Title :
Uncertainty Bounds for Digital Forensic Evidence and Hypotheses
Author :
Overill, Richard E. ; Silomon, Jantje A M
Author_Institution :
Dept. of Inf., King´´s Coll. London, London, UK
Abstract :
It is important to be able to quantify the numerical uncertainty associated with the likelihood of a particular hypothesis. The estimation of typical values required in the calculation of posterior odds using the previously proposed operational complexity model (OCM) is a case in point. It is often is necessary to distinguish between alternative explanations for forensically recovered digital evidential traces. In this study, the uncertainties associated with five common e-crimes and their respective Trojan horse defences have been computed using the OCM. They exhibit some remarkable variations and we discuss the significance of the uncertainties in these posterior odds from both a technical and a judicial standpoint. We conclude that these uncertainties are crucial for the defence and prosecution sides to fully understand each others´ cases.
Keywords :
computational complexity; computer forensics; invasive software; OCM; Trojan horse; Uncertainty bounds; digital forensic evidence; e-crimes; operational complexity model; Complexity theory; Computational modeling; Digital forensics; Numerical models; Standards; Trojan horses; Uncertainty; alternative hypotheses; digital forensics; operational complexity model; posterior odds; relative plausibility metrics; uncertainty propagation;
Conference_Titel :
Availability, Reliability and Security (ARES), 2012 Seventh International Conference on
Conference_Location :
Prague
Print_ISBN :
978-1-4673-2244-7
DOI :
10.1109/ARES.2012.17
