Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

Table of Contents
Declaration .............................................................................................................. ii
Acknowledgement .................................................................................................. iii
Abstract ................................................................................................................... v
Table of Contents .................................................................................................. vii
List of Tables ........................................................................................................ xiii
List of Figures ....................................................................................................... xv
Abbreviations ...................................................................................................... xvii
Chapter 1. Introduction
1.0 Introduction ................................................................................................................... 1
1.1 Motivation of the Research ........................................................................................... 2
1.2 Research Findings ......................................................................................................... 3
1.3 Structure of the Thesis .................................................................................................. 4
1.4 Conclusion .................................................................................................................... 6
Chapter 2. Literature Review
2.0 Introduction ....................................................................................................................7
2.1 Over of Digital Forensics Environment .........................................................................8
2.1.1 Computer Forensics and Digital Forensics ......................................................... 9
2.1.2 Investigative Processes and Standardisations .................................................... 10
2.1.3 Development and Evolution of Digital Forensics Tools ................................... 14
2.2 Legal and Technical Implications of Digital Forensics Tools .................................... 18
2.2.1 The Definition and Characteristics of Digital Evidence ................................... 18
2.2.2 Admissibility of Digital Evidence in Courtroom .............................................. 20
2.2.3 Open-Source and Proprietary Digital Forensics Tools ...................................... 22
2.2.4 Verification and Validation of Digital Forensics Tools .................................... 25
2.2.4.1 Background of Verification and Validation (V&V) ................................ 25
2.2.4.2 Existing Work of Forensics Tool V&V ................................................... 26
2.3 Define Disk Imaging Tools ......................................................................................... 28
2.3.1 Attributes of Disk Imaging Tools ..................................................................... 29
2.3.2 Mandatory Features of Disk Imaging Tools ..................................................... 29
2.3.3 Current Disk Imaging Tools ............................................................................. 30
vi