An Australian Longitudinal Study Into Remnant Data Recovered From Second-Hand Memory Cards

Patryk Szewczyk, Krishnun Sansurooah, Patricia Williams

OAI: oai:igi-global.com:216851 • DOI: 10.4018/IJISP.2018100106

Consumers demand fast, high capacity, upgradeable memory cards for portable electronic devices, with secure digital (SD) and microSD the most popular. Despite this demand, secure erasure of data is still not a composite part of disposure practices. To investigate the extent of this problem, second-hand memory cards were procured from the Australian eBay site between 2011 and 2015. Digital forensic tools were used to acquire and analyze each memory card to determine the type and quantity of remnant data. This paper presents the results of the 2014 and 2015 studies and compares these findings to the 2011–2013 research studies. The longitudinal comparison indicates resold memory cards are disposed insecurely, with personal, confidential and business data undeleted or easily recoverable. The impact of such discoveries, where information is placed in the public domain, has the potential to cause embarrassment and financial loss to individuals, business, and government organizations.

Information Security & Privacy Security and Forensics IT Security and Ethics