Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

compromised which may further affect the admissibility of the digital evidence
presented in court. In relation to the digital evidence, corresponding laws and
guidelines are identified and discussed in section 2.2. Application of open source
digital forensic tools in digital investigation has been questioned. However, open
source digital forensic tools still have advantages that proprietary software does not
have. A complete understanding of the reliability of digital forensic tools helps further
define the mandatory requirements of disk imaging tools. The requirements will
determine the required functions for a disk imaging tool and provide the foundation of
tool testing requirements. Many digital forensic tools are still yet to be verified and
validated before they can be used as forensic tools in the field. A standardised digital
forensics tool verification and validation framework or procedures are yet to be
established. Several issues and problems regarding digital forensic tools have been
raised and developed in Chapter 2. A summary of key issues and problems are
discussed in this section to provide a snapshot of the current trends in digital forensics.
2.6 CONCLUSION
Chapter 2 focuses on reviewing the contexts and discussions relevant to the evaluation
of digital forensic tools. A comprehensive overview of the digital forensic
environment has been developed. The overview covers the differences between
computer forensics and digital forensics, Investigative Processes & Standardisations
and most importantly the development and evolution of digital forensic tools. It shows
the development, the most popular tools and problems of digital forensic tools. Digital
forensics tools verification and validation are studied and discussed regarding the
current trends in the industry.
The review covers background studies of digital forensics, the legal and
technical issues of digital forensic tools. Digital evidence is defined in order to further
analyse its admissibility regarding legal standard and Daubert guidelines of the United
States of America. In relation to that, the reliability of digital forensic tools is
discussed with respect to the perspectives of open source and proprietary software.
Arguments between open source and proprietary software are presented. With the
41