Digital Forensics and Cyber Crime. First International ICST Conference, ICDF2C 2009, Albany, NY, USA, September 30-October 2, 2009, Revised Selected Papers

Research Article

Analysis of Evidence Using Formal Event Reconstruction

Download91 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-11534-9_9,
        author={Joshua James and Pavel Gladyshev and Mohd Abdullah and Yuandong Zhu},
        title={Analysis of Evidence Using Formal Event Reconstruction},
        proceedings={Digital Forensics and Cyber Crime. First International ICST Conference, ICDF2C 2009, Albany, NY, USA, September 30-October 2, 2009, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2012},
        month={5},
        keywords={Digital Forensics Event Reconstruction State Machine Automata Evidence Modeling},
        doi={10.1007/978-3-642-11534-9_9}
    }
    
  • Joshua James
    Pavel Gladyshev
    Mohd Abdullah
    Yuandong Zhu
    Year: 2012
    Analysis of Evidence Using Formal Event Reconstruction
    ICDF2C
    Springer
    DOI: 10.1007/978-3-642-11534-9_9
Joshua James1,*, Pavel Gladyshev1,*, Mohd Abdullah2,*, Yuandong Zhu1,*
  • 1: University College Dublin
  • 2: Putra University of Malaysia
*Contact email: Joshua.James@ucd.ie, Pavel.Gladyshev@ucd.ie, mtaufik@fsktm.upm.edu.my, Yuandong.Zhu@ucd.ie

Abstract

This paper expands upon the finite state machine approach for the formal analysis of digital evidence. The proposed method may be used to support the feasibility of a given statement by testing it against a relevant system model. To achieve this, a novel method for modeling the system and evidential statements is given. The method is then examined in a case study example.