Abstract

Nowadays there is almost no criminal offense in the investigation of which digital evidence does not play a key role. Constant increase of the capacity of media that store digital data leads to continuous increase of the time necessary to identify and copy (acquire) digital evidence. Selection of appropriate digital forensics software is gaining in importance. Selection of adequate software includes a previous comparative analysis of two or more digital forensics software tools and an optimization process. The objective of the comparative analysis of these software tools is to determine and compare each of their realistic and comparable performances. Optimization aims to determine which of digital forensics software tools has better performances. This paper shows one of possible variants of selecting digital forensics software, using the latest scientific achievements in support of decision making based on the analytic hierarchy process (AHP) method and the Expert Choice computer program.

Highlights

  • The implementation of a high-quality comparative analysis of standard digital forensics software is a very complex task

  • In accordance with the prevailing opinion of the scientific and professional community, standard digital forensics software products are from American Guidance Software and Data Access as well as from German X-Ways, i.e. their digital forensics software tools named EnCase, FTK (FTK Imager) and WinHex

  • In the phase of defining alternatives, it is necessary to enter the data on the alternatives under consideration, or the names of the three leading digital forensics software programs selected based on the opinions of professional and scientific community, "EN CASE", "FTK" and "WIN HEX"

Read more

Summary

Introduction

The implementation of a high-quality comparative analysis of standard digital forensics software is a very complex task. In accordance with the prevailing opinion of the scientific and professional community, standard digital forensics software products are from American Guidance Software and Data Access as well as from German X-Ways, i.e. their digital forensics software tools named EnCase, FTK (FTK Imager) and WinHex. The problem of securing legal software necessary for comparative analyses is overcome by using their older test, demo, and lite versions ie. In order to determine which of the above software programs has better performance, optimization is used to identify an alternative that, according to the established criteria, has better basic possibilities or primary performances In this sense, the objective of optimization is defined as" Selection of Digital Forensics Software with better primary performances". While the goal is clear to obtain valid digital evidence acceptable in court, in practice it appears that this is not easy to achieve at all (Kaurin, Anucojić, 2012, p.715)

Comparative analysis of standard digital forensics software
Optimizing Digital Forensics Software Selection
Conclusion
PRIMENA VIŠEKRITERIJUMSKOG ODLUČIVANJA U IZBORU SOFTVERA DIGITALNE FORENZIKE
Full Text
Paper version not known

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.