FORENSIC CHIP OFF ACQUISITION OF NOR FLASH MEMORY IN EMBEDDED DEVICES
Article Sidebar
Main Article Content
Abstract
In digital forensics, the most important element is data. It can be any information such as images, documents, log files, and user credentials stored in a device. As our world moves forward, the digital devices are also advancing with technological developments, evolving from early computing systems such as ENIAC to modern flash-memory-based storage, whereas the data has become more fragile and prone to attackers. This review examines the application of Chip-off Acquisition on NOR Flash Memory in embedded devices. To prevent data recovery, digital devices are encrypted, physically damaged, or broken. Recovering data from these devices is a difficult aspect, as many challenges occur during the process. Traditional methods such as live acquisition, logical acquisition, and JTAG extraction have several limitations such as altering volatile data, requiring an active debug port etc. To overcome this issue Chip-off Acquisition is used. It is a hardware level data extraction technique involving removal of the chip, cleaning it, reading the raw data using a chip reader and processing the extracted raw data into the specialized software. Data from NAND Flash memory has been recovered by performing the acquisition, which has been studied. Chip-off Acquisition is also applicable to NOR Flash Memory. However, research specifically on NOR flash memory on various devices remains limited.
Article statistics
- Abstract views
- 384
- PDF Downloads
- 68
- Total views
- 452
Downloads
Article Details
Section
This work is licensed under a Creative Commons Attribution 4.0 International License.
All articles published in International Journal of Security Sciences (IJSS) are licensed under the terms of the Creative Commons Attribution 4.0 International License (CC BY 4.0).
This license allows others to share, copy, distribute, and adapt the work, provided that appropriate credit is given to the original author(s) and the source.
Authors retain copyright and grant International Journal of Security Sciences (IJSS) the right of first publication.
How to Cite
References
[1] Muhammad Tuhin. The Evolution of Technology: From the Stone Age to Today 2025
[2] Shepherd J. What is the Digital Era? Social and Economic Transformation in the Digital Era, IGI Global; 2004, p. 1–18. https://doi.org/10.4018/978-1-59140-158-2.ch001 DOI: https://doi.org/10.4018/978-1-59140-158-2.ch001
[3] Pandey P, Kapoor A. CYBERCRIME IN THE DIGITAL ERA: IMPACTS, AWARENESS, AND STRATEGIC SOLUTIONS FOR A SECURE FUTURE. Sachetas 2025;4:32–7. https://doi.org/10.55955/410004 DOI: https://doi.org/10.55955/410004
[4] Hargreaves C, van Beek H, Casey E. SOLVE-IT: A proposed digital forensic knowledge base inspired by MITRE ATT & amp; CK. Forensic Science International: Digital Investigation 2025;52:301864. https://doi.org/10.1016/j.fsidi.2025.301864 DOI: https://doi.org/10.1016/j.fsidi.2025.301864
[5] Avanoz T, Akbal E. Data Recovery Application from NAND Flash Memories Using the Chip-Off Technique in Digital Forensics. International Journal of Innovative Engineering Applications 2025;9:232–42. https://doi.org/10.46460/ijiea.1797801 DOI: https://doi.org/10.46460/ijiea.1797801
[6] Jessica Hopkins. What is Flash Memory? Introduction, Types, Examples, and Applications. 2021
[7] Sanvido M, Chu FR, Kulkarni A, et al. Nand Flash Memory and Its Role in Storage Architectures. Proceedings of the IEEE 2008;96:1864–74. https://doi.org/10.1109/JPROC.2008.2004319 DOI: https://doi.org/10.1109/JPROC.2008.2004319
[8] Stephen J. Bigelow, Margaret Jones. Stephen J. Bigelow and Margaret Jones. (2023, May 12). NAND flash memory. NOR Flash: Working, Structure, and Applications. (2021, November 18). 202
[9] Zhasmin Kadyr AA. Intelligent Chip-off and imaging methods for extracting data from legacy HDDs. In: Biloshchytsky Andrii, Zhakiyev Nurkhat, Abitova Gulnara, et al., editors. 1st international Scientific and Practical Conference (ICCSDFAI-25), Astana, Kazakhstan : Decision of the Scientific and Technical Council of Astana IT University LLP dated 16.04.2025, protocol No.5; 2025, p. 396–400
