SLAMorris Final Thesis After Corrections.pdf - Cranfield University

A process is defined as having understandable consequences when at
each stage of the process the results and their relationship to the original
data can be explained.
The process can be considered to follow the scientific method when a
hypothesis is formed based on the problem to be solved and tested
through a process of data observation and experimentation.
Clear documentation is defined as something which another analyst
could read, understand and use to repeat the described processes.
A result can be corroborated when the documentation is clear enough to
allow the process to be repeated and therefore the results can be
verified.
4.3.2 Interpretation of Results
It is important to establish if the artefacts being analysed were created while the
machine was working properly. If an artefact was created during the proper
operation of the system it is simpler to establish the behaviour it represents. If
the artefact was created outside of the system’
s proper operation then the anomalous behaviour the artefact represents may
not be what the analyst expects. A single artefact on its own provides limited
information about its meaning; by forming relationships between multiple
artefacts it is possible to maximise corroboration of the information available to
the analyst. In order to improve the likelihood of all relevant artefacts being
recovered it is necessary to ensure that the maximum amount of data is
retrieved therefore increasing the likelihood of retrieving artefacts with probative
value. Due to the large amounts of data an analyst may encounter it may be
necessary to use a documented automated methodology.
In more detail:
Page 59