SLAMorris Final Thesis After Corrections.pdf - Cranfield University

for their crimes; therefore anti-forensic tools aim to remove artefacts which
relate to system activity.
As well as the technical skills and procedures of analysts, consideration should
be given to the support they are given. It has been documented that continual
exposure to harmful material, such as images of child abuse, can cause
significant stress and discomfort for forensic practitioners [ACPO, 2010].An
individual repeatedly subjected to violent images may find themselves
desensitised to their effect [Anderson, 1998], this can lead to a distortion of their
morals; reducing their comprehension of the serious nature of the materials they
are reviewing. It has been recommended that analysts have access to
appropriate psychological support, to ensure their mental wellbeing. Carnagey
[2007] has shown that continued exposure to violence can cause
desensitisation; therefore it is necessary to ensure analysts minimise exposure
to harmful material to minimise desensitisation. Automating activities is one
method of limiting exposure to potentially harmful material.
Limited resources also make it desirable to automate tasks, such as fragment
identification, than to have each fragment manually examined [Noblett, 2000]. A
higher level of accuracy can result from automation, as the large amount of
storage media would make it difficult for an analyst to identify all the available
fragments for a particular file type.
For this research this section has identified a key requirement of automating the
methodology which will assist in minimising the use of resources. The use of
anti-forensic tools also leads to a requirement to ensure artefacts recovered are
from a system which was working properly.
Page 57