A method for reducing the risk of errors in digital forensic investigations

Authors:
Graeme Horsman;Christopher Laing;Paul Vickers
Affiliations:
Computing, Engineering and Information Sciences, Northumbria University, Newcastle-Upon-Tyne, United Kingdom;Computing, Engineering and Information Sciences, Northumbria University, Newcastle-Upon-Tyne, United Kingdom;Computing, Engineering and Information Sciences, Northumbria University, Newcastle-Upon-Tyne, United Kingdom
Venue:
CMS'12 Proceedings of the 13th IFIP TC 6/TC 11 international conference on Communications and Multimedia Security
Year:
2012

Citing 9
Cited 0

Case-based reasoning: foundational issues, methodological variations, and system approaches

AI Communications
Next-generation digital forensics

Communications of the ACM - Next-generation cyber forensics
Case-based reasoning and law

The Knowledge Engineering Review
Knowledge based crime scenario modelling

Expert Systems with Applications: An International Journal
Validation for Digital Forensics

ITNG '10 Proceedings of the 2010 Seventh International Conference on Information Technology: New Generations
Specifying digital forensics: A forensics policy approach

Digital Investigation: The International Journal of Digital Forensics & Incident Response
A second generation computer forensic analysis system

Digital Investigation: The International Journal of Digital Forensics & Incident Response
The future of forensic computing

Digital Investigation: The International Journal of Digital Forensics & Incident Response
A Case Based Reasoning Framework for Improving the Trustworthiness of Digital Forensic Investigations

TRUSTCOM '12 Proceedings of the 2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Motivated by the concerns expressed by many academics over difficulties facing the digital forensic field, user-contributory case-based reasoning (UCCBR); a method for auditing digital forensic investigations is presented. This auditing methodology is not designed to replace a digital forensic practitioner but to aid their investigation process, acting as a method for reducing the risks of missed or misinterpreted evidence. The structure and functionality of UCCBR is discussed and its potential for implementation within a digital forensic environment.