A framework for digital investigations: a case study using BPB modifications
Conference paper
Mitchell, I. 2011. A framework for digital investigations: a case study using BPB modifications. 6th International Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 2011). Kingston University, London Jul 2011
| Type | Conference paper |
|---|---|
| Title | A framework for digital investigations: a case study using BPB modifications |
| Authors | Mitchell, I. |
| Abstract | A framework is developed and the following proposals are made: i) Notation for Framework; ii) a Framework for Digital Investigations Experiments (FDIE); iii) Case study modifying BPB and demonstrating the Framework; and iv) extending the Framework to Digital Investigations (FDI). A case study using BIOS Partition Block (BPB) modifications to render the partitions unreadable is used to demonstrate the framework. The Framework is applied and is a success. From this experiment the Framework (FDIE) is extended to Digital Investigations (FDI). |
| Keywords | Framework; recovery; anti-contamination; evidential integrity; BPB; FAT; NTFS |
| Research Group | Artificial Intelligence group |
| Conference | 6th International Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 2011) |
| Publication process dates | |
| Deposited | 09 Aug 2013 |
| Output status | Published |
| Web address (URL) | http://www.wikicfp.com/cfp/servlet/event.showcfp?eventid=12559©ownerid=18211 |
| Language | English |
Permalink -
https://repository.mdx.ac.uk/item/842q4
137
total views0
total downloads12
views this month0
downloads this month