Digital forensics

About: Digital forensics is a research topic. Over the lifetime, 4270 publications have been published within this topic receiving 49676 citations. The topic is also known as: digital forensic science & Digital forensics.

The Use of File Timestamps in Digital Forensics.

Abstract: Digital evidence is not well perceived by the human senses. Crucial pieces of digital evidence may simply be missed by investigators as the forensic significance of seemingly unimportant pieces of collected data may not be fully understood. This paper will discuss how abstract pieces of information may be extracted from seemingly insignificant evidence sources such a file timestamps by making use of correlating evidence sources. The use of file timestamps as a substitute for missing or corrupt log files as well as the information deficiency problem surrounding the use of timestamps will be discussed in detail. A prototype was developed to help investigators to determine the course of event as they occurred according to file timestamps. The prototype results that were obtained as well as prototype flaws will also be addressed.

Computer forensics and records management – compatible disciplines

Abstract: Purpose – To explore the meaning, methods and techniques associated with the subject of computer forensics and consider the implications of computer forensics for records managers and recordkeeping.Design/methodology/approach – Critically analyses the principles of computer forensics in the context of records characteristics – authenticity, reliability, integrity and usability – and the UK Association of Chief Police Officers (ACPO) principles and procedures for the collection of digital evidence.Findings – The disciplines of records management and computer forensics are potentially mutually compatible. Computer forensics allows for identification of incidents, gathering of evidence, analysis of evidence and potentially recovery of records. Records managers can utilise computer forensics principles to positively enhance records management and have valuable knowledge and expertise to share with their computer forensics colleagues; e.g. metadata expertise, functional requirements for electronic records mana...

Cloud computing and computer forensics for business applications

Abstract: The paper reviews issues related to teaching computer forensics with Cloud Computing. It examines the key issues that Computer Forensics is facing today and the challenges and opportunities that Cloud Computing brings for computer forensics. Computing can be seen in all basic tasks of Computer Forensic Investigation: Data Acquisition and Validation, Bookmaking data, File Signature Analysis and Hash Analysis, Analysis of Data, securing evidence files and reporting. Colleges and universit y are beginning to identify and manage applications and services available through Cloud Computing. For example, Ohio State University and many other universities (Indiana University 2009 Teaching, administrative support, and research. IBM and Google had started programs on college campuses to promote computer known as “clouds” Teaching Com puter Forensics in Cloud Computing environment offers opportunities far beyond traditional computer forensics at the advance edge of technological innovations.

Greening Digital Forensics: Opportunities and Challenges

Abstract: Despite the fact that digital forensics involves strict procedures and principles, but as this paper presents, there are plenty of opportunities that can be practically employed in digital forensics to make this science greener Virtualization can cost effectively reduce the number of workstations running forensic tools in the lab Cloud computing not only facilitate managing and securing services but also decline the number of required network and cooling facilities Forensic labs can also be optimized regarding environmental preservation Using remote protocols and digitalizing paperwork procedures are environmentally helpful practices to accelerate investigation progress as well Employing storage devices with optimal energy usage in digital forensics may highly reduce energy consumption This paper studies established green technologies particularly in information technology field and suggests a framework for implementing compatible techniques in digital forensics to reduce greenhouse gas pollutants, limit carbon emissions, and preserve the environment