Purple dawn: dead disk forensics on Google's Fuchsia operating system

Simple item page
dc.contributor.authorJarrett, Matt
dc.contributor.authorMorris, Sarah
dc.date.accessioned2021-11-04T10:31:30Z
dc.date.available2021-11-04T10:31:30Z
dc.date.issued2021-09-20
dc.description.abstractFuchsia is the project name for a “modular, capability-based” operating system currently being developed by Google. There is speculation that Fuchsia may be a successor to the Android OS or a replacement for several other operating systems currently supported by the organisation. This paper examines the file systems found in this operating system and provides a breakdown of the content and structure of the unique volume manager and other partitions found on system. The findings outlined in this paper should allow digital investigators to expedite their understanding of the underlying data found on the platform. This paper also highlights how the zxcrypt encryption subsystem may inhibit the ability of practitioners to carry out an investigation of the MinFS partition. As Fuchsia is still in development, these findings are reliant on there not being significant changes made to structure of partitions examined. There remain unanswered questions regarding the content of the BootFS disk image found in the ZIRCON partition and the structure of entries within the Slice Allocation Table in the FVM.en_UK
dc.identifier.citationJarrett M, Morris S. (2021) Purple dawn: dead disk forensics on Google's Fuchsia operating system. Forensic Science International: Digital Investigation, Volume 39, December 2021, Article number 301269en_UK
dc.identifier.issn2666-2817
dc.identifier.urihttps://doi.org/10.1016/j.fsidi.2021.301269
dc.identifier.urihttp://dspace.lib.cranfield.ac.uk/handle/1826/17234
dc.language.isoenen_UK
dc.publisherElsevieren_UK
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International*
dc.rights.urihttp://creativecommons.org/licenses/by-nc-nd/4.0/*
dc.subjectGoogle Fuchsiaen_UK
dc.subjectFuchsia volume manageren_UK
dc.subjectFVMen_UK
dc.subjectZirconen_UK
dc.subjectZBIen_UK
dc.subjectMinFSen_UK
dc.subjectBlobFSen_UK
dc.subjectZxcrypten_UK
dc.titlePurple dawn: dead disk forensics on Google's Fuchsia operating systemen_UK
dc.typeArticleen_UK

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
Dead_disk_forensics_on_Fuchsia_OS-2021.pdf.pdf
Size:
662.03 KB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Staff publications (CDS)