Skip to Main content Skip to Navigation
Conference papers

Data Recovery Function Testing for Digital Forensic Tools

Abstract : Many digital forensic tools used by investigators were not originally designed for forensic applications. Even in the case of tools created with the forensic process in mind, there is the issue of assuring their reliability and dependability. Given the nature of investigations and the fact that the data collected and analyzed by the tools must be presented as evidence, it is important that digital forensic tools be validated and verified before they are deployed. This paper engages a systematic description of the digital forensic discipline that is obtained by mapping its fundamental functions. The function mapping is used to construct a detailed function-oriented validation and verification framework for digital forensic tools. This paper focuses on the data recovery function. The data recovery requirements are specified and a reference set is presented to test forensic tools that implement the data recovery function.
Document type :
Conference papers
Complete list of metadatas

Cited literature [5 references]  Display  Hide  Download

https://hal.inria.fr/hal-01060626
Contributor : Hal Ifip <>
Submitted on : Monday, November 27, 2017 - 4:27:16 PM
Last modification on : Thursday, March 5, 2020 - 4:46:44 PM

File

GuoS10.pdf
Files produced by the author(s)

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Identifiers

Citation

Yinghua Guo, Jill Slay. Data Recovery Function Testing for Digital Forensic Tools. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.297-311, ⟨10.1007/978-3-642-15506-2_21⟩. ⟨hal-01060626⟩

Share

Metrics

Record views

334

Files downloads

1111