From Computer Forensics to Forensic Computing: Investigators Investigate, Scientists Associate

Language
en
Document Type
Report
Issue Date
2014-06-10
Issue Year
2014
Authors
Dewald, Andreas
Freiling, Felix C.
Editor
Abstract

This paper draws a comparison of fundamental theories in traditional forensic science and the state of the art in current computer forensics, thereby identifying a certain disproportion between the perception of central aspects in common theory and the digital forensics reality. We propose a separation of what is currently demanded of practitioners in digital forensics into a rigorous scientific part on the one hand, and a more general methodology of searching and seizing digital evidence and conducting digital investigations on the other. We thereby mark out the route for computer forensics to turn into a true forensic science. To illustrate the feasibility of the proposed path, we supply a couple of practical examples, as well as a list of exemplary questions that should be answered by digital forensic scientists.

Series
Technical reports / Department Informatik
Series Nr.
CS-2014-04
Journal Title
Technical Reports
Volume
2014
DOI
Faculties & Collections
Zugehörige ORCIDs