Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Reliability validation for file system interpretation
Norwegian University of Science and Technology, Norway; Norwegian Police University College, Norway.
Norwegian University of Science and Technology, Norway; University of Groningen, the Netherlands.
Norwegian University of Science and Technology, Norway.
Stockholm University, Faculty of Social Sciences, Department of Computer and Systems Sciences. Norwegian University of Science and Technology, Norway.ORCID iD: 0000-0002-9085-4469
Show others and affiliations
Number of Authors: 52021 (English)In: Forensic science international: Digital investigation, E-ISSN 2666-2817, Vol. 37, article id 301174Article in journal (Refereed) Published
Abstract [en]

This paper examines current best practices for Digital Forensic (DF) tool and method validation in the context of file system interpretation for digital evidence. In order to meet the legal and scientific requirements in criminal procedures file system (FS) reverse engineering (RE) is a necessity. Currently, there is no standard procedure for reliability testing of FS RE. Ideal validation requirements exist, but they are on high-level and practical implementation is missing. In this paper we propose a formal reliability validation procedure for file system reverse engineering, documenting the forensic process, including the tools used, ensuring reliability and reproducibility of the method and the results. The procedure is based on legal and scientific criteria and tested against file system reverse engineering methods. It is applicable to all types of reverse engineering methods in digital forensics.

Place, publisher, year, edition, pages
2021. Vol. 37, article id 301174
Keywords [en]
Digital Forensics, Validation, Reliability, Reproducibility, File systems, Reverse engineering, Black-box testing
National Category
Computer and Information Sciences
Identifiers
URN: urn:nbn:se:su:diva-196146DOI: 10.1016/j.fsidi.2021.301174ISI: 000663797600004OAI: oai:DiVA.org:su-196146DiVA, id: diva2:1589969
Available from: 2021-09-01 Created: 2021-09-01 Last updated: 2022-02-25Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full text

Authority records

Axelsson, Stefan

Search in DiVA

By author/editor
Axelsson, Stefan
By organisation
Department of Computer and Systems Sciences
Computer and Information Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 38 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf