论文信息 - A mathematical approach to NAND flash-memory descrambling and decoding

A mathematical approach to NAND flash-memory descrambling and decoding

Abstract New mathematical techniques for analysis of raw dumps of NAND flash memory were developed. These techniques are aimed at detecting, by analysis of the raw NAND flash dump only, the use of LFSR-based scrambling and the use of a binary cyclic code for error-correction. If detected, parameter values for both LFSR and cyclic error-correcting code are determined simultaneously. These can subsequently be applied to expose the content of memory pages in the raw NAND flash dump and prepare these for further processing with media analysis tools. The techniques were tested on raw NAND flash memory dumps of four different devices and in all cases LFSR-based scrambling and binary cyclic error-correcting codes were in use.

Jan Peter van Zandwijk | J. V. Zandwijk

[1] Ray Hill,et al. A First Course in Coding Theory , 1988 .

[2] Xin-Wen Wu,et al. Reconstructing a Linear Scrambler With Improved Detection Capability and in the Presence of Noise , 2012, IEEE Transactions on Information Forensics and Security.

[3] Sebastien Houcke,et al. Algebraic Approach for the Reconstruction of Linear and Convolutional Error Correcting Codes , 2008 .

[4] Mark Roeloffs,et al. Forensic Data Recovery from Flash Memory , 2007 .

[5] Mathieu Cluzeau,et al. Reconstruction of a Linear Scrambler , 2007, IEEE Transactions on Computers.

[6] Li Zhang,et al. Identification of NAND flash ECC algorithms in mobile devices , 2012, Digit. Investig..

[7] James L. Massey,et al. Shift-register synthesis and BCH decoding , 1969, IEEE Trans. Inf. Theory.

[8] J. H. van Lint,et al. Introduction to Coding Theory , 1982 .