From Computer Forensics to Forensic Computing: Investigators Investigate, Scientists Associate

Please always quote using this URN: urn:nbn:de:bvb:29-opus4-47508
  • This paper draws a comparison of fundamental theories in traditional forensic science and the state of the art in current computer forensics, thereby identifying a certain disproportion between the perception of central aspects in common theory and the digital forensics reality. We propose a separation of what is currently demanded of practitioners in digital forensics into a rigorous scientific part on the one hand, and a more general methodology of searching and seizing digital evidence and conducting digital investigations on the other. We thereby mark out the route for computer forensics to turn into a true forensic science. To illustrate the feasibility of the proposed path, we supplyThis paper draws a comparison of fundamental theories in traditional forensic science and the state of the art in current computer forensics, thereby identifying a certain disproportion between the perception of central aspects in common theory and the digital forensics reality. We propose a separation of what is currently demanded of practitioners in digital forensics into a rigorous scientific part on the one hand, and a more general methodology of searching and seizing digital evidence and conducting digital investigations on the other. We thereby mark out the route for computer forensics to turn into a true forensic science. To illustrate the feasibility of the proposed path, we supply a couple of practical examples, as well as a list of exemplary questions that should be answered by digital forensic scientists.show moreshow less

Download full text files

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Andreas Dewald, Felix C. Freiling
URN:urn:nbn:de:bvb:29-opus4-47508
ISSN:2191-5008
Title of the journal / compilation (English):Technical Reports
Series (Volume number):Technical reports / Department Informatik (CS-2014-04)
Document Type:Report
Language:English
Year of Completion:2014
Publishing Institution:Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU)
Release Date:2014/06/10
Tag:Forensische Informatik
Forensic Computing
SWD-Keyword:Computer Forensics; Digital Forensics; IT-Forensics
Volume:2014
Pagenumber:10
Institutes:Technische Fakultät / Department Informatik
CCS-Classification:J. Computer Applications / J.m MISCELLANEOUS
Dewey Decimal Classification:0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 000 Informatik, Informationswissenschaft, allgemeine Werke
open_access (DINI-Set):open_access
Licence (German):Keine Creative Commons Lizenz - es gilt der Veröffentlichungsvertrag und das deutsche Urheberrecht