Digital Forensics: Defining a Research Agenda

Abstract

Abstract

Towards a conceptual model for promoting digital forensics experiments

“…Both works contribute are related to this one in the sense they provide key concepts and stages during planning, conducting, analyzing, and reporting Digital Forensics experiments. Besides, they also discuss the importance of experimentation in Digital Forensics, similarly to Nance et al (2009), Garfinkel (2010), andArshad et al (2018). Nance et al (2009), for example, define a research agenda for Digital Forensics, including the need of development of scientifically rigorous repeatable experiments.…”

“…Besides, they also discuss the importance of experimentation in Digital Forensics, similarly to Nance et al (2009), Garfinkel (2010), andArshad et al (2018). Nance et al (2009), for example, define a research agenda for Digital Forensics, including the need of development of scientifically rigorous repeatable experiments. Garfinkel (2010) discusses the coming Digital Forensics crisis and enforces the need of reliable and admissible evidence.…”

“…As a field of Computer Science, few Digital Forensic researchers discuss experimentation. Nance et al (2009) propose the development of a research, education, and outreach agenda for Digital Forensics. In such agenda, experimentation is suggested as part of the future development for formalizing this research area.…”

Método para ranqueamento e triagem de computadores aplicado à perícia de informática.

“…O aumento da quantidade e diversidade de computadores e seus respectivos DADs, juntamente com o crescente volume de dados causaram mudanças nas IDFs [BRADY, 2014;GARFINKEL, 2010;KARIE, 2015;NANCE, 2009]. Esses fatores tornaram os métodos de investigações digitais impraticáveis e as ferramentas tradicionalmente utilizadas insustentáveis, ultrapassando os limites da capacidade de investigação humana.…”

“…Métodos que possam ser utilizados para oferecer indicativos dos DADs com maiores chances de conter vestígios de interesse para o caso investigado e que possibilitem priorizar equipamentos que devem ser examinados na etapa de análise, podem auxiliar a IDF para reduzir o esforço e tempo gasto desnecessariamente com a análise de DADs que não apresentam chances de conter vestígios de interesse [CASEY, 2013;GRILLO, 2009;NANCE, 2009;YANG, 2008].…”