A model for validation and verification of disk imaging in computer forensic investigation

In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that al...

Full description

Saved in:
Bibliographic Details
Main Author: Palaniappan, P. Siva Shamala
Format: Thesis
Language:English
Published: 2009
Subjects:
Online Access:http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
id my-utm-ep.11504
record_format uketd_dc
spelling my-utm-ep.115042018-06-04T09:53:34Z A model for validation and verification of disk imaging in computer forensic investigation 2009-10 Palaniappan, P. Siva Shamala QA75 Electronic computers. Computer science In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that all the collected evidence is processed correctly, completely and in a timely manner, computer forensic practitioners have to employ consistent and well-defined forensic guidelines to validate and verify the computer forensic tools. Moreover, guideline of validation and verification in computer forensic tools provides a great opportunity for computer forensic practitioners to remove necessity for developing individual tests for tools. Since computer forensic practitioners’ in Malaysia are not aware of the significant of validation and verification of disk imaging and there is no standard guideline for disk imaging process, thus a guideline model for validation and verification for disk imaging has been created. A qualitative research method was adopted as a research strategic methodology to examine and review the level of acceptance towards proposed guideline for validation and verification of disk imaging. Thirty seven respondents participated in the survey as the questionnaires are only targeted at the forensic experts in Malaysia. The survey result has shown majority of the respondents do agree with the proposed guideline. The survey results provide indication on the process of developing guideline of validation and verification of disk imaging in Malaysia and manage to produce a new conceptual model to validate and verify the disk imaging tools in computer forensic environment. This conceptual model is emphases more on the management element which encompasses three supporting elements that are documentation, maintenance of tools and monitoring. The internal layer are consists of technical elements which are divided into checklist of mandatory features, checklist of optional features and report writing. 2009-10 Thesis http://eprints.utm.my/id/eprint/11504/ http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf application/pdf en public masters Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems Faculty of Computer Science and Information System
institution Universiti Teknologi Malaysia
collection UTM Institutional Repository
language English
topic QA75 Electronic computers
Computer science
spellingShingle QA75 Electronic computers
Computer science
Palaniappan, P. Siva Shamala
A model for validation and verification of disk imaging in computer forensic investigation
description In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that all the collected evidence is processed correctly, completely and in a timely manner, computer forensic practitioners have to employ consistent and well-defined forensic guidelines to validate and verify the computer forensic tools. Moreover, guideline of validation and verification in computer forensic tools provides a great opportunity for computer forensic practitioners to remove necessity for developing individual tests for tools. Since computer forensic practitioners’ in Malaysia are not aware of the significant of validation and verification of disk imaging and there is no standard guideline for disk imaging process, thus a guideline model for validation and verification for disk imaging has been created. A qualitative research method was adopted as a research strategic methodology to examine and review the level of acceptance towards proposed guideline for validation and verification of disk imaging. Thirty seven respondents participated in the survey as the questionnaires are only targeted at the forensic experts in Malaysia. The survey result has shown majority of the respondents do agree with the proposed guideline. The survey results provide indication on the process of developing guideline of validation and verification of disk imaging in Malaysia and manage to produce a new conceptual model to validate and verify the disk imaging tools in computer forensic environment. This conceptual model is emphases more on the management element which encompasses three supporting elements that are documentation, maintenance of tools and monitoring. The internal layer are consists of technical elements which are divided into checklist of mandatory features, checklist of optional features and report writing.
format Thesis
qualification_level Master's degree
author Palaniappan, P. Siva Shamala
author_facet Palaniappan, P. Siva Shamala
author_sort Palaniappan, P. Siva Shamala
title A model for validation and verification of disk imaging in computer forensic investigation
title_short A model for validation and verification of disk imaging in computer forensic investigation
title_full A model for validation and verification of disk imaging in computer forensic investigation
title_fullStr A model for validation and verification of disk imaging in computer forensic investigation
title_full_unstemmed A model for validation and verification of disk imaging in computer forensic investigation
title_sort model for validation and verification of disk imaging in computer forensic investigation
granting_institution Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems
granting_department Faculty of Computer Science and Information System
publishDate 2009
url http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf
_version_ 1747814865270996992