Formalizing Computer Forensics Process with UML

This paper introduces modeling methodologies to computer forensics to provide formalism and structured approach to computer forensics activities. It studies how to use UML diagrams to model and visualize various aspects of a computer forensics system. It first applies UML to model the basic components of a computer forensic process and their relationships. It then uses UML to further visualize the activities carried out for each component. The formal graphical model provides a well-defined and straightforward semantics to the computer forensics process making it easier to understand by various parties involved.

[1]  Ricci S. C. Ieong,et al.  FORZA - Digital forensics investigation framework that incorporate legal issues , 2006, Digit. Investig..

[2]  Eugene H. Spafford,et al.  Getting Physical with the Digital Investigation Process , 2003, Int. J. Digit. EVid..

[3]  Gregg H. Gunsch,et al.  An Examination of Digital Forensic Models , 2002, Int. J. Digit. EVid..

[4]  David A. Dampier,et al.  Unifying computer forensics modeling approaches: a software engineering perspective , 2005, First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05).

[5]  Nicole Beebe,et al.  A hierarchical, objectives-based framework for the digital investigations process , 2005, Digit. Investig..

[6]  Bhuvan Unhelkar.  Practical Object Oriented Analysis , 2005 .

[7]  Mark Pollitt,et al.  An Ad Hoc Review of Digital Forensic Models , 2007, Second International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'07).