Uncertainty in Live Forensics

Abstract : The goal of live digital forensics is to collect crucial evidence that cannot be acquired under the well-known paradigm of post-mortem analysis. Volatile information in computer memory is ephemeral by definition and can be altered as a consequence of the live forensic approach. Every running tool on an investigated system leaves artifacts and changes the system state. This paper focuses on the understanding and measurement of the uncertainty related to the important and emerging paradigm of live forensic investigations. It also presents some practical examples related to the evaluation of uncertainty.
Type de document :
Communication dans un congrès
Kam-Pui Chow; Sujeet Shenoi. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. Springer, IFIP Advances in Information and Communication Technology, AICT-337, pp.171-184, 2010, Advances in Digital Forensics VI. 〈10.1007/978-3-642-15506-2_12〉
Liste complète des métadonnées

Littérature citée [11 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01060617
Contributeur : Hal Ifip <>
Soumis le : lundi 27 novembre 2017 - 16:51:57
Dernière modification le : jeudi 28 décembre 2017 - 01:09:13

Fichier

SavoldiGE10.pdf
Fichiers produits par l'(les) auteur(s)

Licence


Distributed under a Creative Commons Paternité 4.0 International License

Identifiants

Citation

Antonio Savoldi, Paolo Gubian, Isao Echizen. Uncertainty in Live Forensics. Kam-Pui Chow; Sujeet Shenoi. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. Springer, IFIP Advances in Information and Communication Technology, AICT-337, pp.171-184, 2010, Advances in Digital Forensics VI. 〈10.1007/978-3-642-15506-2_12〉. 〈hal-01060617〉

Partager

Métriques

Consultations de la notice

93

Téléchargements de fichiers

23