Transcript
Ibas School: SSD vs. HDD Risks & Side Affects of Flash Technology
Today We Will Discuss:
HDD vs Flash/SSD Technology Flash/SSD Recovery Challenges SSD Encryption Challenges
2
Proprietary | Kroll Ontrack
SSD Survey
SSD Customer Survey –August 2013
4
Proprietary | Kroll Ontrack
HDD vs Flash/SSD Technology
Hard Drive Internals Data
Data Microscope view of magnetized bits on a platter
Spinning hard drives look like a record player with one or more disks (platters) and a read/write head on each side of each platter.
Hard drives store data by magnetizing parts of the disks and store data sequentially.
A cleanroom environment is necessary in the majority of recoveries. 6
Proprietary | Kroll Ontrack
Types of HDD Failures
Proprietary | Kroll Ontrack
HDD Roadmap – HDD GAP Performance Increase: » CPU 8-10x » DRAM 7-9x » Network 100x » Bus 20x
Capacity Roadmap: » Heat Assisted Magnetic Recording (HAMR) » Bit Patterned Media (BPM) » Shingled Magnetic Recording (SMR) 8
Proprietary | Kroll Ontrack
Performance GAP: Disk Drive 1.2x
Solid State Drives (SSDs) SSD Market Analysis SSD shipments expected to grow by 600% by 2017 More manufacturers competing in the market are driving down prices
data storage chips controller chip
The increased use of tablets, smartphones and other ultrathin devices are creating high demand
The increased speed and responsiveness are benefits of SSDs SATA interface
9
Proprietary | Kroll Ontrack
Which devices use SSD technology?
Source: Kroll Ontrack survey of 243 IT professionals in November 2012.
10
Proprietary | Kroll Ontrack
Proprietary | Kroll Ontrack
What factors influence the decision to use SSD technology?
11
Proprietary | Kroll Ontrack
Solid State Drive - SSD
Proprietary | Kroll Ontrack
Solid State Drive - SSD
Proprietary | Kroll Ontrack
Solid State Drive Internals Controller Chip Memory Chips Removed Connector Memory Chips
Solid State Drives have no moving parts. The data is not stored sequentially on the chips so the engineer must re-assemble the data, similar to a Raid recovery.
14
Proprietary | Kroll Ontrack
Memory Chips - Blocks - Pages 0
= Page [smallest Unit] 4 KB or 8 KB
Block [128 Pages = 1 Block] Possible status: > free > filled with data marked for deletion bad Smallest Unit to delete!
Memory-Chip [ n Blocks = 1 Chip ]
n
15
Proprietary | Kroll Ontrack
NAND-Flash Type Source: SAMSUNG
SLC = Single Level Cell: Highest endurance; Highest performance; Most expensive
MLC = Multi Level Cell: Moderate cost; Read intense apps; Web server eMLC = Enterprise MLC: Higher security at moderate cost; Database apps
TLC = Triple Level Cell: Low cost; High density; Consumer Electronics 16
Proprietary | Kroll Ontrack
Endurance SSD – Example Server Database Endurance Flash Chips is device related but pridictable: Capacity x Write Capacity Write Bandwidth
SLC: » (1TB*100.000/500MBps) = 6,3 years
eMLC » (1TB*30.000/500MBps) ~ 2 years
MLC » (1TB*3.000/500 MBps) ~ 3 month 17
Proprietary | Kroll Ontrack
Source: Kurt Gercke, IBM Storage
Endurance SSD – Example: Notebook Endurance Flash Chips is device related but pridictable: Capacity x Write Capacity Write Bandwidth
Example: Notebook 60GB/day MLC » (256GB*3.000/0,7 MBps) ~ 35 years » Equals to more than 700 TB of data! » First long time enduranca tests by Techreport 18
Proprietary | Kroll Ontrack
Source: Kurt Gercke, IBM Storage
Types of Flash/SSD Failures
19
Proprietary | Kroll Ontrack
Types of Flash/SSD Failures User Error/Environmental Influences » Fire/Water Damage
» Broken Connector/Physical Damage » Deleted Data » Virus
Electronics Component Failure » Flash Controller » Flash NAND Memory Chip » Voltage Regulator
System Area Corruption » Erased/Corrupted Mapping Table » Erased/Corrupted Firmware 20
Proprietary | Kroll Ontrack
Deliveries HDD vs. SSD 1400
1162
1200 1012
1000
882 770
800 625
673
HDD** SSD*
600
400 200 17
39
2011
2012
126
83
175
239
0 2013
2014
* Source: IHS iSuppli, January 2013 ** Source: Coughlin Associates, May 2012 21
Proprietary | Kroll Ontrack
2015
2016
in millions
Rise of SSD Deliveries and SSD Recoveries 18,0% 16,0% 14,0% % of SSDs Shipped
12,0% 10,0%
% of SSD Recoveries
8,0% 6,0%
4,0% 2,0% 0,0% 2011
2012
2013
2014
2015
SSD Drives Shipped Source: IHS iSuppli, January 2013 HDD Drives Shipped Source: Coughlin Associates, May 2012 22
Proprietary | Kroll Ontrack
2016
Myths SSD Technologie MYTHS » Lower number of defects due to no mechanical/spinning parts » Overall lower MTBF (Mean Time Between Failure) » SSD equals low endurance
» Limited use cases in server environments
FACTS » Complex structure, missing standards for SSD
» No long-term experience (only about 6 years) » Limited number of write cycles for NAND Flash technology; Read cycles have no influence on endurance
» Hybrid-Solutions become standard in data centers 23
Proprietary | Kroll Ontrack
When appropriately used, SSDs will be comparable with traditional hard disks. SSD are neither better nor worse than HDD! There is a lot to consider properly using SSD!
SSD Recovery Challenges
SSD/Flash Recovery Challenges What?
Why?
Software/Hardware Proprietary Tools
Only a few tool are on the market – all other needs to be developed
Time Consuming
Need to research the algorithms used to originally store the data
Wear leveling (balances usage evenly across all disk sectors)
Creates a complication to piece the data back together – we see a lot of file duplicates
RAID-like configuration
Individual memory chips on devices make data less contiguous and difficult to piece back together
Lack of standardized configurations
25
Proprietary | Kroll Ontrack
Many recovery jobs bring new challenges and new algorithms
SSD Recovery • Challenge of Flash/SSD Storage Devices • Flash Translation Layer (FTL); Proprietary to OEM • Usable blocks are mapped in controller NVRAM • Blocks marked for erasure not immediate – garbage collection delay • Corrupt block mapping prevents normal erasure process – leaves data intact and vulnerable
Proprietary | Kroll Ontrack
HDD vs SSD Manufacturers: HDD
Graphic Source: Chris Ritter, Buzzfeed.com
27
Proprietary | Kroll Ontrack
SSD Manufacturers Six Chip Manufacturers but > 200 SSD Manufacturers SSD is easy to build: Controller, Chip, Firmware,…
28
Proprietary | Kroll Ontrack
SSD Encryption Challenges
The Challenges of Encryption Type of Encryption
Risks and Opportunities
Encryption done by encryption software e.g. TrueCrypt, Bitlocker, SafeGard, Safeboot,…
The master key is in your hands – even when a data recovery from a physically damaged hard disk is necessary the use of the key guarantees access to your stored data.
Encryption by SSD controller when saving data on SSD (Self-encrypted drive (SED); AES hardware Encryption)
Data is stored encrypted but the master key is only known by the manufacturer – this means when the storage device is damaged there is no way of recovering the data.
30
Proprietary | Kroll Ontrack
