Extending digital repository architectures to support disk image preservation and access

Authors:
Kam Woods;Christopher A. Lee;Simson Garfinkel
Affiliations:
University of North Carolina, Chapel Hill, NC, USA;University of North Carolina, Chapel Hill, NC, USA;Naval Postgraduate School, Monterey, CA, USA
Venue:
Proceedings of the 11th annual international ACM/IEEE joint conference on Digital libraries
Year:
2011

Citing 7
Cited 1

Remembrance of Data Passed: A Study of Disk Sanitization Practices

IEEE Security and Privacy
Preservation functionality in a digital archive

Proceedings of the 4th ACM/IEEE-CS joint conference on Digital libraries
Forensic Discovery

Forensic Discovery
A hypothesis-based approach to digital forensic investigations

A hypothesis-based approach to digital forensic investigations
Mechanisms: New Media and the Forensic Imagination

Mechanisms: New Media and the Forensic Imagination
Automating Disk Forensic Processing with SleuthKit, XML and Python

SADFE '09 Proceedings of the 2009 Fourth International IEEE Workshop on Systematic Approaches to Digital Forensic Engineering
Packaging videogames for long‐term preservation: Integrating FRBR and the OAIS reference model

Journal of the American Society for Information Science and Technology

A unique arrangement: organizing collections for digital libraries, archives, and repositories

TPDL'12 Proceedings of the Second international conference on Theory and Practice of Digital Libraries

Quantified Score

Hi-index	0.00

Visualization

Abstract

Disk images (bitstreams extracted from physical media) can play an essential role in the acquisition and management of digital collections by serving as containers that support data integrity and chain of custody, while ensuring continued access to the underlying bits without depending on physical carriers. Widely used today by practitioners of digital forensics, disk images can serve as baselines for comparison for digital preservation activities, as they provide fail-safe mechanisms when curatorial actions make unexpected changes to data; enable access to potentially valuable data that resides below the file system level; and provide options for future analysis. We discuss established digital forensics techniques for acquiring, preserving and annotating disk images, provide examples from both research and educational collections, and describe specific forensic tools and techniques, including an object-oriented data packaging framework called the Advanced Forensic Format (AFF) and the Digital Forensics XML (DFXML) metadata representation.