Digital Forensic Research: The Good, the Bad and the Unaddressed

Beebe, Nicole

doi:10.1007/978-3-642-04155-6_2

Cited by 113 publications

(47 citation statements)

References 58 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Forensic copies are taken according to acquisition formats that are accepted in literature [20]. Image formats determine how the data derived from the evidence will be stored.…”

Section: Forensic Acquisition Processmentioning

confidence: 99%

“…Image formats determine how the data derived from the evidence will be stored. DD, AFF, E01, NUIX, ProDiscover, SafeBack, Smart, XWays are some different image formats that are being used [20][21][22].…”

Section: Forensic Acquisition Processmentioning

confidence: 99%

“…Frequently used hash functions are MD2 (Message-Digest), MD4, MD5, SHA-0, SHA-1, SHA-256/224, SHA-384 and SHA-512 series algorithms [20,23].…”

Section: A Hash Functionsmentioning

confidence: 99%

See 2 more Smart Citations

Forensics Image Acquisition Process of Digital Evidence

Akbal¹,

Doğan²

2018

IJCNIS

View full text Add to dashboard Cite

Abstract-For solving the crimes committed on digital materials, they have to be copied. An evidence must be copied properly in valid methods that provide legal availability. Otherwise, the material cannot be used as an evidence. Image acquisition of the materials from the crime scene by using the proper hardware and software tools makes the obtained data legal evidence. Choosing the proper format and verification function when image acquisition affects the steps in the research process. For this purpose, investigators use hardware and software tools. Hardware tools assure the integrity and trueness of the image through write-protected method. As for software tools, they provide usage of certain write-protect hardware tools or acquisition of the disks that are directly linked to a computer. Image acquisition through writeprotect hardware tools assures them the feature of forensic copy. Image acquisition only through software tools do not ensure the forensic copy feature. During the image acquisition process, different formats like E01, AFF, DD can be chosen. In order to provide the integrity and trueness of the copy, hash values have to be calculated using verification functions like SHA and MD series. In this study, image acquisition process through hardware-software are shown. Hardware acquisition of a 200 GB capacity hard disk is made through Tableau TD3 and CRU Ditto. The images of the same storage are taken through Tableau, CRU and RTX USB bridge and through FTK imager and Forensic Imager; then comparative performance assessment results are presented.

show abstract

“…Forensic copies are taken according to acquisition formats that are accepted in literature [20]. Image formats determine how the data derived from the evidence will be stored.…”

Section: Forensic Acquisition Processmentioning

confidence: 99%

Section: Forensic Acquisition Processmentioning

confidence: 99%

See 1 more Smart Citation

Forensics Image Acquisition Process of Digital Evidence

Akbal¹,

Doğan²

2018

IJCNIS

View full text Add to dashboard Cite

show abstract

“…Lallie and Pimlott [14], Reilly et.al. [15], and Taylor et.al., [16] highlighted the problems encountered in attempting to apply guidelines in a cloud investigation and outlined some of the complexities of the acquisition process where data is in the cloud.…”

Section: Cloud Investigationsmentioning

confidence: 99%

“…In addition to this, cloud investigations lead to jurisprudence/jurisdictional problems related to the ownership of the cloud storage and geographic location (highlighted by Taylor et al [16] and Lallie and Pimlott [14]), and, also, the different methods of acquiring data from different cloud system deployment models.…”

Section: Cloud Investigationsmentioning

confidence: 99%

Digital Forensics to Intelligent Forensics

Irons

Lallie

2014

Future Internet

View full text Add to dashboard Cite

Abstract:In this paper we posit that current investigative techniques-particularly as deployed by law enforcement, are becoming unsuitable for most types of crime investigation. The growth in cybercrime and the complexities of the types of the cybercrime coupled with the limitations in time and resources, both computational and human, in addressing cybercrime put an increasing strain on the ability of digital investigators to apply the processes of digital forensics and digital investigations to obtain timely results. In order to combat the problems, there is a need to enhance the use of the resources available and move beyond the capabilities and constraints of the forensic tools that are in current use. We argue that more intelligent techniques are necessary and should be used proactively. The paper makes the case for the need for such tools and techniques, and investigates and discusses the opportunities afforded by applying principles and procedures of artificial intelligence to digital forensics intelligence and to intelligent forensics and suggests that by applying new techniques to digital investigations there is the opportunity to address the challenges of the larger and more complex domains in which cybercrimes are taking place.

show abstract

Secure forensic data transmission system in cloud database using fuzzy based butterfly optimization and modified ECC

Raji

Ramya

2022

Trans Emerging Tel Tech

View full text Add to dashboard Cite

Data forensic is the investigation of digital data which illustrates how it is created and utilized. It is composed of detection, preservation, retrieval, and analyzing digital information. These data are stored in different domains. When storing the data in a cloud database it is ineluctable to circumvent the data leakage. Several deep learning approaches were conducted to resist data leakage. However, optimized security was not obtained. To address the aforementioned issues we have proposed a novel modified elliptic curve cryptography based secure forensic data transmission system (MESFDT) in the cloud database. The conventional ECC selects the keys used for the encryption and decryption process randomly. This might cause the generation of countless keys and can be easily hacked by a malicious user. Therefore we adopted fuzzy based butterfly optimization algorithm (FBOA) for the generation of keys. Thus the ECC is modified to form modified elliptic curve cryptography (MECC). The proposed method is comprised of a MECC integration unit, wireless transceiver, USB interface, MECC unit, smart card reader. This helps to transfer the forensic data from the user to the cloud database securely and also circumvent the duplication of data. The experimental study depicts that the proposed method increases the security of forensic data and mitigates the encryption and decryption time more gently than the other existing approaches.

show abstract

Digital Forensic Research: The Good, the Bad and the Unaddressed

Cited by 113 publications

References 58 publications

Forensics Image Acquisition Process of Digital Evidence

Forensics Image Acquisition Process of Digital Evidence

Digital Forensics to Intelligent Forensics

Secure forensic data transmission system in cloud database using fuzzy based butterfly optimization and modified ECC

Contact Info

Product

Resources

About