The forensic process relies on the scientific method to scrutinize recovered evidence that either supports or negates an investigative hypothesis. Currently, analysis of digital evidence remains highly subjective to the forensic practitioner. Digital forensics is in need of a deterministic approach to obtain the most judicious conclusions from evidence. The objective of this paper is to examine...

This work describes the investigation of a new 3D capture method for acquisition and subsequent forensic analysis of bite mark injuries on human skin. When documenting the bite marks with standard 2D cameras, errors in photographic technique can occur if best practice is not strictly adhered to. Subsequent forensic analysis of the mark is problematic when a 3D structure is recorded in 2D space....

Digital forensics is the science of identifying, extracting, analysing and presenting the digital evidence that has been stored in the digital devices. Various digital tools and techniques are being used to achieve this. Our paper explains emerging cyber crimes, forensic analysis steps in the storage media, hidden data analysis in the file system, network forensic methods and cyber crime data m...

Figures 16–19 show different parts of the formulation of the forensic analysis protocol (broken across four diagrams). We will discuss Page Write Timestamp corruption (on disk), Attribute corruption (on disk), and Schema corruption (on disk) using the the four figures as a guide. Data corruptions which affect an entire tuple will not be discussed since no tools exist right now that adequately a...

This paper describes a forensic application scenario in the speaker recognition domain and explains the techniques required to develop a complete forensic analysis system based on speaker identification. It is presented a standard manner of how Gaussian Mixture Models (GMMs) could be used in order to compute and express identification results in a judicial system. A review of possible technique...

Due to the numerous complicating factors in the field of small scale digital device forensics, physical acquisition of the storage of such devices is often not possible (at least not without destroying the device). As an alternative, forensic examiners often gather digital evidence from small scale digital devices through logical acquisition. This paper focuses on analyzing the backup file gene...