Title :
A Case Based Reasoning Framework for Improving the Trustworthiness of Digital Forensic Investigations
Author :
Horsman, Graeme ; Laing, Christopher ; Vickers, Paul
Author_Institution :
Dept. of Comput., Eng. & Inf. Sci., Northumbria Univ., Newcastle upon Tyne, UK
Abstract :
A novel concept for improving the trustworthiness of results obtained from digital investigations is presented. Case Based Reasoning Forensic Auditor (CBR-FA) is a method by which results from previous digital forensic examinations are stored and reused to audit current digital forensic investigations. CBR-FA provides a method for evaluating digital forensic investigations in order to provide a practitioner with a level of reassurance that evidence that is relevant to their case has not been missed. The structure of CBR-FA is discussed as are the methodologies it incorporates as part of its auditing functionality.
Keywords :
case-based reasoning; computer forensics; trusted computing; CBR-FA; audit current digital forensic investigations; auditing functionality; case-based reasoning forensic auditor; digital forensic examinations; digital forensic investigations trustworthiness; Cognition; Digital forensics; Knowledge engineering; Problem-solving; Reliability; Standards; Auditing; Bayesian Theory; Case Based Reasoning; Digital forensics; Trust;
Conference_Titel :
Trust, Security and Privacy in Computing and Communications (TrustCom), 2012 IEEE 11th International Conference on
Conference_Location :
Liverpool
Print_ISBN :
978-1-4673-2172-3
DOI :
10.1109/TrustCom.2012.18
