Analysis of Evidence Using Formal Event Reconstruction

  • Joshua James
  • Pavel Gladyshev
  • Mohd Taufik Abdullah
  • Yuandong Zhu
Conference paper

DOI: 10.1007/978-3-642-11534-9_9

Part of the Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering book series (LNICST, volume 31)
Cite this paper as:
James J., Gladyshev P., Abdullah M.T., Zhu Y. (2010) Analysis of Evidence Using Formal Event Reconstruction. In: Goel S. (eds) Digital Forensics and Cyber Crime. ICDF2C 2009. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 31. Springer, Berlin, Heidelberg

Abstract

This paper expands upon the finite state machine approach for the formal analysis of digital evidence. The proposed method may be used to support the feasibility of a given statement by testing it against a relevant system model. To achieve this, a novel method for modeling the system and evidential statements is given. The method is then examined in a case study example.

Keywords

Digital Forensics Event Reconstruction State Machine Automata Evidence Modeling 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© ICST Institute for Computer Science, Social Informatics and Telecommunications Engineering 2010

Authors and Affiliations

  • Joshua James
    • 1
  • Pavel Gladyshev
    • 1
  • Mohd Taufik Abdullah
    • 2
  • Yuandong Zhu
    • 1
  1. 1.Centre for Cybercrime InvestigationUniversity College DublinDublinIreland
  2. 2.Department of Computer Science Faculty of Computer Science and Information TechnologyPutra University of MalaysiaSerdangMalaysia

Personalised recommendations