%0 Conference Proceedings
%T Refining Evidence Containers for Provenance and Accurate Data Representation
%+ Information Security Institute
%+ Australian Federal Police
%A Schatz, Bradley
%A Cohen, Michael
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 6th IFIP WG 11.9 International Conference on Digital Forensics (DF)
%C Hong Kong, China
%Y Kam-Pui Chow; Sujeet Shenoi
%I Springer
%3 Advances in Digital Forensics VI
%V AICT-337
%P 227-242
%8 2010-01-04
%D 2010
%R 10.1007/978-3-642-15506-2_16
%K Evidence containers
%K representation
%K provenance
%K tool interoperability
%Z Computer Science [cs]/Digital Libraries [cs.DL]Conference papers
%X It is well acknowledged that there is a pressing need for a general solution to the problem of storing digital evidence, both in terms of copied bitstream images and general information that describes the images and context surrounding a case. In a prior paper, we introduced the AFF4 evidence container format, focusing on the description of an efficient, layered bitstream storage architecture, a general approach to representing arbitrary information, and a compositional approach to managing and sharing evidence. This paper describes refinements to the representation schemes embodied in AFF4 that address the accurate representation of discontiguous data and the description of the provenance of data and information.
%G English
%2 https://inria.hal.science/hal-01060621/document
%2 https://inria.hal.science/hal-01060621/file/SchatzC10.pdf
%L hal-01060621
%U https://inria.hal.science/hal-01060621
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-AICT-337
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-DF
%~ IFIP-WG11-9