Detection and Investigation Model for the Hard Disk Drive Attacks using FTK Imager

A computer hard disk drive (HDD) is a device that stores, organizes, and manages computer data. In general, it is used for system storage, in which the computer maintains its operating system and other programs. A hard disk drive can, however, be physically damaged as well as affected by software errors, data corruption, and viruses that are used by attackers to cause damage. This study aims to develop a detection and investigation model (DIM) for HDD to detect and investigate HDD attacks using the FTK Imager forensic tool. The design science method is adapted to develop and evaluate the DIM. The developed DIM consists of three main phases: detection, gathering, and analysis. In order to evaluate the capabilities of the developed DIM for HDD, a real scenario was used. According to the results, the DIM can detect and investigate the HDD easily using FTK Imager. Thus, organizations can use the developed DIM to detect, investigate, mitigate, or avoid HDD threats.

@article{Alshammari2023,
  title     = {Detection and Investigation Model for the Hard Disk Drive Attacks using FTK Imager},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {14},
  number    = {7},
  year      = {2023},
  publisher = {The Science and Information Organization},
  author    = {Ahmad Alshammari},
  doi       = {10.14569/IJACSA.2023.0140784},
  url       = {https://doi.org/10.14569/IJACSA.2023.0140784}
}