论文信息 - Automatic Creation of Computer Forensic Test Images

Automatic Creation of Computer Forensic Test Images

This paper investigates the possibilities for the automatic creation of scenario-based test file images for computer forensics testing purposes, and goes on to discuss and review a tool developed for this task. The tool creates NTFS images based on user-selectable data hiding and timeline management. In this paper we document both the creation of the tool and report on its use in a variety of test situations.

[1] Jill Slay,et al. Validation and verification of computer forensic software tools-Searching Function , 2009 .

[2] Felix C. Freiling,et al. The Forensic Image Generator Generator (Forensig2) , 2009, 2009 Fifth International Conference on IT Security Incident Management and IT Forensics.

[3] Sangjin Lee,et al. Analysis of changes in file time attributes with file manipulation , 2011, Digit. Investig..

[4] Brian D. Carrier,et al. File System Forensic Analysis , 2005 .

[5] Elena Karahanna,et al. Time Flies When You're Having Fun: Cognitive Absorption and Beliefs About Information Technology Usage , 2000, MIS Q..

[6] Vikram Sethi,et al. Demonstrating Operating System Principles via Computer Forensics Exercises , 2010, J. Inf. Syst. Educ..

[7] Darren Hayes,et al. The impact of Microsoft's Windows 7 on computer forensics examinations , 2010, 2010 IEEE Long Island Systems, Applications and Technology Conference.

[8] Ewa Huebner,et al. Data hiding in the NTFS file system , 2006, Digit. Investig..