Formal Approach for the Selection of a Right Tool for Mobile Device Forensics
2013 (English)Conference paper, Presentation (Refereed)
Small scale digital devices (SSDD) have had a profound impact on the way we interact with the world around us. Penetration of these devices especially mobile phones has almost reached to their saturation point. Their omnipresence spans over almost every activity of our life such as financial transactions, learning, entertainment, distributed social presence and communication. For instance, a mobile phone, based on the breadth and the depth of its usage, has become a personal digital behavioral archive (DBA), storing a wealth of information which can potentially qualify as digital evidence. In case of an illegal activity, identifying and understanding the digital evidence from such an important piece of equipment is crucial. There are numerous tools to discover and analyze these DBAs termed as tools for mobile device forensics (MoDeFo). The diversity of SSDD, types of digital evidence and variety of MoDeFo tools posit a complex problem of selecting the right one to perform mobile device forensics. Consequently the selection of the wrong tool may lead to compromised evidence, incorrect interpretations and wrong conclusions and thus precluding the litigating parties from their right of a fair trial. Instead of using heuristics, one can introduce more formal methods such as multi-criteria decision analysis to assist in the tedious process of selection of a suitable MoDeFo tool. Performance of MoDeFo tools and relevance of the evidence for a particular investigation are the two main factors of the formal selection process discussed in this paper.
Place, publisher, year, edition, pages
Digital Forensics, Mobile Device Forensics, Mobile Device Forensics Tools, e-Evidence, Evaluation, Multi-Criteria Decision Analysis, Selection of a Right Mobile Device Forensics Tool
Research subject Computer and Systems Sciences
IdentifiersURN: urn:nbn:se:su:diva-97728OAI: oai:DiVA.org:su-97728DiVA: diva2:679958
5th International Conference on Digital Forensics & Cyber Crime, September 26–27, 2013, Moscow, Russia