COEN 252 Computer Forensics Hard Drive Geometry. Drive Geometry Basic Definitions: Track Sector Floppy.

Slides:



Advertisements
Similar presentations
A device that reads and writes data on a magnetic disk or tape. For writing, the surface of the disk or tape is moved past the read/write head. By discharging.
Advertisements

Hard Disks Low-level format- organizes both sides of each platter into tracks and sectors to define where items will be stored on the disk. Partitioning:
Hard Disk Drives Chapter 7.
Chapter 9 Part III Linux File System Administration
“Redundant Array of Inexpensive Disks”. CONTENTS Storage devices. Optical drives. Floppy disk. Hard disk. Components of Hard disks. RAID technology. Levels.
EET 450 – Advanced Digital Chapter 10 Hard Disk Drives.
Computer/Digital Forensics
Chapter 22 All About SCSI.
Managing Your Hard Disk and Operating System 23,26 March :30pm - 4:00pm.
EET Advanced Digital Chapter 8 Mass Storage.
Chapter 5 Supporting Hard Drives
© 2007 The McGraw-Hill Companies, Inc. All rights reserved Hard Drive Technologies Chapter 9.
The Soul of your Computer
Hard Drive / Hard Disk Functions of hard disk
Secondary Storage Unit 013: Systems Architecture Workbook: Secondary Storage 1G.
A+ Guide to Managing and Maintaining Your PC, 7e
SECONDARY STORAGE DEVICES. MAGNETIC TAPE Data tape that stores large amounts of information that can only accessed sequentially. Commonly used for off-site.
A+ Guide to Managing and Maintaining your PC, 6e
Copyright © 2007 Heathkit Company, Inc. All Rights Reserved PC Fundamentals Presentation 20 – The Hard Drive Interface.
PC Maintenance: Preparing for A+ Certification
IDE Interface. Objectives In this chapter, you will -Learn about each of the ATA standards (ATA-1 through ATA-6) used in PCs -Identify the ATA connector.
Hard Drives Non-Volatile Storage. Hard Drives Hard Drives (HD) The primary storage device in a computer system.
CENG334 Introduction to Operating Systems Erol Sahin Dept of Computer Eng. Middle East Technical University Ankara, TURKEY URL:
HDD INSTALLATION AND SETUP. HDD Introduction Hard disk is the most popular storage device used to store various kinds of data in most computers. Hard.
1 Chapter Overview CD-ROM and DVD Drives Advanced Hard Disk Drives SCSI Drives.
A+ Guide to Managing and Maintaining Your PC Fifth Edition Chapter 8 Understanding and Installing Hard Drives.
PC COMPONENTS DISK DRIVES AND CONNECTORS. HARD DISK DRIVES Common Hard Drive Types: –ESDI - Enhanced Small Device Interface  Old Technology – IDE - Integrated.
Linux+ Guide to Linux Certification, Third Edition
CompTIA Linux+ Certification
Internal components, Backing Storage, Operating Systems Software
… when you will open a computer We hope you will not look like …
Personal Computer Hard Drive ATA Interface
Understanding and Troubleshooting Your PC. Chapter 5: Understanding, Installing, and Troubleshooting Disk Drives2 Chapter Objectives  In this chapter,
Storage Devices Chapter 7. Floppy Drive Overview The floppy drive subsystem consists of three main parts: ▫the electronic circuits or the controller,
Guide to Linux Installation and Administration, 2e1 Chapter 2 Planning Your System.
Introduction to Hard Drives Chapter 6 - Key Terms Information Compiled by Diane Ferris, Michele Henderson & Vicki Kertz.
PC Maintenance: Preparing for A+ Certification Chapter 10: Introduction to Disk Storage.
A+ Guide to Managing and Maintaining your PC, 6e Chapter 8 Hard Drives (v0.9)
Hard disk drives It is a non volatile mass storage device. It consists of platters made of aluminum alloy or glass ceramic composite material. Platters.
GENERAL INFORMATION Invented in 1950's on mainframe computers with 20 inches diameter with only few megabytes of data. Originally called 'Fixed Disc'
Concerns about ATAPI devices using SATA bridges Mark Hartney Silicon Image August 19, 2003 T13 document e013131r0.
COEN 252 Computer Forensics Hard Drive Geometry. Drive Geometry Basic Definitions: Track Sector Floppy.
Computer Foundations Dr. John P. Abraham Professor UTPA.
D ISCOVERING IDE D EVICES. IDE OVERVIEW The hard drive controller is responsible for converting signals made by the system CPU to signals that the hard.
Computer Architecture CST 250
Hard Disk Storage  A hard disk drive contains rigid, disk- shaped platters, usually constructed of aluminum or glass §Also known as a Fixed Disk §Grown.
Linux+ Guide to Linux Certification Chapter Six Linux Filesystem Administration.
A+ Guide to Hardware, 4e Chapter 7 Hard Drives.
1 Fixed Disks Microprocessor Computer Architectures Lab Disk Basics “Disk Subsystem” – Interface to x86 – Responsible for Reading/Writing Interface Circuit.
Copyright © Genetic Computer School 2008 Computer Systems Architecture SA 8- 0 Lesson 8 Secondary Management.
Hard Disk Drive 1 LG: TIS 85 Group 5 Presented by Umar Mohammad Nishant Goel Mitali Chaudhary Neeta Vishnupurikar Nitin Kshrisagar Nitin katode.
HARD DISKS. INTRODUCTION TO HARD DISKS  Hard disk is the core fundamental component of the Computer system.  A mass storage device that stores the permanent.
IDE and SATA standards Group: Hoàng Thị Thanh Nhàn Hoàng Thị Lan Chung Đinh Thị Bình.
A+ Guide to Managing and Maintaining your PC, 6e Chapter 8 Hard Drives.
Chapter Six Hard Drive Dr. Mohammad AlAhmad
Computer/Digital Forensics
Floppy disks.
Disks and Formatting Ch 3.
History of hard disk drive
A+ Breakout Ralph D Nyberg
Introduction to Computing
Mass-Storage Structure
Hard Drive Technologies
Storage Forensics Anatomy of a Hard Drive
Troubleshooting (CPU)
Chapter Overview CD-ROM and DVD Drives Advanced Hard Disk Drives
Chapter 2: The Linux System Part 5
Hard disk basics Prof:R.CHARLES SILVESTER JOE Departmet of Electronics St.Joseph’s College,Trichy.
Hard Drive Components 1.5 Install and configure storage devices and use appropriate media YT Video 3:30.
Presentation transcript:

