Data Recovery Function Testing for Digital Forensic Tools - Advances in Digital Forensics VI
Conference Papers Year : 2010

Data Recovery Function Testing for Digital Forensic Tools

Abstract

Many digital forensic tools used by investigators were not originally designed for forensic applications. Even in the case of tools created with the forensic process in mind, there is the issue of assuring their reliability and dependability. Given the nature of investigations and the fact that the data collected and analyzed by the tools must be presented as evidence, it is important that digital forensic tools be validated and verified before they are deployed. This paper engages a systematic description of the digital forensic discipline that is obtained by mapping its fundamental functions. The function mapping is used to construct a detailed function-oriented validation and verification framework for digital forensic tools. This paper focuses on the data recovery function. The data recovery requirements are specified and a reference set is presented to test forensic tools that implement the data recovery function.
Fichier principal
Vignette du fichier
GuoS10.pdf (928.26 Ko) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01060626 , version 1 (27-11-2017)

Licence

Identifiers

Cite

Yinghua Guo, Jill Slay. Data Recovery Function Testing for Digital Forensic Tools. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.297-311, ⟨10.1007/978-3-642-15506-2_21⟩. ⟨hal-01060626⟩
284 View
845 Download

Altmetric

Share

More