Two-Dimensional Evidence Reliability Amplification Process Model for Digital Forensics
2008 (English)In: THIRD INTERNATIONAL ANNUAL WORKSHOP ON DIGITAL FORENSICS AND INCIDENT ANALYSIS: WDFIA 2008, PROCEEDINGS / [ed] Tryfonas T, Thomas P, LOS ALAMITOS: IEEE COMPUTER SOC , 2008, 21-29 p.Conference paper (Refereed)
Being related to law and state-of-the-art technology, digital forensics needs more discipline than traditional forensics. The variety of types of crimes, distribution of networks and complexity of information and communication technology, add to the complexity of the process or digital investigations. A rigorous and flexible process model is needed to overcome challenges and obstacles in this area. In this paper we propose a digital forensics process, called "Two-Dimensional Evidence Reliability Amplification Process Model", which presents a detailed digital forensic process model in five main phases and different roles to perform it. At the same time, this iterative process addresses four essential tasks as the umbrella activities that are applicable across all phases and subphases. We have also developed a hypothetical solution based on intersection of events and exploit mathematical operations and symbols for making an algorithm to increase the reliability of evidence. This process model is detailed enough to describe the investigation process so that it could possibly provide a guideline that investigators can take advantage of it during a forensics investigation process.
Place, publisher, year, edition, pages
LOS ALAMITOS: IEEE COMPUTER SOC , 2008. 21-29 p.
Digital Forensics, Digital Forensics Process, Evidence Reliability, Digital Evidence, Umbrella Activity, BPMN
Computer and Information Science
IdentifiersURN: urn:nbn:se:kth:diva-31563DOI: 10.1109/WDFIA.2008.11ISI: 000262404400003ScopusID: 2-s2.0-67650161521ISBN: 978-0-7695-3362-9OAI: oai:DiVA.org:kth-31563DiVA: diva2:406463
3rd Annual International Workshop on Digital Forensics and Incident Analysis Malaga, SPAIN, OCT 09, 2008
QC 201103252011-03-252011-03-182011-03-25Bibliographically approved