Advances in Digital Forensics IX

1. Front Matter

   PDF

2. THEMES AND ISSUES

   1. Front Matter

      Pages 1-1

      PDF

   2. History, Historiography and the Hermeneutics of the Hard Drive

      • Mark Pollitt

      Pages 3-17

   3. Protecting Third Party Privacy in Digital Forensic Investigations

      • Wynand van Staden

      Pages 19-31

   4. On the Scientific Maturity of Digital Forensics Research

      • Martin Olivier, Stefan Gruner

      Pages 33-49

3. FORENSIC MODELS

   1. Front Matter

      Pages 51-51

      PDF

   2. Cognitive Approaches for Digital Forensic Readiness Planning

      • Antonio Pooe, Les Labuschagne

      Pages 53-66

   3. A Harmonized Process Model for Digital Forensic Investigation Readiness

      • Aleksandar Valjarevic, Hein Venter

      Pages 67-82

   4. Evaluation of the Semi-automated Crime-Specific Digital Triage Process Model

      • Gary Cantrell, David Dampier

      Pages 83-98

4. FORENSIC TECHNIQUES

   1. Front Matter

      Pages 99-99

      PDF

   2. Reducing the Time Required for Hashing Operations

      • Frank Breitinger, Kaloyan Petrov

      Pages 101-117

   3. Hash-Based File Content Identification Using Distributed Systems

      • York Yannikos, Jonathan Schluessler, Martin Steinebach, Christian Winter, Kalman Graffi

      Pages 119-134

   4. Creating Super Timelines in Windows Investigations

      • Stephen Esposito, Gilbert Peterson

      Pages 135-144

   5. Log File Analysis with Context-Free Grammars

      • Gregory Bosman, Stefan Gruner

      Pages 145-152

   6. Using a Goal-Driven Approach in the Investigation of a Questioned Contract

      • Clive Blackwell, Shareeful Islam, Benjamin Aziz

      Pages 153-167

5. FILESYSTEM FORENSICS

   1. Front Matter

      Pages 169-169

      PDF

   2. File Fragment Analysis Using Normalized Compression Distance

      • Stefan Axelsson, Kamran Ali Bajwa, Mandhapati Venkata Srikanth

      Pages 171-182

   3. Quantifying Windows File Slack Size and Stability

      • Martin Mulazzani, Sebastian Neuner, Peter Kieseberg, Markus Huber, Sebastian Schrittwieser, Edgar Weippl

      Pages 183-193

   4. Automating Video File Carving and Content Identification

      • York Yannikos, Nadeem Ashraf, Martin Steinebach, Christian Winter

      Pages 195-212

   5. Data Recovery from Proprietary Formatted Cctv Hard Disks

      • Aswami Ariffin, Jill Slay, Kim-Kwang Choo

      Pages 213-223

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance - investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics IX describe original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: Themes and Issues, Forensic Models, Forensic Techniques, File system Forensics, Network Forensics, Cloud Forensics, Forensic Tools, and Advanced Forensic Techniques. This book is the ninth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-five edited papers from the Ninth Annual IFIP WG 11.9 International Conference on Digital Forensics, held in Orlando, Florida, USA in the winter of 2013. Advances in Digital Forensics IX is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineeringat the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.

• distributed systems
• files
• hard disks
• networks
• process models

• Air Force Institute of Technology, Wright-Patterson Air Force Base, USA

  Gilbert Peterson

• University of Tulsa, Tulsa, USA

  Sujeet Shenoi

Policies and ethics