|
Announcements
Center for Information Protection
UC Davis is planning to join the NSF I/UCRC
Center for Information Protection. We are looking
for companies to join our Industrial Advisory
Board.
Find out more here!
Conferences and Workshops
My Links
Other Links
This Quarter’s Classes
Office Hours for This Quarter
Contacting Me
|
Computer forensics in forensis
Citation
- S. Peisert, M. Bishop, and K. Marzullo,
“Computer forensics in forensis,”
ACM SIGOPS Operating Systems Review 42(3)
pp. 112–122 (Apr. 2008).
Paper
Abstract
Different users apply computer forensic systems, models, and terminology in very
different ways. They often make incompatible assumptions and reach different
conclusions about the validity and accuracy of the methods they use to log,
audit, and present forensic data. In fact, it can be hard to say who, if anyone
is right. We present several forensic systems and discuss situations in which
they produce valid and accurate conclusions and also situations in which their
accuracy is suspect. We also present forensic models and discuss areas in which
they are useful and areas in which they could be augmented. Finally, we present
some recommendations about how computer scientists, forensic practitioners,
lawyers, and judges could build more complete models of forensics that take into
account appropriate legal details and lead to scientifically valid forensic
analysis.
Copyright Notice
© ACM, 2008. This is the author’s version of the work.
It is posted here by permission of ACM for your personal use.
Not for redistribution.
The definitive version was published in
ACM SIGOPS Operating Systems Review 42(3),
Apr. 2008,
and is available at
http://doi.acm.org/10.1145/1368506.1368521.
|
