A Case Based Reasoning Framework for Improving the Trustworthiness of Digital Forensic Investigations

Author

Horsman, Graeme ; Laing, Christopher ; Vickers, Paul

Author_Institution

Dept. of Comput., Eng. & Inf. Sci., Northumbria Univ., Newcastle upon Tyne, UK

fYear

2012

fDate

25-27 June 2012

Firstpage

682

Lastpage

689

Abstract

A novel concept for improving the trustworthiness of results obtained from digital investigations is presented. Case Based Reasoning Forensic Auditor (CBR-FA) is a method by which results from previous digital forensic examinations are stored and reused to audit current digital forensic investigations. CBR-FA provides a method for evaluating digital forensic investigations in order to provide a practitioner with a level of reassurance that evidence that is relevant to their case has not been missed. The structure of CBR-FA is discussed as are the methodologies it incorporates as part of its auditing functionality.

Keywords

case-based reasoning; computer forensics; trusted computing; CBR-FA; audit current digital forensic investigations; auditing functionality; case-based reasoning forensic auditor; digital forensic examinations; digital forensic investigations trustworthiness; Cognition; Digital forensics; Knowledge engineering; Problem-solving; Reliability; Standards; Auditing; Bayesian Theory; Case Based Reasoning; Digital forensics; Trust;

fLanguage

English

Publisher

ieee

Conference_Titel

Trust, Security and Privacy in Computing and Communications (TrustCom), 2012 IEEE 11th International Conference on

Conference_Location

Liverpool

Print_ISBN

978-1-4673-2172-3

Type

conf

DOI

10.1109/TrustCom.2012.18

Filename

6296036