The Experts below are selected from a list of 13092 Experts worldwide ranked by ideXlab platform

Megan Rupe - One of the best experts on this subject based on the ideXlab platform.

Vassil Roussev - One of the best experts on this subject based on the ideXlab platform.

  • Massively Threaded Digital Forensics Tools
    Handbook of Research on Computational Forensics Digital Crime and Investigation, 2010
    Co-Authors: Lodovico Marziale, Vassil Roussev, Santhi Movva, Golden G. Richard Iii, Loren Schwiebert
    Abstract:

    Digital Forensics comprises the set of techniques to recover, preserve, and examine Digital evidence, and has applications in a number of important areas, including investigation of child exploitation, identity theft, counter-terrorism, and intellectual property disputes. Digital Forensics tools must exhaustively examine and interpret data at a low level, because data of evidentiary value may have been deleted, partially overwritten, obfuscated, or corrupted. While Forensics investigation is typically seen as an off-line activity, improving case turnaround time is crucial, because in many cases lives or livelihoods may hang in the balance. Furthermore, if more computational resources can be brought to bear, we believe that preventative network security (which must be performed on-line) and Digital Forensics can be merged into a common research focus. In this chapter we consider recent hardware trends and argue that multicore CPUs and Graphics Processing Units (GPUs) offer one solution to the problem of maximizing available compute resources.

  • Massive threading: Using GPUs to increase the performance of Digital Forensics tools
    Digital Investigation, 2007
    Co-Authors: Lodovico Marziale, Golden G Richard, Vassil Roussev
    Abstract:

    The current generation of Graphics Processing Units (GPUs) contains a large number of general purpose processors, in sharp contrast to previous generation designs, where special-purpose hardware units (such as texture and vertex shaders) were commonly used. This fact, combined with the prevalence of multicore general purpose CPUs in modern workstations, suggests that performance-critical software such as Digital Forensics tools be ''massively'' threaded to take advantage of all available computational resources. Several trends in Digital Forensics make the availability of more processing power very important. These trends include a large increase in the average size (measured in bytes) of forensic targets, an increase in the number of Digital Forensics cases, and the development of ''next-generation'' tools that require more computational resources. This paper presents the results of a number of experiments that evaluate the effectiveness of offloading processing common to Digital Forensics tools to a GPU, using ''massive'' numbers of threads to parallelize the computation. These results are compared to speedups obtainable by simple threading schemes appropriate for multicore CPUs. Our results indicate that in many cases, the use of GPUs can substantially increase the performance of Digital Forensics tools.

  • next generation Digital Forensics
    Communications of The ACM, 2006
    Co-Authors: Golden G Richard, Vassil Roussev
    Abstract:

    The Digital Forensics community requires new tools and strategies for the rapid turnaround of large forensic targets.

Martin S. Olivier - One of the best experts on this subject based on the ideXlab platform.

  • IFIP Int. Conf. Digital Forensics - NOTIONS OF HYPOTHESIS IN Digital Forensics
    IFIP Advances in Information and Communication Technology, 2015
    Co-Authors: Segen Tewelde, Stefan Gruner, Martin S. Olivier
    Abstract:

    With the growing scientification of the discipline of Digital Forensics, the notion of “scientific hypothesis” is becoming increasingly important, because all empirical science is hypothetical, not apodictic. Although the word “hypothesis” is used widely in the Digital Forensics literature, its usage is not sufficiently reflected from a philosophy of science point of view. This chapter discusses this problem with particular reference to Carrier’s methodological work in which the notion of hypothesis plays a prominent role.

  • On Complex Crimes and Digital Forensics
    Information Security in Diverse Computing Environments, 2014
    Co-Authors: Martin S. Olivier
    Abstract:

    Science provides the basis for truth claims in Forensics. Very little research has been done to explore the scientific basis of Digital Forensics. The work that has been done vary widely in what they propose; in most cases it is unclear how the philosophical remarks about such forensic science apply to Digital Forensics practice, or that the practical suggestions are a sufficient basis to claim that practice based on them is scientific. This chapter provides an initial exploration of the potential of decision problems from the field of algorithmics to form this scientific basis. There is no doubt that decision problems operate in the scientific domain and decision problems look similar to hypotheses to be of immediate practical use. The chapter suggests that, if decision problems are used in this manner, it is clear that current Digital Forensics have only scratched the surface of what is possible. Probabilistic complexity classes, for example, offer interesting possibilities for performing complex tests in relatively short times, with known error rates. Using decision problems as a demarcation criterion makes it possible to distinguish between Digital forensic science (or simply Digital Forensics) and Digital forensic craft, which should be called Digital investigative technique or some other suitable term that does not imply that its use leads to scientific truths.

