Uncertainty in Live Forensics - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Uncertainty in Live Forensics

Résumé

The goal of live digital forensics is to collect crucial evidence that cannot be acquired under the well-known paradigm of post-mortem analysis. Volatile information in computer memory is ephemeral by definition and can be altered as a consequence of the live forensic approach. Every running tool on an investigated system leaves artifacts and changes the system state. This paper focuses on the understanding and measurement of the uncertainty related to the important and emerging paradigm of live forensic investigations. It also presents some practical examples related to the evaluation of uncertainty.
Fichier principal
Vignette du fichier
SavoldiGE10.pdf (1.18 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01060617 , version 1 (27-11-2017)

Licence

Paternité

Identifiants

Citer

Antonio Savoldi, Paolo Gubian, Isao Echizen. Uncertainty in Live Forensics. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.171-184, ⟨10.1007/978-3-642-15506-2_12⟩. ⟨hal-01060617⟩
63 Consultations
144 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More