Experimentation of digital multimedia forensics: State of the art and research gaps

OliveiraJr, Edson; Zorzo, Avelino F.; Neu, Charles V.

doi:10.1002/wfs2.1405

Cited by 3 publications

(3 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A list of mobile forensics analysis tools and their properties are provided in Section 4. Typically, the examiner may use different tools to generate different information and events, there is also a possibility to use different tools to generate the same event to ensure the use and follow up of https:// journal.uob.edu.bh reproducibility of the event and to prove its validity [44] Therefore, an examiner should be familiar with different tools to conduct his analysis successfully.…”

Section: ) Information Analysismentioning

confidence: 99%

A Novel Framework for Mobile Forensics Investigation Process

Moreb,

Salah,

Amro

2024

IJCDS

View full text Add to dashboard Cite

Investigating digital evidence by gathering, examining, and maintaining evidence that was stored in smartphones has attracted tremendous attention and become a key part of digital forensics. The mobile forensics process aims to recover digital evidence from a mobile device in a way that will preserve the evidence in a forensically sound condition. This evidence might be used to prove being a cybercriminal or a cybercrime victim. To do this, the mobile forensics process lifecycle must establish clear guidelines for safely capturing, isolating, transporting, storing, and proving digital evidence originating from mobile devices. There are unique aspects of the mobile forensics procedure that must be considered. It is imperative to adhere to proper techniques and norms for the testing of mobile devices to produce reliable results. In this paper, we develop a novel methodology for the mobile forensics process model lifecycle named Mobile Forensics Investigation Process Framework (MFIPF) which encompasses all the necessary stages and data sources used to construct the crime case. The developed framework contributes to identifying common concepts of mobile forensics through the development of the mobile forensics model that simplifies the examination process and enables forensics teams to capture and reuse specialized forensic knowledge. Furthermore, the paper provides a list of the most commonly used forensics tools and where we can use them in our proposed mobile forensic process model.

show abstract

Section: ) Information Analysismentioning

confidence: 99%

A Novel Framework for Mobile Forensics Investigation Process

Moreb,

Salah,

Amro

2024

IJCDS

View full text Add to dashboard Cite

show abstract

“…Typically, the examiner may use different tools to generate different information and events, there is also a possibility to use different tools to generate the same event to make sure that the event is reproducible and to prove its validity [44] Therefore, an examiner should be familiar with different tools to conduct his analysis successfully.…”

Section: Information Analysismentioning

confidence: 99%

A Novel Framework for Mobile Forensics Investigation Process

Moreb

Salah

Amro

2023

Preprint

View full text Add to dashboard Cite

Investigating digital evidence by gathering, examining, and maintaining evidence that was stored in smartphones has attracted tremendous attention and become a key part of digital forensics. The mobile forensics process aims to recover digital evidence from a mobile device in a way that will preserve the evidence in a forensically sound condition, this evidence might be used to prove to be a cybercriminal or a cybercrime victim. To do this, the mobile forensics process lifecycle must establish clear guidelines for safely capturing, isolating, transporting, storing, and proving digital evidence originating from mobile devices. There are unique aspects of the mobile forensics procedure that must be taken into account. It is imperative to adhere to proper techniques and norms in order for the testing of mobile devices to produce reliable results. In this paper, we develop a novel methodology for the mobile forensics process model lifecycle named Mobile Forensics Investigation Process Framework (MFIPF) which encompasses all the necessary stages and data sources used to construct the crime case. The developed framework contributes to identifying common concepts of mobile forensics through the development of the mobile forensics model that simplifies the examination process and enables forensics teams to capture and reuse specialized forensic knowledge. Furthermore, the paper provides a list of the most commonly used forensics tools and where can we use them in our proposed mobile forensic process model.

show abstract

“…In general, DF experiments provide poor analysis of the collected data mostly based on the mean of the samples, which is not sufficient for providing a proper and trusty result analysis and discussion [OliveiraJr et al 2022, OliveiraJr et al 2021, Casey 2013. Therefore, we hypothesize that the more formal is the experiment, the more reliable and reproducible are its results.…”

Section: Introductionmentioning

confidence: 98%

An Ontology for Supporting Digital Forensics Controlled Experiments: Early Stages of Development

Silva¹,

OliveiraJr²

2022

Anais Do XVI Brazilian E-Science Workshop (BRESCI 2022)

Self Cite

View full text Add to dashboard Cite

The experimentation process is one of the main means of science to evaluate theories based on hypothesis. Science evolves most taking into account the performing of controlled experiments, thus providing trust evidence for different research fields. However, for the Digital Forensics (DF) field, formal controlled experimentation has been neglected over the years. In a recent systematic mapping of the literature, we found more than 200 experiments with few formalization of their procedures, thus jeopardizing its evidence reliability and the capacity of reproducibility. Therefore, this paper provides early steps to specify an ontology for supporting proper planning, conducting, and dissemination of DF controlled experiments. The ontology has as a basis a conceptual model created to specify the main elements of an experiment. We adopted the Uschold and King approach to develop such an ontology. We first designed the ontology with the protégé ontology editor, as it organizes knowledge. In addition, the WebVOWL tool was also used from the json file generated in the protegé tool, as this aids at the construction of a dynamic visual identity for the ontology. As general results, we understand that despite the number of ontologies in the literature being relevant, few present a structure that satisfies a relation of similar objects for their properties, in addition do not covering the context of a DF experiment. Therefore, despite the ontology construction is in its early stages, it is expected that it will shad light to the field of experimentation in DF throughout a hierarchy and formalized process.

show abstract

Experimentation of digital multimedia forensics: State of the art and research gaps

Cited by 3 publications

References 20 publications

A Novel Framework for Mobile Forensics Investigation Process

A Novel Framework for Mobile Forensics Investigation Process

A Novel Framework for Mobile Forensics Investigation Process

An Ontology for Supporting Digital Forensics Controlled Experiments: Early Stages of Development

Contact Info

Product

Resources

About