BATTLEFIELD DIGITAL FORENSICS

The goal of this statistical approach is to measure effectiveness of information gathering from a device, based
on what can be identified in the environment using the SIDSS process.
The first definition of this approach can be outlined as follows:
‘f(x) = (log2(1/(1-effectiveness)) – (AcquisitionTime + personTime + 0.75 *
additional_Effort))*(Power)*(Connectivity)*(Antiforensics_Measures)’
Obviously this algorithm cannot address all the parameters and in particular the operating environment of SOF
operators, but it is the first to try to address the problem.
Based on this algorithm, a list of gatherable information is presented, which will be useful to address the
prioritisation problem that the operator faces while in action. Any further consideration can be made and
extended based on the same logic and operator's experience.
Table 1 shows the statistical intelligence that can be gathered according to the algorithm. The percentage
represents the possibility to obtain relevant information from the device. All the percentages take into
consideration the usual dimension of devices impacting the mobility and the opportunity to carry the device;
the effectiveness has been calculated based on the state-of-the-art acquisition methods used by law
enforcement. The additional cost is added based on a Gaussian distribution as well as the acquisition time,
about 5 minutes.
28