  • IFIP Int. Conf. Digital Forensics - On the Scientific Maturity of Digital Forensics Research
    Advances in Digital Forensics IX, 2013
    Co-Authors: Martin S. Olivier, Stefan Gruner
    Abstract:

    This paper applies a scientific maturity grade schema from the software engineering domain to research in the field of Digital Forensics. On the basis of this maturity schema and its grades, the paper classifies the current maturity of Digital Forensics research. The findings show that much more research conducted at higher levels of “scientificness” is necessary before the new field of Digital Forensics can be considered to be scientifically mature.

Stefan Gruner - One of the best experts on this subject based on the ideXlab platform.

Mark Pollitt - One of the best experts on this subject based on the ideXlab platform.

  • A History of Digital Forensics
    2010
    Co-Authors: Mark Pollitt
    Abstract:

    The field of Digital Forensics is relatively new. While its history may be chronologically short, it is complex. This paper outlines the early history of Digital Forensics from the perspective of an early participant. The history is divided into four epochs: pre-history, infancy, childhood and adolescence. Each of these epochs is examined from the perspective of the people involved, the criminal targets, the forensic tools utilized, the organizational structures that supported Digital forensic practitioners and how the community formed. This history is, by necessity, incomplete and biased. There is a need for rigorous historical research in this area before all traces of the past are forgotten or obliterated.

  • IFIP Int. Conf. Digital Forensics - A History of Digital Forensics
    Advances in Digital Forensics VI, 2010
    Co-Authors: Mark Pollitt
    Abstract:

    The field of Digital Forensics is relatively new. While its history may be chronologically short, it is complex. This paper outlines the early history of Digital Forensics from the perspective of an early participant. The history is divided into four epochs: pre-history, infancy, childhood and adolescence. Each of these epochs is examined from the perspective of the people involved, the criminal targets, the forensic tools utilized, the organizational structures that supported Digital forensic practitioners and how the community formed. This history is, by necessity, incomplete and biased. There is a need for rigorous historical research in this area before all traces of the past are forgotten or obliterated.

  • Virtualization and Digital Forensics: A Research and Education Agenda
    Journal of Digital Forensic Practice, 2008
    Co-Authors: Mark Pollitt, Kara Nance, Ronald Dodge, Philip Craiger, Paul Burke, Chris Marberry, Bryan Brubaker
    Abstract:

    The application of virtualization software and techniques in information technology research and education has provided a foundational environment to advance the state-of-the-art in research and education in many related areas. Commercial and open source virtualization products are being used by researchers and educators to create a wide variety of virtual environments. These virtual environments facilitate systems design and development and product development as well as the testing and modeling of production and preproduction systems. As the capabilities, functionality, and stability of these products have evolved, the use of virtualization has expanded, necessitating the identification of new research areas to investigate the impacts of virtualization on Digital Forensics. In February 2007, a group of Digital Forensics researchers, educators, and practitioners gathered at the National Center for Forensic Science at the University of Central Florida for the 2007 Workshop on Virtualization in Digital Forensics to discuss these issues and develop a research and education agenda for virtualization and Digital Forensics. This article outlines some of the ideas generated and new research categories and areas identified at this meeting.

  • HICSS - Master's Degree in Digital Forensics
    2007 40th Annual Hawaii International Conference on System Sciences (HICSS'07), 2007
    Co-Authors: Philip Craiger, Mark Pollitt, L. Ponte, C. Whitcomb, R. Eaglin
    Abstract:

    Law enforcement agents at the local, state, and federal levels have informed us of backlogs of computer-related crime cases ranging from 18 months to three years. The primary cause of these backlogs is the lack of educated and trained personnel to serve as Digital Forensics examiners. In response to this need, the University of Central Florida has created a Masters in Digital Forensics. This 30-hour degree is an interdisciplinary mix of technical, legal, ethical, and courtroom testimony-based courses. Students must complete a capstone course as well as a graduate internship to demonstrate proficiency in the knowledge and skills acquired from the courses