Question

Hoe to write advantages and disadvantages in different write-blocking techniques

Answer 1

Consequently, there aren’t many advantages and disadvantages of different write -blocking techniques for forensic imaging, because both software and hardware write blockers do the same job, but in a different fashion. Although, hardware write blockers have historically been the only choice in protecting the integrity of evidence in computer forensics. However, there are some competitive issues and the often over looked total cost of ownership considerations that are driving some within the industry to seek out software based alternatives. Even though they both prevent writes to storage devices. The main difference between the two types is that software write blockers are installed on a forensic computer workstation, whereas hardware write blockers have write blocking software installed on a controller chip inside a portable physical device. Also, the major disadvantage to the hardware write blocker is the cost incurred with utilizing it versus the software write blockers, which in time could prove to be extremely expensive. When one considers the total cost of ownership and ongoing maintenance and warranty costs of hardware write blocking devices the dramatically reduced cost of software write blocking presents an advantage and undeniable business case for consideration. This advantage makes software write blocking a viable and forensically sound alternative to current hardware write blocking solutions (Henry, 2008). Also, a disadvantage to using the software write blockers is presently there are no device drivers in existence for Linux. The disadvantage tothe hardware write blocker is it requires you to carry it around and it is not built into the tool, which is a major advantage to using a software write blocker. The hardware write blocker