USB PassOn: Secure USB Thumb Drive Forensic Toolkit

The flash memory market has grown at an extremely fast rate, when compared with all other types of semiconductors. Much of this can be owed to the rabid use of flash memory in portable media players like Apple iPod, but also to the growth of the cellular phone market, where over 1.2 billion handsets are expected to be sold worldwide this year alone, as well as other electronic devices.[8] Lately, corporation insiders steal confidential information using small USB thumb drive. Therefore USB thumb drives are becoming very important evidence that must be seized in digital crime investigation. In addition, because there are many kinds of USB thumb drives, we need some techniques which can identify specific drive. In this paper, we describe methods of digital evidence analysis about USB thumb drives. We also design and implement USB thumb drive analysis tool that offers various functions on a digital forensic view.