一种清洁严重污染盘片的方法  

A Cleaning Way to Rescue Seriously-contaminated Platter from Soaked HDD

作　　者：康艳荣[1] 赵露[1] 郭丽莉[1] 龙源[1] 鲍梦湖 张耀国 张倩 王博 雷超 张宇 KANG Yanrong;ZHAO Lu;GUO Lili;LONG Yuan;BAO Menghu;ZHANG Yaoguo;ZHANG Qian;WANG Bo;LEI Chao;ZHANG Yu(Institute of Forensic Science,Ministry of Public Security,Beijing 100038,China;Nanjing Leichao Technology Co.,Ltd,Nanjing 210000,China;FROMBYTE Technology Co.,Ltd,Beijing 100094,China)

机构地区：[1]公安部物证鉴定中心,现场物证溯源技术国家工程实验室,痕迹科学与技术公安部重点实验室,北京100038 [2]南京雷超科技有限公司,南京210000 [3]北亚企安科技(北京)有限公司,北京100094

出　　处：《刑事技术》2021年第3期293-298,共6页Forensic Science and Technology

基　　金：“十三五”国家重点研发计划课题(2018YFC0807305);公安部技术研究计划项目(2019JSYJC09)。

摘　　要：随着电子设备的应用普及,电子物证在证明案件事实过程中所起的作用越来越重要。为逃避罪责,嫌疑人恶意破坏电子物证的手段也越来越极端,如火烧、水泡等等。公安机关侦查办案过程中,经常面临存储着关键案件数据的硬盘被扔进污水沟、鱼塘损坏后,电子数据无法恢复这一难题。针对这一问题,在磁头更换、盘体电机更换、ROM更换等技术已相对成熟的前提下,本文从样本制备、清洁溶剂配制、清洁效果分析等方面重点研究了污染盘片的清洁方法,并成功实现了对污染盘片的清洁,解决了浸水类硬盘的数据恢复难题,为公安机关打击犯罪提供了有力的技术支撑。Digital forensics is becoming more and more indispensable for the relevant cases to have genuine facts revealed.At times,criminals have intentionally damaged digital evidence by throwing the crime-related electronic devices into water or burning them to avoid conviction.Consequently,the public security organs often face the hard disks that were taken from sewage ditch or pond,being embarrassed with the difficulty on how to recover the electronic data stored in those disks.Fortunately,countermeasures are increasingly getting attainable with the progressing of relatively mature technologies,e.g.,replacement of magnetic head/disk motor/ROM.A cleaning approach was here tried into rescuing the contaminated platter from soaked HDD through the procedure of sample preparation(having HDD soaked into dirt-spoiled water),cleaning solvents determination and cleaning effect evaluation,having the contaminated disks finally depurated.There was a valuable discovery that the cleaning should be immediately carried out with the platter/disk when it had been fetched out from water,leaving otherwise inability to have the data extracted because of the unsolvable impurities adhered into the platter/disk.Thus,a cleaning way was successfully built up,demonstrating its ability to solve the problem of data recovery from flooded hard disks.Technical reference and assistance would be herewith provided for the law enforcement agencies to crack down on the crimes alike.

关 键 词：电子物证 盘片清洁 数据恢复 硬盘浸水 污染盘片 

分 类 号：DF793.2[政治法律—诉讼法学]