Framework for Reliable Experimental Design (FRED): A research framework to ensure the dependable interpretation of digital data for digital forensics

Abstract

The establishment of fact forms the cornerstone of any forensic discipline, with digital analysis being no exception. Practitioners are under an obligation as expert witnesses to provide factual accounts of digital scenarios, which must be underpinned by robust knowledge and evidential findings. To achieve this level of reliability, investigatory research must be suitably planned, implemented and analysed in a way which instills confidence in the accuracy of any findings. This is particularly important as digital forensic organisations are now facing the impending requirement to have acquired ISO/IEC 17025 accreditation. This article proposes the Framework for Reliable Experimental Design (FRED) to support those engaged in the field of digital forensics research to contribute reliable, robust findings. FRED focuses on the underpinning procedures involved within undertaking the reverse engineering of digital data structures and the process of extracting and interpreting digital content in a reliable way. The proposed framework is designed to be a resource for those operating within the digital forensic field, both in industry and academia, to support and develop research best practice within the discipline. Keywords:-Digital forensics; expert evidence; admissibility; research; digital evidence. 'reconstruct' digital data, a requirement for practitioners in all investigation scenarios. To carry out these tasks requires the use of effective research strategies, underpinned by the implementation of a robust research methodologies in order to aid the accurate interpretation and understanding of digital data. Yet currently, there is limited guidance available to practitioners and academics supporting the construction of valid DF research at this level.

What’s in the Cloud? - An examination of the impact of cloud storage usage on the browser cache

“…The testing undertaken followed the Framework for Reliable Experimental Design (FRED) research model (Horsman, 2018c). All testing carried out within this article was completed using test Dropbox and Google Drive accounts with uniquely identifiable data (both in terms of content; pre-hashed for identification purposes, and filename) to examine account usage behaviors in the cache.…”

The Internet of Things: Challenges and Considerations for Cybercrime Investigations and Digital Forensics

“…"Framework for Reliable Experimental Design" (FRED) proposed by Horsman, focuses on the underpinning procedures involved within undertaking the reverse engineering of digital data structures and the process of extracting and interpreting digital content in a reliable way. The proposed framework is designed to be a resource for those operating within the digital forensic field, both in industry and academia, to support and develop research best practice within the discipline (Horsman, 2018). Regardless of approach, the three key stages are the collection, analysis, and presentation of evidence, but the level of emphasis and attention on other stages can differ.…”

“…Depending on the scenario, there could be a need to pay more attention to other stages or to adapt the approach. There is a need for standardisation and transparency in digital forensic research methodologies to allow sufficient peer-review of practices, secondary interpretation of data and the ability to assess the reliability of findings that are offered in any contribution to knowledge (Horsman, 2018). Following a general process model is not specific enough to deal with the different types of cybercrime and the broad range of cases encountered by law enforcement.…”

“…In the infancy of computer forensics, cases were limited to the analysis of a single device; increasingly cases require the analysis of multiple devices followed by the correlation of the collected evidence. Issues identified within the study are still prominent now in 2018 (Horsman, 2018), and the rapid embrace of the IoT/IoA era enhances these concerns (Macdermott et al, 2018).…”

Penerapan Metode Composite Logic Untuk Perancangan Framework Pengumpulan Bukti Digital Pada Media Sosial

“…Beberapa penelitian sebelumnya telah mengembangkan berbagai jenis framework untuk kebutuhan investigasi dalam bidang digital forensik. Penelitian tersebut antara lain seperti framework untuk cloud computing [18] [19], framework untuk memori forensik [20], framework investigasi smartphone [21], framework multimedia forensik [22], dan pengumpulan data yang bersifat open source intelligence [5]. Akan tetapi, berbagai pengembangan framework tersebut belum mencangkup dan memenuhi kebutuhan untuk investigasi forensik di media sosial.…”