New security loophole ‘could assist data retrieval’

Category: Computer Investigations

14 August, 2012

Scientists in Greece have uncovered a security loophole which will allow users to exploit the way computer memory operates.

This could be used by a computer forensic investigator to harvest passwords and other sensitive data, even when a PC is in the standby mode.

Writing in a forthcoming issue of the journal Electronic Security and Digital Forensics, Georgiadis of the University of Macedonia in Thessaloniki and colleagues Stavroula Karayianni and Vassilios Katos of the Democritus University of Thrace in Xanthi explain how this discovery could be used in forensic science for retrieving incriminating evidence.

However, they also warned that it could be exploited by criminals looking to obtain personal data and bank details.

The researchers found that any data held in RAM when a computer is switched off is not necessarily lost, in contrary to popular opinion. Instead if the computer is switched off but the mains electricity supply not interrupted then data retrieval is still possible.

Computer Investigations– Kroll Ontrack’s computer forensic experts are qualified to perform intricate computer forensic examinations & computer investigations by employing the correct techniques to carefully and accurately contain, preserve and extract critical digital evidence.