[10] Avanoz T, Akbal E. Data Recovery Application from NAND Flash Memories Using the Chip-Off Technique in Digital Forensics. International Journal of Innovative Engineering Applications 2025;9:232–42. https://doi.org/10.46460/ijiea.1797801 DOI: https://doi.org/10.46460/ijiea.1797801
[11] Serm T-B, Chen T-C, Wang P-K, et al. Experimental and modeled analysis of source-line loading effects in NOR flash compute-in-memory arrays. Applied Physics Lett 2025;127. https://doi.org/10.1063/5.0304098 DOI: https://doi.org/10.1063/5.0304098
[12] Huang H, Pan Y, Xia W, et al. Simplifying and Accelerating NOR Flash I/O Stack for RAM-Restricted Microcontrollers. Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2, New York, NY, USA: ACM; 2025, p. 1076–90. https://doi.org/10.1145/3676641.3716272 DOI: https://doi.org/10.1145/3676641.3716272
[13] Rzayeva L, Shayakhmetov M, Atanbayev Y, et al. Automated Forensic Recovery Methodology for Video Evidence from Hikvision and Dahua DVR/NVR Systems. Information 2025;16:983. https://doi.org/10.3390/info16110983 DOI: https://doi.org/10.3390/info16110983
[14] Sutikno T, Busthomi I. Capabilities of cellebrite universal forensics extraction device in mobile device forensics. Computer Science and Information Technologies 2024;5:254–64. https://doi.org/10.11591/csit.v5i3.p254-264 DOI: https://doi.org/10.11591/csit.v5i3.p254-264
[15] Shaikh S, Deng L, Xu W. A Practical Survey of Data Carving from Non-Functional Android Phones Using Chip-Off Technique. In: Shahram Latifi, editor. ITNG 2024: 21st International Conference on Information Technology-New Generations (ITNG 2024), Baltimore, MD, USA: Springer, Cham; 2024, p. 43–50. https://doi.org/10.1007/978-3-031-56599-1_6 DOI: https://doi.org/10.1007/978-3-031-56599-1_6
[16] Kim SS, Yong SK, Kim W, et al. Review of Semiconductor Flash Memory Devices for Material and Process Issues (Adv. Mater. 43/2023). Advanced Materials 2023;35. https://doi.org/10.1002/adma.20237031 DOI: https://doi.org/10.1002/adma.202370310
[17] Tiwari N, Baroniya Y, Bharadwaj V, et al. Cyber and Digital Forensic. In: Pankaj Shrivastava, Jose Antonio Lorente, Ankit Srivastava, et al., editors. Textbook of Forensic Science, Singapore: Springer Nature Singapore; 2023, p. 773–803. https://doi.org/10.1007/978-981-99-1377-0_25 DOI: https://doi.org/10.1007/978-981-99-1377-0_25
[18] Alshenaifi IM, Qazi EUH, Almorjan A. IoT Forensics: Machine to Machine Embedded with SIM Card. In: Shahram Latifi, editor. ITNG 2023 20th International Conference on Information Technology-New Generations (ITNG 2023), Springer, Cham; 2023, p. 133–42. https://doi.org/10.1007/978-3-031-28332-1_16 DOI: https://doi.org/10.1007/978-3-031-28332-1_16
[19] Hadgkiss M, Morris S, Paget S, et al. Cheap as chips: An accessible Chip-off Acquisition method for ball grid array (BGA) integrated circuits in digital investigations. Forensic Science International: Digital Investigation 2022;42–43:301481. https://doi.org/10.1016/j.fsidi.2022.301481 DOI: https://doi.org/10.1016/j.fsidi.2022.301481
[20] Wei M-L, Lue H-T, Ho S-Y, et al. Analog Computing in Memory (CIM) Technique for General Matrix Multiplication (GEMM) to Support Deep Neural Network (DNN) and Cosine Similarity Search Computing using 3D AND-type NOR Flash Devices. 2022 International Electron Devices Meeting (IEDM), IEEE; 2022, p. 33.3.1-33.3.4. https://doi.org/10.1109/IEDM45625.2022.10019495 DOI: https://doi.org/10.1109/IEDM45625.2022.10019495
[21] Huang W, Zhu H, Li J, et al. A Novel 3D NOR Flash With Single-Crystal Silicon Channel: Devices, Integration, and Architecture. IEEE Electron Device Letters 2022;43:1874–7. https://doi.org/10.1109/LED.2022.3211174 DOI: https://doi.org/10.1109/LED.2022.3211174
[22] Tanios B, Kaddour M, Forgerit B, et al. Single Event Effects Characterization of 55-65nm NOR Flash for Space Applications. 2021 21th European Conference on Radiation and Its Effects on Components and Systems (RADECS), IEEE; 2021, p. 1–4. https://doi.org/10.1109/RADECS53308.2021.9954491 DOI: https://doi.org/10.1109/RADECS53308.2021.9954491