COEN 252 Computer Forensics Hard Drive Geometry

Drive Geometry Basic Definitions: Track Sector Floppy

Hard Drive Geometry Cylinder Cylinder is formed by the tracks on all the platters with fixed actuator. (Due to different temperatures and hence different arm length, it is impossible to read and write in parallel.)

Hard Drive Geometry Writing and Reading on a Track

Hard Drive Geometry Data is stored in the form of a magnetization pattern.

Complete Disk IBM Ultrastar Z

Sectors Complete Sectors are written and read.

Sectors Consists of Inter-sector gap ID Information (including defective mark) (no longer used in modern drives) Synchronization fields Client Data (512B) ECC Inter-sector gap

Formatting Low level format Creates data structures for tracks and sectors. Defective sectors and regions are remapped. There is no direct access to the disk layout. This is not the usual formatting.

Interfaces Disks are getting smarter: In the history of disk drives, control function moved to the disk. Disks uses Logical Sector or Cylinder-Head- Sector addressing interface SCSI: Small Computer Systems Interface Block Device (Logical Sector) SCSI 1, 2, 3 standards implement generic command language ATA (AT Attachment): PATA, SATA

Interfaces ATA / IDE (Integrated Disk Electronics) Specified as family of standards ATA-1 (1994) to ATA-7 (in draft) ATA disks require a controller (channel) built into the motherboard. Controller controls one or two disks. Master and slave disk. Typical motherboard has two channels with up to two disks / devices.

Interfaces SATA (Serial ATA) as opposed to PATA uses Advanced Host Controller Interface (AHCI) supported by Vista, Linux, but not XP often implemented in conjunction with Serial Attached SCSI (SAS) look like PATA at the application level but completely non-interchangeable at the device level 7 pin SATA data cable 15 pin SATA power cable

Interfaces Addressing Distinguish Physical addresses (low level format) and Logical addresses (changed by normal formatting / repartitioning) Physical addresses Cylinder Head Sector proved to limiting: 10b cylinder, 4b head, 6b sector 16b cylinder, 4b head, 6b sector LBA (Logical Block Addresses) In older systems, the BIOS might have to do address translation. This causes a FE (forensic examiner) head-ache if disks are mounted on other systems.

Interfaces Terminology is difficult to understand. Removable media specifications in AT Attachment Packet Interface (ATAPI)

Interfaces Controller issues commands over the ribbon cable. Single bit determines whether the master or the slave executes the command. Controller writes to command register. Disk responds by writing to status register.

Interfaces Hard Drive Passwords Established in ATA-3. Set through BIOS or through software. If implemented: User password Master password (for organization) High-security: both passwords unlock disk. Maximum-security: master password only unlocks after disk drive has been wiped.

Interfaces Hard Drive Passwords Locked disk is usually visible to the OS. Need SECURITY_UNLOCK with the correct password before most ATA commands are executed. There are tools (hdunlock, atapwd) to unlock a drive Used mainly to circumvent IP protection in game consoles (X-box)

Host Protected Area: HPA Appeared first in ATA-4 Used so that computer vendors could store data that a user cannot damage by formatting. HPA can be used to hide data.

Host Protected Area: HPA Investigative Process READ_NATIVE_MAX_ADDRESS returns number of physical sectors IDENTIFY_DEVICE returns number of sectors that a user can access. Difference shows existence and extend of HPA. Creating HPA SET_MAX_ADDRESS limits user access to last sectors. Rerunning it with maximum physical address unlocks HPA. Volatility bit determines whether HPA exists after the disk is shut down and restarted. This can be used to temporarily unlock a HPA.

DCO Device Configuration Overlay ATA-6 Limits the apparent maximum number of physical sectors. Use the DEVICE_CONFIGURATION_SET / RESET ATA commands.

Interface PATA vs. SATA SATA has speed advantage and also smaller cable.