Multimedia Forensics Is Not Computer Forensics

  • Authors:
  • Rainer Böhme;Felix C. Freiling;Thomas Gloe;Matthias Kirchner

  • Affiliations:
  • Institute of Systems Architecture, Technische Universität Dresden, Dresden, Germany 01062;Laboratory for Dependable Distributed Systems, University of Mannheim, Mannheim, Germany 68131;Institute of Systems Architecture, Technische Universität Dresden, Dresden, Germany 01062;Institute of Systems Architecture, Technische Universität Dresden, Dresden, Germany 01062

  • Venue:
  • IWCF '09 Proceedings of the 3rd International Workshop on Computational Forensics
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

The recent popularity of research on topics of multimedia forensics justifies reflections on the definition of the field. This paper devises an ontology that structures forensic disciplines by their primary domain of evidence. In this sense, both multimedia forensics and computer forensics belong to the class of digital forensics, but they differ notably in the underlying observer model that defines the forensic investigator's view on (parts of) reality, which itself is not fully cognizable. Important consequences on the reliability of probative facts emerge with regard to available counter-forensic techniques: while perfect concealment of traces is possible for computer forensics, this level of certainty cannot be expected for manipulations of sensor data. We cite concrete examples and refer to established techniques to support our arguments.