 |
Advances in Digital Forensics VI Sixth IFIP WG 11.9 International Conference on Digital Forensics Hong Kong, China, January 4-6, 2010 |
 |
Conference papers
Uncertainty in Live Forensics
Abstract : The goal of live digital forensics is to collect crucial evidence that cannot be acquired under the well-known paradigm of post-mortem analysis. Volatile information in computer memory is ephemeral by definition and can be altered as a consequence of the live forensic approach. Every running tool on an investigated system leaves artifacts and changes the system state. This paper focuses on the understanding and measurement of the uncertainty related to the important and emerging paradigm of live forensic investigations. It also presents some practical examples related to the evaluation of uncertainty.
Cited literature [11 references]
https://hal.inria.fr/hal-01060617
Contributor : Hal Ifip <>
Submitted on : Monday, November 27, 2017 - 4:51:57 PM
Last modification on : Thursday, March 5, 2020 - 4:46:43 PM
Contributor : Hal Ifip <>
Submitted on : Monday, November 27, 2017 - 4:51:57 PM
Last modification on : Thursday, March 5, 2020 - 4:46:43 PM
File
SavoldiGE10.pdf
Files produced by the author(s)
Licence
Distributed under a Creative Commons Attribution 4.0 International License