Computer Forensics In Forensis
- Author(s): Peisert, Sean
- Bishop, Matt
- Marzullo, Keith
- et al.
Published Web Locationhttp://portal.acm.org/ft_gateway.cfm?id=1368521&type=pdf&coll=GUIDE&dl=GUIDE&CFID=://www.sigops.org/osr.html&CFTOKEN=www.sigops.org/osr.html
Different users apply computer forensic systems, models, and terminology in very different ways. They often make incompatible assumptions and reach different conclusions about the validity and accuracy of the methods they use to log, audit, and present forensic data. In fact, it can be hard to say who, if anyone is right. We present several forensic systems and discuss situations in which they produce valid and accurate conclusions and also situations in which their accuracy is suspect. We also present forensic models and discuss areas in which they are useful and areas in which they could be augmented. Finally, we present some recommendations about how computer scientists, forensic practitioners, lawyers, and judges could build more complete models of forensics that take into account appropriate legal details and lead to scientifically valid forensic analysis.
Many UC-authored scholarly publications are freely available on this site because of the UC Academic Senate's Open Access Policy. Let us know how this access is important for you.