SLAMorris Final Thesis After Corrections.pdf - Cranfield University

The thumbnail cache artefact extractor documented in Section 9.10 uses the
structures provided in Appendix A that were established through the
experimentation performed in Chapters 5 and 6. The results of the extraction
document the original offsets of the artefacts and show the relationships
between artefacts. The results could be replicated and corroborated by using
the same experimental procedure to ascertain the structure and behaviour of
the thumbnail caches using the clear documentation provided in Chapters 5
and 6.
The documentation provided in both Chapters 7-9 which detail the
implemented methodologies and the log files utilised by each method [Sections
7.9, 9.3] provide sufficient information to enable an analyst to conduct their own
experiments.
10.3 Justifiable Method, Understandable Consequences and
Scientific Method
“An action is defined as Justifiable if it can be shown how the results were
obtained and the effects on the original data are understood.” [Chapter
4.3.1]
“A process is defined as having understandable consequences when at
each stage of the process the results and their relationship to the original
data can be explained.” [Chapter 4.3.1]
“The process can be considered to follow the scientific method when a
hypothesis is formed based on the problem to be solved and tested through
a process of data observation and experimentation.” [Chapter 4.3.1]
Page
269