Integrated digital forensic process model

Digital forensics is an established research and application field. Various process models exist describing the steps and processes to follow during digital forensic investigations. During such investigations, it is not only the digital evidence itself that needs to prevail in a court of law; the pr...

Full description

Saved in:
Bibliographic Details
Published in:Computers & security 2013-10, Vol.38, p.103-115
Main Authors: Kohn, M.D., Eloff, M.M., Eloff, J.H.P.
Format: Article
Language:English
Subjects:
Applied sciences
Communities
Computer aided design
Computer forensics
Computer information security
Computer science
control theory
systems
Computer simulation
Digital
Digital forensic investigations
Digital forensic process
Digital forensics
Exact sciences and technology
Forensic engineering
Information processing
Investigations
Mathematical models
Memory and file management (including protection and security)
Memory organisation. Data processing
Process models
Refining
Software
Studies
Terminology
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Digital forensics is an established research and application field. Various process models exist describing the steps and processes to follow during digital forensic investigations. During such investigations, it is not only the digital evidence itself that needs to prevail in a court of law; the process followed and terminology used should also be rigorous and generally accepted within the digital forensic community. Different investigators have been refining their own investigative methods, resulting in a variety of digital forensic process models. This paper proposes a standardized Digital Forensic Process Model to aid investigators in following a uniform approach in digital forensic investigations. •An overview of existing DFPMs.•DFPM formally represented in sequential logic notation.•DFI phases identified and discussed.•A standardized DFI process terminology is proposed.•The uniform DFI process followed to be accepted by forensic community.
ISSN:0167-4048
1872-6208
DOI:10.1016/j.cose.2013.05.001