Tool testing and reliability issues in the field of digital forensics

Research output: Contribution to journalArticle

66 Downloads (Pure)

Abstract

The digital forensic discipline is wholly reliant upon software applications and tools designed and marketed for the acquisition, display and interpretation of digital data. The results of any subsequent investigation using such tools must be reliable and repeatable whilst supporting the establishment of fact, allowing criminal justice proceedings the ability to digest any findings during the process of determining guilt or innocence. Errors present at any stage of an examination can undermine an entire investigation, compromising any potentially evidential results. Despite a clear dependence on digital forensic tools, arguably, the field currently lacks sufficient testing standards and procedures to effectively validate their usage during an investigation. Digital forensics is a discipline which provides decision-makers with a reliable understanding of digital traces on any device under investigation, however, it cannot say with 100% certainty that the tools used to undertake this process produce factually accurate results in all cases. This is an increasing concern given the push for digital forensic organisations to now acquire ISO 17025 accreditation. This article examines the current state of digital forensic tool-testing in 2018 along with the difficulties of sufficiently testing applications for use in this discipline. The results of a practitioner survey are offered, providing an insight into industry consensus surrounding tool-testing and reliability.
Original languageEnglish
Pages (from-to)163-175
Number of pages13
JournalDigital Investigation
Volume28
Early online date1 Feb 2019
DOIs
Publication statusPublished - 1 Mar 2019

Fingerprint Dive into the research topics of 'Tool testing and reliability issues in the field of digital forensics'. Together they form a unique fingerprint.

  • Cite this