Evaluating and Comparing Tools for Mobile Device Forensics Using Quantitative Analysis
2013 (English)In: Digital forensics and cyber crime, ICDF2C 2012 / [ed] Rogers, M.; Seigfried Spellar, K. C., New York: Springer, 2013, 264-282 p.Conference paper (Refereed)
In this paper we have presented quantitative analysis technique to measure and compare the quality of mobile device forensics tools while evaluating them. For examiners, it will provide a formal mathematical base and an obvious way to select the best tool, especially for a particular type of digital evidence in a specific case. This type of comparative study was absent in both NIST's evaluation process and our previous work (Evaluation of Some Tools for Extracting e-Evidence from Mobile Devices). We have evaluated UFED Physical Pro 188.8.131.52 and XRY 5.0. To compare the tools we have calculated Margin of Error and Confidence Interval (CI) based on the proportion of successful extractions from our samples in different scenarios. It is followed by hypothesis testing to further strengthen the CI results and to formally compare the accuracy of the tools with a certain level of confidence.
Place, publisher, year, edition, pages
New York: Springer, 2013. 264-282 p.
, Lecture Notes of the Institute for Computer Sciences Social Informatics and Telecommunications Engineering, ISSN 1867-8211 ; 114
Digital Forensics, Mobile Device Forensics and tools, e-Evidence, Evaluation, Confidence Interval, Hypothesis Testing and Quantitative Analysis
Research subject Computer and Systems Sciences
IdentifiersURN: urn:nbn:se:su:diva-106123ISI: 000337317600017ISBN: 978-3-642-39891-9ISBN: 978-3-642-39890-2OAI: oai:DiVA.org:su-106123DiVA: diva2:734996
4th Annual International ICST Conference on Digital Forensics and Cyber Crime (ICDF2C), OCT 25-26, 2012, Lafayette, IN