Concept Mapping for Digital Forensic Investigations
نویسندگان
چکیده
Research in digital forensics has yet to focus on modeling case domain information involved in investigations. This paper shows how concept mapping can be used to create an excellent alternative to the popular checklist approach used in digital forensic investigations. Concept mapping offers several benefits, including creating replicable, reusable techniques, simplifying and guiding the investigative process, capturing and reusing specialized forensic knowledge, and supporting training and knowledge management activities. The paper also discusses how concept mapping can be used to integrate case-specific details throughout the investigative process.
منابع مشابه
Data Recovery Function Testing for Digital Forensic Tools
Many digital forensic tools used by investigators were not originally designed for forensic applications. Even in the case of tools created with the forensic process in mind, there is the issue of assuring their reliability and dependability. Given the nature of investigations and the fact that the data collected and analyzed by the tools must be presented as evidence, it is important that digi...
متن کاملSix Simple Schemata for Approximating Bayesian Belief Networks
Two families comprising six simple schemata, which reproduce with high accuracy the outputs of Bayesian belief networks as used in actual digital forensic investigations, are described, analyzed, and evaluated numerically. Their application as a forensic triage measure to help in deciding whether a full digital forensic investigation is warranted is critically discussed. The concept of a digita...
متن کاملChallenges with Automation in Digital Forensic Investigations
The use of automation in digital forensic investigations is not only a technological issue, but also has political and social implications. This work discusses some challenges with the implementation and acceptance of automation in digital forensic investigation, and possible implications for current digital forensic investigators. Current attitudes towards the use of automation in digital fore...
متن کاملMapping Process of Digital Forensic Investigation Framework
Digital forensics is essential for the successful prosecution of digital criminals which involve diverse digital devices such as computer system devices, network devices, mobile devices and storage devices. The digital forensic investigation must be retrieved to obtain the evidence that will be accepted in the court of law. Therefore, for digital forensic investigation to be performed successfu...
متن کاملPractical and Legal Challenges of Cloud Investigations
An area presenting new opportunities for both legitimate business, as well as criminal organizations, is Cloud computing. This work gives a strong background in current digital forensic science, as well as a basic understanding of the goal of Law Enforcement when conducting digital forensic investigations. These concepts are then applied to digital forensic investigation of cloud environments i...
متن کامل