A model for validation and verification of disk imaging in computer forensic investigation

In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that al...

Full description

Saved in:

Bibliographic Details
Main Author:	Palaniappan, P. Siva Shamala
Format:	Thesis
Language:	English
Published:	2009
Subjects:	QA75 Electronic computers Computer science
Online Access:	http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-utm-ep.11504
record_format	uketd_dc
spelling	my-utm-ep.115042018-06-04T09:53:34Z A model for validation and verification of disk imaging in computer forensic investigation 2009-10 Palaniappan, P. Siva Shamala QA75 Electronic computers. Computer science In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that all the collected evidence is processed correctly, completely and in a timely manner, computer forensic practitioners have to employ consistent and well-defined forensic guidelines to validate and verify the computer forensic tools. Moreover, guideline of validation and verification in computer forensic tools provides a great opportunity for computer forensic practitioners to remove necessity for developing individual tests for tools. Since computer forensic practitioners’ in Malaysia are not aware of the significant of validation and verification of disk imaging and there is no standard guideline for disk imaging process, thus a guideline model for validation and verification for disk imaging has been created. A qualitative research method was adopted as a research strategic methodology to examine and review the level of acceptance towards proposed guideline for validation and verification of disk imaging. Thirty seven respondents participated in the survey as the questionnaires are only targeted at the forensic experts in Malaysia. The survey result has shown majority of the respondents do agree with the proposed guideline. The survey results provide indication on the process of developing guideline of validation and verification of disk imaging in Malaysia and manage to produce a new conceptual model to validate and verify the disk imaging tools in computer forensic environment. This conceptual model is emphases more on the management element which encompasses three supporting elements that are documentation, maintenance of tools and monitoring. The internal layer are consists of technical elements which are divided into checklist of mandatory features, checklist of optional features and report writing. 2009-10 Thesis http://eprints.utm.my/id/eprint/11504/ http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf application/pdf en public masters Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems Faculty of Computer Science and Information System
institution	Universiti Teknologi Malaysia
collection	UTM Institutional Repository
language	English
topic	QA75 Electronic computers Computer science
spellingShingle	QA75 Electronic computers Computer science Palaniappan, P. Siva Shamala A model for validation and verification of disk imaging in computer forensic investigation
description	In digital forensic investigation practices, there are numerous digital forensics preservation tools that have been used by practitioners all over the world. Tool development continues as the practitioner’s demands increases. It is important to have right specialized tools in order to ensure that all the collected evidence is processed correctly, completely and in a timely manner, computer forensic practitioners have to employ consistent and well-defined forensic guidelines to validate and verify the computer forensic tools. Moreover, guideline of validation and verification in computer forensic tools provides a great opportunity for computer forensic practitioners to remove necessity for developing individual tests for tools. Since computer forensic practitioners’ in Malaysia are not aware of the significant of validation and verification of disk imaging and there is no standard guideline for disk imaging process, thus a guideline model for validation and verification for disk imaging has been created. A qualitative research method was adopted as a research strategic methodology to examine and review the level of acceptance towards proposed guideline for validation and verification of disk imaging. Thirty seven respondents participated in the survey as the questionnaires are only targeted at the forensic experts in Malaysia. The survey result has shown majority of the respondents do agree with the proposed guideline. The survey results provide indication on the process of developing guideline of validation and verification of disk imaging in Malaysia and manage to produce a new conceptual model to validate and verify the disk imaging tools in computer forensic environment. This conceptual model is emphases more on the management element which encompasses three supporting elements that are documentation, maintenance of tools and monitoring. The internal layer are consists of technical elements which are divided into checklist of mandatory features, checklist of optional features and report writing.
format	Thesis
qualification_level	Master's degree
author	Palaniappan, P. Siva Shamala
author_facet	Palaniappan, P. Siva Shamala
author_sort	Palaniappan, P. Siva Shamala
title	A model for validation and verification of disk imaging in computer forensic investigation
title_short	A model for validation and verification of disk imaging in computer forensic investigation
title_full	A model for validation and verification of disk imaging in computer forensic investigation
title_fullStr	A model for validation and verification of disk imaging in computer forensic investigation
title_full_unstemmed	A model for validation and verification of disk imaging in computer forensic investigation
title_sort	model for validation and verification of disk imaging in computer forensic investigation
granting_institution	Universiti Teknologi Malaysia, Faculty of Computer Science and Information Systems
granting_department	Faculty of Computer Science and Information System
publishDate	2009
url	http://eprints.utm.my/id/eprint/11504/1/PSivaShamalaMFSKSM2009.pdf
_version_	1747814865270996992

A model for validation and verification of disk imaging in computer forensic investigation

Similar Items