Legacy Forensics: An Emerging Challenge
This addresses a technical challenge in digital forensics for investigators dealing with outdated hardware used in criminal acts, but it is incremental as it focuses on a specific case study.
The paper tackles the problem of accessing legacy storage devices for digital forensics, specifically by describing efforts to resuscitate a Bernoulli Drive from 1983, and discusses implications for the field.
With the passage of time and as new types of storage devices are introduced into the marketplace, contemporary devices will slowly lose their compatibility with current operating systems and PC hardware. As a result, such legacy devices will pose an analytical challenge to the field of digital forensics. Dated technology, while still fully functional, is becoming increasingly incompatible with most contemporary computing hardware and software and thus cannot be properly examined in present-day digital forensic environments. This fact will not be lost on those who utilize legacy hardware to commit criminal acts. This paper describes the technical challenge of accessing legacy devices by describing an effort to resuscitate a Bernoulli Drive, a portable storage device manufactured in 1983 by Iomega Corporation. A number of lessons-learned are provided and the implication of legacy devices to digital forensic science is discussed.