loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05)
Unifying Computer Forensics Modeling Approaches: A Software Engineering Perspective
Taipei, Taiwan
November 07-November 09
ISBN: 0-7695-2478-8
A. Chris Bogen, US Army Corps of Engineers, Vicksburg, MS
David A. Dampier, Mississippi State University
As an effort to introduce formalism into computer forensics, researchers have presented various modeling techniques for planning, analysis, and documentation of forensics activities. These modeling techniques provide representations of various forensics subjects such as investigative processes, chain of events, and evidence tests. From a software engineering perspective, it seems that several of these computer forensics modeling approaches may be unified to create a more complete, multi-view modeling methodology for examination planning and analysis. This paper proposes a core set of modeling views for a unified computer forensics modeling methodology: investigative process view, case domain view, and, evidence view. An example email threat case scenario is used as the context for a multiview modeling example.
Citation:
A. Chris Bogen, David A. Dampier, "Unifying Computer Forensics Modeling Approaches: A Software Engineering Perspective," sadfe, pp.27-39, First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.