國立虎尾科技大學 |

An Empirical Investigation of the Evidence Recovery Process in Digital Forensics.

Record Type:	Language materials, manuscript : Monograph/item
Title/Author:	An Empirical Investigation of the Evidence Recovery Process in Digital Forensics./
Author:	Parviz, Kevin.
Description:	1 online resource (112 pages)
Notes:	Source: Dissertations Abstracts International, Volume: 84-02, Section: B.
Contained By:	Dissertations Abstracts International84-02B.
Subject:	Computer science. -
Online resource:	click for full text (PQDT)
ISBN:	9798837537592

An Empirical Investigation of the Evidence Recovery Process in Digital Forensics.
Parviz, Kevin.

An Empirical Investigation of the Evidence Recovery Process in Digital Forensics. - 1 online resource (112 pages)

Source: Dissertations Abstracts International, Volume: 84-02, Section: B.

Thesis (Ph.D.)--Nova Southeastern University, 2022.

Includes bibliographical references

The widespread use of the digital media in committing crimes, and the steady increase of their storage capacity has created backlogs at digital forensic labs. The problem is exacerbated especially in high profile crimes. In many such cases the judicial proceedings mandate full analysis of the digital media, when doing so is rarely accomplished or practical. Prior studies have proposed different phases for forensic analysis, to lessen the backlog issues. However, these phases are not distinctly differentiated, and some proposed solutions may not be practical. This study utilized several past police forensic analyses. Each case was chosen for having five distinct forensic phases, complete with documented amount of time spent in each phase, along with the number and type of recovered evidence. Data from these cases were empirically analyzed using common descriptive statistical analyses along with linear regression. By using linear regression, we tested the factors that determine the number of recovered evidentiary artifacts. This study provides models by which future forensic analyses could be assessed. It presents distinctive boundaries for each forensics phase, thus eliminating ambiguity in the examination results, while assisting forensic examiners in determining the necessary depth of analysis.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798837537592Subjects--Topical Terms:

573171
Computer science.
Subjects--Index Terms:

BacklogsIndex Terms--Genre/Form:

554714
Electronic books.

An Empirical Investigation of the Evidence Recovery Process in Digital Forensics.
LDR:02681ntm a22003977 4500 001 1147230
005 20240909100731.5
006 m o d
007 cr bn ---uuuuu
008 250605s2022 xx obm 000 0 eng d
020 $a 9798837537592
035 $a (MiAaPQ)AAI29261544
035 $a AAI29261544
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Parviz, Kevin. $3 1472899
245 1 3 $a An Empirical Investigation of the Evidence Recovery Process in Digital Forensics.
264 0 $c 2022
300 $a 1 online resource (112 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 84-02, Section: B.
500 $a Advisor: Mukherjee, Sumitra.
502 $a Thesis (Ph.D.)--Nova Southeastern University, 2022.
504 $a Includes bibliographical references
520 $a The widespread use of the digital media in committing crimes, and the steady increase of their storage capacity has created backlogs at digital forensic labs. The problem is exacerbated especially in high profile crimes. In many such cases the judicial proceedings mandate full analysis of the digital media, when doing so is rarely accomplished or practical. Prior studies have proposed different phases for forensic analysis, to lessen the backlog issues. However, these phases are not distinctly differentiated, and some proposed solutions may not be practical. This study utilized several past police forensic analyses. Each case was chosen for having five distinct forensic phases, complete with documented amount of time spent in each phase, along with the number and type of recovered evidence. Data from these cases were empirically analyzed using common descriptive statistical analyses along with linear regression. By using linear regression, we tested the factors that determine the number of recovered evidentiary artifacts. This study provides models by which future forensic analyses could be assessed. It presents distinctive boundaries for each forensics phase, thus eliminating ambiguity in the examination results, while assisting forensic examiners in determining the necessary depth of analysis.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Computer science. $3 573171
650 4 $a Forensic anthropology. $3 655628
650 4 $a Information science. $3 561178
653 $a Backlogs
653 $a Computer forensics
653 $a Digital forensics
653 $a Imaging
653 $a Triage
655 7 $a Electronic books. $2 local $3 554714
690 $a 0984
690 $a 0723
690 $a 0339
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a Nova Southeastern University. $b Computer Science (CISC, CISD). $3 1472900
773 0 $t Dissertations Abstracts International $g 84-02B.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=29261544 $z click for full text (PQDT)