First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05) Unifying Computer Forensics Modeling Approaches: A Software Engineering Perspective Taipei, Taiwan November 07-November 09 ISBN: 0-7695-2478-8
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SADFE.2005.27
As an effort to introduce formalism into computer forensics, researchers have presented various modeling techniques for planning, analysis, and documentation of forensics activities. These modeling techniques provide representations of various forensics subjects such as investigative processes, chain of events, and evidence tests. From a software engineering perspective, it seems that several of these computer forensics modeling approaches may be unified to create a more complete, multi-view modeling methodology for examination planning and analysis. This paper proposes a core set of modeling views for a unified computer forensics modeling methodology: investigative process view, case domain view, and, evidence view. An example email threat case scenario is used as the context for a multiview modeling example.
Citation:
A. Chris Bogen, David A. Dampier, "Unifying Computer Forensics Modeling Approaches: A Software Engineering Perspective," sadfe, pp.27-39, First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05), 2005 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||