A forensic analysis of the Google Home: repairing compressed data without error correction

Autor: Barral, Hadrien, Jaloyan, Georges-Axel, Thomas-Brans, Fabien, Regnery, Matthieu, Géraud-Stewart, Rémi, Heckmann, Thibaut, Souvignet, Thomas, Naccache, David
Rok vydání: 2022
Předmět:
Zdroj: Forensic Science International: Digital Investigation, Volume 42, 2022, 301437, ISSN 2666-2817
Druh dokumentu: Working Paper
DOI: 10.1016/j.fsidi.2022.301437
Popis: This paper provides a detailed explanation of the steps taken to extract and repair a Google Home's internal data. Starting with reverse engineering the hardware of a commercial off-the-shelf Google Home, internal data is then extracted by desoldering and dumping the flash memory. As error correction is performed by the CPU using an undisclosed method, a new alternative method is shown to repair a corrupted SquashFS filesystem, under the assumption of a single or double bitflip per gzip-compressed fragment. Finally, a new method to handle multiple possible repairs using three-valued logic is presented.
Comment: 28 pages, modified version of paper that appeared originally at Forensic Science International: Digital Investigation
Databáze: arXiv