Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Phase 1<br />
Select the s<strong>of</strong>tware<br />
disk imaging tools<br />
Review<br />
documentation <strong>of</strong><br />
selected tools<br />
Phase 2 Phase 3<br />
Function Mapping<br />
& Specific Testing<br />
requirements<br />
Translate testing<br />
requirements to<br />
test assertions<br />
Develop testing<br />
scenarios &<br />
Configure testing<br />
environment<br />
58<br />
Adjust scenarios<br />
Figure 3.8. Research phases.<br />
Phase 4<br />
Execute tests<br />
and document<br />
test results<br />
Review<br />
Phase 5<br />
Analyse test<br />
results<br />
Test scenarios and assertions are developed in Phase 3 according to a few similar<br />
studies (Byers & Shahmehri, 2009; NIST, 2004; Guo & Slay, 2010), the available<br />
equipments, testing requirements and the functionalities provided by the selected disk<br />
imaging tools. A proper configuration <strong>of</strong> the testing environment is also completed in<br />
Phase 3. The complete list <strong>of</strong> testing scenarios and assertions can be retrieved from<br />
Appendix 3 and Appendix 4. Test scenarios are executed and test results are<br />
documented in Phase 4 based upon the specifications designed in Phase 3. <strong>Data</strong><br />
gathered from Phase 4 are analysed in Phase 5. At the conclusion <strong>of</strong> the data analysis,<br />
the hypotheses will be fully tested and the validity <strong>of</strong> three selected alternatives can be<br />
compared and studied. The iterative research design can help to further improve the<br />
research methodology and generate more accurate results. The research phases in the<br />
proposed research have similarities with other widely used s<strong>of</strong>tware evaluation<br />
approaches (Kontio, 1996; Wilsdon & Slay, 2006; Comella-Dorda et. al., 2002).<br />
3.4 DATA REQUIREMENTS<br />
<strong>Data</strong> collected from Phase 4 will be processed and analysed in Phase 5 to empirically<br />
test the hypotheses and the research model developed in sections 3.2 and 3.3<br />
respectively. In<strong>for</strong>mation collected in Phase 1 and 2 contains review <strong>of</strong> related<br />
literatures, Internet survey, s<strong>of</strong>tware vendor sources and consumer report.<br />
Development <strong>of</strong> test scenarios and assertions is based on the in<strong>for</strong>mation collected in<br />
phase 1 and 2. A series <strong>of</strong> tests are to be per<strong>for</strong>med in phase 4 according to test<br />
scenarios and assertions. Finally, test results are collected from the tests and analysed.
Change language