[23] Bruehs WE, Stout D. Quantifying and Ranking Quality for Acquired Recordings on Digital Video Recorders. J Forensic Sci 2020;65:1155–68. https://doi.org/10.1111/1556-4029.14307 DOI: https://doi.org/10.1111/1556-4029.14307
[24] Gomm R, Brooks R, Choo K-KR, et al. CCTV Forensics in the Big Data Era: Challenges and Approaches. In: Nhien-An Le-Khac, Kim-Kwang Raymond Choo, editors. Studies in big data, vol. 74, Springer, Cham; 2020, p. 109–39. https://doi.org/10.1007/978-3-030-47131-6_6 DOI: https://doi.org/10.1007/978-3-030-47131-6_6
[25] Hosani H Al, Yousef M, Shouq S Al, et al. State of the Art in Digital Forensics for Small Scale Digital Devices. 2020 11th International Conference on Information and Communication Systems (ICICS), IEEE; 2020, p. 072–8. https://doi.org/10.1109/ICICS49469.2020.239531 DOI: https://doi.org/10.1109/ICICS49469.2020.239531
[26] Poudel P, Ray B, Milenkovic A. Flashmark: Watermarking of NOR Flash Memories for Counterfeit Detection. 2020 57th ACM/IEEE Design Automation Conference (DAC), IEEE; 2020, p. 1–6. https://doi.org/10.1109/DAC18072.2020.921852 DOI: https://doi.org/10.1109/DAC18072.2020.9218521
[27] Mistry NR, Koshy B, Dahiya M, et al. iPhone Forensics. Digital Forensics and Forensic Investigations, IGI Global; 2020, p. 308–24. https://doi.org/10.4018/978-1-7998-3025-2.ch021 DOI: https://doi.org/10.4018/978-1-7998-3025-2.ch021
[28] Conti M, Dehghantanha A, Franke K, et al. Internet of Things security and forensics: Challenges and opportunities. Future Generation Computer Systems 2018;78:544–6. https://doi.org/10.1016/j.future.2017.07.060 DOI: https://doi.org/10.1016/j.future.2017.07.060
[29] Aweya James. Switch/Router Architectures : Shared-Bus and Shared-Memory Based Systems. Wiley-IEEE Press; 2018. DOI: https://doi.org/10.1002/9781119486220
[30] Hidaka H. Embedded Flash Memory for Embedded Systems: Technology, Design for Sub-systems, and Innovations. Cham: Springer International Publishing; 2018. https://doi.org/10.1007/978-3-319-55306-1 DOI: https://doi.org/10.1007/978-3-319-55306-1
[31] Alani MM. Cisco Router Management. Guide to Cisco Routers Configuration, Cham: Springer International Publishing; 2017, p. 183–206. https://doi.org/10.1007/978-3-319-54630-8_7 DOI: https://doi.org/10.1007/978-3-319-54630-8_7
[32] Shen X-W, Ye X-C, Tan X, et al. An Efficient Network-on-Chip Router for Dataflow Architecture. J Computer Science Technology 2017;32:11–25. https://doi.org/10.1007/s11390-017-1703-5 DOI: https://doi.org/10.1007/s11390-017-1703-5
[33] Muhammad Itqan Mazdadi IRAL. Live Forensics on RouterOS using API Services to Investigate Network Attacks . International Journal of Computer Science and Information Security (IJCSIS) 2017;15:406–10
[34] Paulsen K. Video Recording, Servers, and Storage. National Association of Broadcasters Engineering Handbook, Routledge; 2017, p. 677–744. https://doi.org/10.4324/9781315680149-39 DOI: https://doi.org/10.4324/9781315680149-39
[35] Yi Q, Shi M, Chen Y. The Design of Surveillance System Based on Hi3520D. 2017 5th International Conference on Mechanical, Automotive and Materials Engineering (CMAME), IEEE; 2017, p. 305–9. https://doi.org/10.1109/CMAME.2017.8540186 DOI: https://doi.org/10.1109/CMAME.2017.8540186
[36] Friard O, Gamba M. BORIS : a free, versatile open‐source event‐logging software for video/audio coding and live observations. Methods Ecology and Evolution 2016;7:1325–30. https://doi.org/10.1111/2041-210X.12584 DOI: https://doi.org/10.1111/2041-210X.12584
[37] Biswas AK, Nandy SK, Narayan R. Network-on-Chip router attacks and their prevention in MP-SoCs with multiple Trusted Execution Environments. 2015 IEEE International Conference on Electronics, Computing and Communication Technologies (CONECCT), IEEE; 2015, p. 1–6. https://doi.org/10.1109/CONECCT.2015.7383936 DOI: https://doi.org/10.1109/CONECCT.2015.7383936
[38] Yadav D, Mishra M, Prakash S. Mobile Forensics Challenges and Admissibility of Electronic Evidences in India. 2013 5th International Conference on Computational Intelligence and Communication Networks, IEEE; 2013, p. 237–42. https://doi.org/10.1109/CICN.2013.57 DOI: https://doi.org/10.1109/CICN.2013.57