Analysis of Evidence Using Formal Event Reconstruction

Joshua James; Pavel Gladyshev; Mohd Abdullah; Yuandong Zhu

Digital Forensics and Cyber Crime. First International ICST Conference, ICDF2C 2009, Albany, NY, USA, September 30-October 2, 2009, Revised Selected Papers

Research Article

Analysis of Evidence Using Formal Event Reconstruction

Download

511 downloads

Cite: BibTeX Plain Text

@INPROCEEDINGS{10.1007/978-3-642-11534-9_9,
    author={Joshua James and Pavel Gladyshev and Mohd Abdullah and Yuandong Zhu},
    title={Analysis of Evidence Using Formal Event Reconstruction},
    proceedings={Digital Forensics and Cyber Crime. First International ICST Conference, ICDF2C 2009, Albany, NY, USA, September 30-October 2, 2009, Revised Selected Papers},
    proceedings_a={ICDF2C},
    year={2012},
    month={5},
    keywords={Digital Forensics Event Reconstruction State Machine Automata Evidence Modeling},
    doi={10.1007/978-3-642-11534-9_9}
}

Joshua James
Pavel Gladyshev
Mohd Abdullah
Yuandong Zhu
Year: 2012
Analysis of Evidence Using Formal Event Reconstruction
ICDF2C
Springer
DOI: 10.1007/978-3-642-11534-9_9

Joshua James¹^,*, Pavel Gladyshev¹^,*, Mohd Abdullah²^,*, Yuandong Zhu¹^,*

1: University College Dublin
2: Putra University of Malaysia

*Contact email: Joshua.James@ucd.ie, Pavel.Gladyshev@ucd.ie, mtaufik@fsktm.upm.edu.my, Yuandong.Zhu@ucd.ie

Abstract

This paper expands upon the finite state machine approach for the formal analysis of digital evidence. The proposed method may be used to support the feasibility of a given statement by testing it against a relevant system model. To achieve this, a novel method for modeling the system and evidential statements is given. The method is then examined in a case study example.

Keywords: Digital Forensics Event Reconstruction State Machine Automata Evidence Modeling

Published: 2012-05-28

: http://dx.doi.org/10.1007/978-3-642-11534-9_9