Towards a conceptual model for promoting digital forensics experiments

OliveiraJr, Edson; Zorzo, Avelino F.; Neu, Charles V.

doi:10.1016/j.fsidi.2020.301014

Cited by 9 publications

(10 citation statements)

References 55 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We chose this research questions and the organization of results (Section 3) to be consistent to our proposed conceptual model for DF experimentation (OliveiraJr et al, 2020). Such model is organized in six experimental phases as follows:…”

Section: Methodsmentioning

confidence: 99%

See 1 more Smart Citation

Experimentation of digital multimedia forensics: State of the art and research gaps

OliveiraJr

Zorzo

Neu

2020

WIREs Forensic Science

Self Cite

View full text Add to dashboard Cite

Digital multimedia forensics (DMF) plays an outstanding role in digital forensics (DF) area as it encompasses solutions for promoting image, audio, and video evidence to be used in court. As every science, one straightforward way of evolving is conducting formal experiments and providing reliable and auditable evidence. Therefore, in this article, we systematically map and analyze how experiments in DMF have been conducted and whether data-based evidence has been provided. This article presents a subset of results on DMF from a wider mapping study on DF experimentation. We then analyzed 49 experiments resulting from electronic and manual searches in widely known electronic databases and conferences/ workshops on DF. We used them to answer six research questions. We demonstrated that DMF needs to improve the way experiments are reported, especially how data are shared to allow reproducibility and, consequently, evolution of the research topic. We show that experimental elements, for example, hypothesis, variables, design, instrumentation, validity evaluation, setup, training, data sets and benchmarks, statistical techniques (descriptive, hypothesis, and effect size test), and limitations, should be better reported. As a general result, we understand DMF formal experimentation needs to evolve toward providing useful, reliable, auditable, and reproducible experimental evidence as both academia and practitioners might straightforward benefit from such evolution.

show abstract

Section: Methodsmentioning

confidence: 99%

“…As main results, we provided a wide panorama of experimentation in DMF over 49 experiments and 38 different extracted items. This work also followed a conceptual model for promoting digital forensics experiments of our previous work (OliveiraJr et al, 2020).…”

Section: Final Remarksmentioning

confidence: 99%

Experimentation of digital multimedia forensics: State of the art and research gaps

OliveiraJr

Zorzo

Neu

2020

WIREs Forensic Science

Self Cite

View full text Add to dashboard Cite

show abstract

“…Testing in DF is a complex process, where this work does not intend to venture into the arena of how to test, instead, reference is drawn to works by Beckett and Slay (2007), Horsman (2018), and Oliveira et al (2020). Evidence of robust testing can provide effective scaffolding, providing it has been conducted properly, where a number of challenges exist which must be addressed by the practitioner: Appropriateness of test methodology : Where a practitioner intends to conduct testing in order to scaffold their interpretations, any methodology used must be appropriate for the current investigative scenario.…”

Section: Exemplar Narrative: a “Discursive Vehicle”mentioning

confidence: 99%

“Scaffolding” responses to digital forensic inquiries

Horsman

2021

WIREs Forensic Science

View full text Add to dashboard Cite

As part of their role, digital forensic practitioners are often faced with casespecific investigative inquiries which they must attempt to address and provide an appropriate answer to their client. Such investigative questions can take many forms wherein every instance, any response they offer must be reliable. To be reliable, any response to an inquiry must be derived from justifiable and robust processes and information, coined here as the underpinning "scaffolding." This work offers a discussion of response scaffolding, what it is and why it is required in digital forensics with the three ways that this can be achieved outlined-via "past experience," "targeted testing" or through reference to appropriate "existing bodies of knowledge." Each one is examined in turn and their use is demonstrated via an overarching hypothetical example which is deployed and utilized throughout the analysis narrative for illustrative purposes.

show abstract

“…It is performed by running hypotheses testing techniques over well-defined variables and procedures [Tedre and Moisseinen 2014]. In addition, proper documentation is essential to promote its reproducibility [OliveiraJr et al 2020].…”

Section: Introductionmentioning

confidence: 99%

“…Our DF research group has already developed and evaluated a conceptual model (see Section 2) to supporting defining, conducting, and disseminating DF controlled experiments [OliveiraJr et al 2020]. Although a conceptual model might aid DF researchers and practitioners to conduct an experiment, we find it is missing a formal support for data and metadata levels of the conceptual model.…”

Section: Introductionmentioning

confidence: 99%

An Ontology for Supporting Digital Forensics Controlled Experiments: Early Stages of Development

Silva¹,

OliveiraJr²

2022

Anais Do XVI Brazilian E-Science Workshop (BRESCI 2022)

Self Cite

View full text Add to dashboard Cite

The experimentation process is one of the main means of science to evaluate theories based on hypothesis. Science evolves most taking into account the performing of controlled experiments, thus providing trust evidence for different research fields. However, for the Digital Forensics (DF) field, formal controlled experimentation has been neglected over the years. In a recent systematic mapping of the literature, we found more than 200 experiments with few formalization of their procedures, thus jeopardizing its evidence reliability and the capacity of reproducibility. Therefore, this paper provides early steps to specify an ontology for supporting proper planning, conducting, and dissemination of DF controlled experiments. The ontology has as a basis a conceptual model created to specify the main elements of an experiment. We adopted the Uschold and King approach to develop such an ontology. We first designed the ontology with the protégé ontology editor, as it organizes knowledge. In addition, the WebVOWL tool was also used from the json file generated in the protegé tool, as this aids at the construction of a dynamic visual identity for the ontology. As general results, we understand that despite the number of ontologies in the literature being relevant, few present a structure that satisfies a relation of similar objects for their properties, in addition do not covering the context of a DF experiment. Therefore, despite the ontology construction is in its early stages, it is expected that it will shad light to the field of experimentation in DF throughout a hierarchy and formalized process.

show abstract

Towards a conceptual model for promoting digital forensics experiments

Cited by 9 publications

References 55 publications

Experimentation of digital multimedia forensics: State of the art and research gaps

Experimentation of digital multimedia forensics: State of the art and research gaps

“Scaffolding” responses to digital forensic inquiries

An Ontology for Supporting Digital Forensics Controlled Experiments: Early Stages of Development

Contact Info

Product

Resources

About