%0 Conference Proceedings
%T Data Corpora for Digital Forensics Education and Research
%+ Fraunhofer Institute for Secure Information Technology [Darmstadt] (Fraunhofer SIT)
%+ Darmstadt University of Technology [Darmstadt]
%A Yannikos, York
%A Graner, Lukas
%A Steinebach, Martin
%A Winter, Christian
%Z Part 4: Forensic Tools and Training
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 10th IFIP International Conference on Digital Forensics (DF)
%C Vienna, Austria
%Y Gilbert Peterson
%Y Sujeet Shenoi
%I Springer
%3 Advances in Digital Forensics X
%V AICT-433
%P 309-325
%8 2014-01-08
%D 2014
%R 10.1007/978-3-662-44952-3_21
%K Forensic data corpora
%K synthetic disk images
%K model-based simulation
%Z Computer Science [cs]Conference papers
%X Data corpora are very important for digital forensics education and research. Several corpora are available to academia; these range from small manually-created data sets of a few megabytes to many terabytes of real-world data. However, different corpora are suited to different forensic tasks. For example, real data corpora are often desirable for testing forensic tool properties such as effectiveness and efficiency, but these corpora typically lack the ground truth that is vital to performing proper evaluations. Synthetic data corpora can support tool development and testing, but only if the methodologies for generating the corpora guarantee data with realistic properties.This paper presents an overview of the available digital forensic corpora and discusses the problems that may arise when working with specific corpora. The paper also describes a framework for generating synthetic corpora for education and research when suitable real-world data is not available.
%G English
%Z TC 11
%Z WG 11.9
%2 https://inria.hal.science/hal-01393787/document
%2 https://inria.hal.science/hal-01393787/file/978-3-662-44952-3_21_Chapter.pdf
%L hal-01393787
%U https://inria.hal.science/hal-01393787
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-DF
%~ IFIP-WG11-9
%~ IFIP-AICT-433