Getting Physical with the Digital Investigation Process

Get BibTex-formatted data

Download

PDF

Author

Brian Carrier and Eugene H. Spafford

Tech report number

CERIAS TR 2003-29

Entry type

article

Abstract

In this paper, a process model for digital investigations is defined using the theories and techniques from the physical investigation world. While digital investigations have recently become more common, physical investigations have existed for thousands of years and the experience from them can be applied to the digital world. This paper introduces the notion of a digital crime scene with its own witnesses, evidence, and events that can be investigated using the same model as a physical crime scene. The proposed model integrates the physical crime scene investigation with the digital crime scene investigation to identify a person who is responsible for the digital activity. The proposed model applies to both law enforcement and corporate investigations.

Download

PDF

Date

2003 – 11 – 15

Institution

CERIAS

Journal

International Journal of Digital Evidence

Key alpha

carrier

Number

School

Purdue University

Volume

Publication Date

2003-11-15

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Article{ carrier,
	title = "Getting Physical with the Digital Investigation Process",
	author = "Brian Carrier and Eugene H. Spafford",
	year = "2003",
	month = "11",
	institution = "CERIAS",
	journal = "International Journal of Digital Evidence",
	number = "2",
	school = "Purdue University",
	volume = "2",
	day = "15",
	abstract = "In this paper, a process model for digital investigations is defined
using the theories and techniques from the physical investigation
world.  While digital investigations have recently become more common,
physical investigations have existed for thousands of years and the
experience from them can be applied to the digital world.  This paper
introduces the notion of a digital crime scene with its own witnesses,
evidence, and events that can be investigated using the same
model as a physical crime scene.  The proposed model integrates
the physical crime scene investigation with the digital crime scene
investigation to identify a person who is responsible for the digital
activity.   The proposed model applies to both law enforcement and
corporate investigations. ",
}