Title :
Inference Model of Digital Evidence Based on cFSA
Author :
Liu Zhijun ; Wang Ning ; Zhang Huanguo
Author_Institution :
Inf. Technol. Dept., Hubei Univ. of Police, Wuhan, China
Abstract :
The inference analysis of digital evidence aims to look for the clues for further crime detection or reconstruct the attack actions scenarios for prosecution in court. However, the inference analysis process of computer forensic is more subjective because too much experiential work and sensory presentation are in it. It is even possible that an event never occurred but that an inference conclusion can be fabricated to misdirect crime detection or implicate an innocent person. Based on the analysis of practical inference analysis, the inference model of digital evidence based on a kind of finite state automata with condition (cFSA) is presented, and an event reconstruction theory based on condition-state transition diagram is introduced for detecting the accidental or malicious modification by the investigator and protecting the relatively reliable inference conclusion.
Keywords :
computer forensics; finite state machines; cFSA; computer forensic; condition-state transition diagram; crime detection; digital evidence; finite state automata; inference analysis; inference model; Automata; Computer crime; Computer networks; Computer security; Digital forensics; Event detection; Information analysis; Information security; Information technology; Protection; computer forensics; digital evidence; evidence analysis; finite state automata; inference model;
Conference_Titel :
Multimedia Information Networking and Security, 2009. MINES '09. International Conference on
Conference_Location :
Hubei
Print_ISBN :
978-0-7695-3843-3
Electronic_ISBN :
978-1-4244-5068-8
DOI :
10.1109/MINES.2009.72