A Survey of Contemporary Enterprise Storage Technologies from a Digital Forensics Perspective

Authors

Gregory H. Carlton, California State Polytechnic University
Joseph Matsumoto, California State Polytechnic University

Prior Publisher

The Association of Digital Forensics, Security and Law (ADFSL)

Abstract

As the proliferation of digital computational systems continue to expand, increasingly complex technologies emerge, including those regarding large, enterprise-wide, information storage and retrieval systems. Within this study, we examine four contemporary enterprise storage technologies. Our examination of these technologies is presented with an overview of the technological features of each offering and then followed with a discussion of the impact of these technologies on digital forensics methods, particularly regarding forensic data acquisition. We offer a general opinion concerning a recommended data acquisition method when faced with the task of obtaining a forensic image of data contained within these technologies, we discuss limitations of our study, and lastly, we suggest areas in which additional research would benefit the field of digital forensics.

References

Bigelow, S. J., & Hawkins, J. (2008, September). data deduplication (Intelligent compression or single-instance storage). Retrieved May 26, 2011, from SearchStorage.com: http://searchstorage.techtarget.com/definition/datadeduplication

Carlton, G. H. (2007). A Protocol for the Forensic Data Acquisition of Personal Computer Workstations. (Doctoral dissertation). (UMI No. 3251043) .

Carlton, G. H., & Zhou, H. (in press). A survey of cloud computing from a digital forensics perspective. International Journal of Interdisciplinary Telecommunications and Networking .

EMC Corporation. (2011). EMC Symmetrix VMAX Virtual Provisioning Space Reclamation and Application Considerations.

EMC Corporation. (2006). EMC Virtual LUN Technology, A Detailed Review.

Feresten, P., Freeman, L., & Woods, M. (2011). The NetApp Virtual Storage Tier. NetApp.

Floyer, D. (2009, October 9). Thin Provisioning. Retrieved May 30, 2011, from wikibon.org: http://wikibon.org/wiki/v/Thin_provisioning

Freeman, L., & NetApp. (2009). Looking Beyond the Hype: Evaluating Data Deduplication Solutions.

Guidance Software. (2011). EnCase Legal Journal. Hernandez, N. (2011, 5 25). EMC Technnology Consultant. (J. Matsumoto, Interviewer)

Jooss, R. (2008). Technical Report: Thin provisioing in a NetApp SAN or IP SAN Enterprise Environment. Network Appliance Inc.

Lessing, M., & von Solms, B. (2008). Live Forensic Acquisition as Alternative to Traditional Forensic Processes. Mannheim, Germany.

Mohay, G. (2005). Technical challenges and directions for digital forensics. First international workshop on systematic approaches to digital forensic engineering (pp. 155-161). Taipei, Taiwan: IEEE.

Valacich, J., & Schneider, C. (2010). Information Systems Today, Managing in the Digital World (4th ed.). Upper Saddle River, NJ: Prentice Hall.

Recommended Citation

Carlton, Gregory H. and Matsumoto, Joseph (2011) "A Survey of Contemporary Enterprise Storage Technologies from a Digital Forensics Perspective," Journal of Digital Forensics, Security and Law: Vol. 6 , Article 5.
DOI: https://doi.org/10.15394/jdfsl.2011.1100
Available at: https://commons.erau.edu/jdfsl/vol6/iss3/5