Tool testing and reliability issues in the field of digital forensics

Horsman, Graeme

doi:10.1016/j.diin.2019.01.009

Cited by 60 publications

(54 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Process of Acquiring the MariaDB database on the NTFS file system will produce an image file. The images file is used as evidence and digital forensic based analysis [4,5,13]. The acquisition of image files called bitstream is implemented to maintain valid evidence according to digital forensic provisions [14].…”

Section: Results Of Internal Investigationsmentioning

confidence: 99%

“…Installation of the MariaDB database engine in the employee performance app assessment in this study was analyzed by looking at the machines installed separately or not separately [5]. The potential for sabotage of engine installations is analyzed through various open ports including internet ports (80) and (3306).…”

Section: Investigation the Installation Of Database Enginesmentioning

confidence: 99%

“…This information is crucial and is used as the main tool to make decisions about the performance of employees in the company [3]. Results and information on forensic databases can be used for several reasons [4,5]. First, find out how safe the data in the company is stored.…”

Section: Introductionmentioning

confidence: 99%

“…File systems are very important for data integrity, performance, and ease of administration. The integrity of data in a database is absolute because all forms of corrupt data must be prevented [5]. Database performance aspects are seen from the speed and stability of processing large companies' data as well as the ease of data administration that influences database performance.…”

Section: Introductionmentioning

confidence: 99%

“…The file system in the employee appraisal research uses NTFS (New Technology File System). NTFS is very good for digital forensic analysis with extensive application support [5,6].…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Digital Forensic InnoDB Database Engine for Employee Performance Appraisal Application

2019

View full text Add to dashboard Cite

Data is something that can be manipulated by irresponsible people and causing fraud. The use of log files, data theft, unauthorized person, and infiltration are things that should be prevented before the problem occurs. The authenticity of application data that evaluates the performance of company employees is very crucial. This paper will explain how to maintain the company’s big data as a valid standard service to assess employee performance database, based on employee performance of MariaDB or MySQL 5.0.11 with InnoDB storage engine. The authenticity of data is required for decent digital evidence when sabotage occurs. Digital forensic analysis carried out serves to reveal past activities, record time and be able to recover deleted data in the InnoDB storage engine table. A comprehensive examination is carried out by looking at the internal and external aspects of the Relational Database Management System (RDBMS). The result of this research is in the form of forensic tables in the InnoDB engine before and after sabotage occurs.

show abstract

Section: Results Of Internal Investigationsmentioning

confidence: 99%

Section: Investigation the Installation Of Database Enginesmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

“…The file system in the employee appraisal research uses NTFS (New Technology File System). NTFS is very good for digital forensic analysis with extensive application support [5,6].…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Digital Forensic InnoDB Database Engine for Employee Performance Appraisal Application

2019

View full text Add to dashboard Cite

show abstract

Towards reliable digital forensics investigations through measurement science

Hughes¹,

Karabiyik

2020

WIREs Forensic Science

View full text Add to dashboard Cite

Validation is the scientifically accepted methodology for demonstrating the accuracy and reliability of a process. Currently, digital forensics discipline does not conduct the sort of validation testing needed to develop statistical confidence in tool performance, or to generate the empirical data needed to bring objectivity to examiner conclusions. Recently recommended standards provide more reliable results, and tool testing programs provide a better understanding of tools' limitations. However, these efforts do not constitute testing over the full range of expected target device conditions, product functionality, and target device configurations which are needed for validation testing. Several major impediments to validation testing include a lack of validation methods, a lack of reference data, and a lack of the definitional precision and low‐level specificity needed to establish a system of measurement in digital forensics. This study attempts to identify the remaining needs that prevent comprehensive validation in digital forensics and identify potential solutions to address those needs. This article is characterized under: Digital and Multimedia Science > Cyber Threat Intelligence Jurisprudence and Regulatory Oversight > Interdisciplinary Collaboration

show abstract

Toward a cost–benefit analysis of quality programs in digital forensic laboratories in the United States

Hughes¹,

Ziemak

Martinez

et al. 2021

WIREs Forensic Science

View full text Add to dashboard Cite

There are few quantitative metrics to help evaluate the adoption of quality measures from a laboratory funder's standpoint. This article synthesizes existing data to create a simple prototype for a model to anticipate the costs or savings associated with implementing a quality program, including accreditation, in a digital forensic laboratory. Digital forensic laboratories were selected as an area of interest, as the field is largely unregulated in the United States, there are disparities in the qualifications of practitioners, and there is no empirical understanding of how frequently error occurs in the discipline. The model is used to determine under what conditions there may be anticipated overall financial savings, assuming an annual case throughput of n cases and a lowered frequency of miscarriages of justice, associated with properly implementing an accredited quality system, given by F. While this model does not account for the human cost associated with miscarriages of justice, it demonstrates that the cost of a robust quality system may prove cheaper than the risk and cost associated with the negative outcomes stemming from miscarriages of justice.Under the parameters used for testing, only under two realistic conditions will the implementation of a quality system never realize a benefit: when the cost of a wrongful conviction is relatively small and when forensic error leads to wrongful conviction on the order of 1 in 100,000 cases or less. In all other scenarios, it is possible that, under realistic conditions, laboratory funders may realize savings by implementing an accredited quality program.

show abstract

Tool testing and reliability issues in the field of digital forensics

Cited by 60 publications

References 12 publications

Digital Forensic InnoDB Database Engine for Employee Performance Appraisal Application

Digital Forensic InnoDB Database Engine for Employee Performance Appraisal Application

Towards reliable digital forensics investigations through measurement science

Toward a cost–benefit analysis of quality programs in digital forensic laboratories in the United States

Contact Info

Product

Resources

About