Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

Only a limited number of arguments have been discussed about the reliability OSS and
Proprietary software. The debate between supporters of OSS and Proprietary software
has been continuing for decades and there is no obvious conclusion. Testing the
validity of disk imaging tools demands further studies, as digital forensics is still an
immature field.
2.2.4 Verification And Validation Of Digital Forensic Tools
Section 2.2.1 and 2.2.2 have discussed the legal implications of digital evidence.
Digital forensic practitioners are relying on automated software tools to acquire and
analyse digital evidence. The reliability of the digital evidence is determined by the
completeness and accuracy of the tools employed by the forensic investigators.
Imperious demands are raised by law enforcement, the intelligence community and
other government agencies to verify and validate the validity of digital forensic tools.
Rogers & Seigfried (2004) and Etter (2001) have pointed out that forensics tool testing
or validation is one of the challenges or issues in forensic science research. The
outcome of Daubert guidelines also indicates that the forensics tool must be validated
if they produce evidence that is introduced to court.
2.2.4.1 Background of Verification and Validation (V&V)
Software Verification and Validation (V&V) concept emerged in late 1960‟s. V&V is
one of the disciplines in software engineering that embeds the quality assurance
process throughout the lifecycle of software development. V&V examines and
analyses whether the functions of the software are working correctly and running as
expected (Wallace& Fujii, 1989). Many models and standards have been developed
over the years such as IEEE Software V&V standard 1012-2004, 1059 and 1074. The
standard outlines the plan, process and documentation requirements of V&V (Rohilla
& Malik, 2008). According to the IEEE (1990) Standard Glossary of Software
Engineering Terminology, Validation is defined as “The process of evaluating a
system or component during or at the end of the development process to determine
whether it satisfies specified requirements” (p. 80).
In other words, the developed software should satisfy the pre-determined
requirements. With regarding to the digital forensic tools, it confirms whether the
25