Skip to Main content Skip to Navigation
Conference papers

Data Recovery Function Testing for Digital Forensic Tools

Abstract : Many digital forensic tools used by investigators were not originally designed for forensic applications. Even in the case of tools created with the forensic process in mind, there is the issue of assuring their reliability and dependability. Given the nature of investigations and the fact that the data collected and analyzed by the tools must be presented as evidence, it is important that digital forensic tools be validated and verified before they are deployed. This paper engages a systematic description of the digital forensic discipline that is obtained by mapping its fundamental functions. The function mapping is used to construct a detailed function-oriented validation and verification framework for digital forensic tools. This paper focuses on the data recovery function. The data recovery requirements are specified and a reference set is presented to test forensic tools that implement the data recovery function.
Document type :
Conference papers
Complete list of metadata

Cited literature [5 references]  Display  Hide  Download
Contributor : Hal Ifip Connect in order to contact the contributor
Submitted on : Monday, November 27, 2017 - 4:27:16 PM
Last modification on : Thursday, March 5, 2020 - 4:46:44 PM


Files produced by the author(s)


Distributed under a Creative Commons Attribution 4.0 International License



Yinghua Guo, Jill Slay. Data Recovery Function Testing for Digital Forensic Tools. 6th IFIP WG 11.9 International Conference on Digital Forensics (DF), Jan 2010, Hong Kong, China. pp.297-311, ⟨10.1007/978-3-642-15506-2_21⟩. ⟨hal-01060626⟩



Record views


Files downloads