Abstract
While still relatively young the use of digital forensics in criminal investigations is increasing. This has
prompted law enforcement agencies to look at developing more efficient techniques for investigating digital media. Triage tools are seen as the next generation of digital forensics investigatory technologies. However, such tools are still lacking basic decision support mechanisms, and still require some form of human intervention. The authors propose to use a case based reasoning system to record and store digital forensics examinations. It is suggested that when coupled with knowledge based reasoning methods, a system would be a fully automated decision aide for digital forensic examinations. In outlining this proposal, this paper will review automation, triage, case-based reasoning, and then discuss the impact that knowledge reuse can have on digital investigations
prompted law enforcement agencies to look at developing more efficient techniques for investigating digital media. Triage tools are seen as the next generation of digital forensics investigatory technologies. However, such tools are still lacking basic decision support mechanisms, and still require some form of human intervention. The authors propose to use a case based reasoning system to record and store digital forensics examinations. It is suggested that when coupled with knowledge based reasoning methods, a system would be a fully automated decision aide for digital forensic examinations. In outlining this proposal, this paper will review automation, triage, case-based reasoning, and then discuss the impact that knowledge reuse can have on digital investigations
Original language | English |
---|---|
Publication status | Published - 30 Jun 2011 |
Event | The 12th Annual Postgraduate Symposium on the Convergence of Telecommunications, Networking and Broadcasting - Liverpool, Liverpool, United Kingdom Duration: 27 Jun 2011 → 28 Jun 2011 Conference number: 12 |
Conference
Conference | The 12th Annual Postgraduate Symposium on the Convergence of Telecommunications, Networking and Broadcasting |
---|---|
Country/Territory | United Kingdom |
City | Liverpool |
Period | 27/06/11 → 28/06/11 |