop competitive solutions. Due to the uptake of solid state drive and flash storage, hard disk vendors are facing a decline," Charles King, principal analyst at Pund-IT, told TechNewsWorld. "A commercially viable, affordable HAMR solution could literally breathe life into the troubled HDD industry."

  33. Just Four Conclusions from a forensic perspective: Plan on a lot of storage! Magnetic Media is dying in highly portable applications Enormous burden on time required for imaging; might get worse. Pay attention to SSD: It’s a game changer. Hard Drive Mini Boot CampEducation on Hard Drives

More Related