Digital Crime Scene Reconstruction

Get BibTex-formatted data

Author

Brian D. Carrier and Eugene H. Spafford

Entry type

inproceedings

Abstract

Event reconstruction plays a critical role in solving physical crimes by explaining why a piece of physical evidence has certain characteristics. With digital crimes, the current focus has been on the recognition and identification of digital evidence using an object's characteristics, but not on the identification of the events that caused the characteristics. This paper examines digital event reconstruction and proposes a process model and procedure that can be used for a digital crime scene. The model has been designed so that it can apply to physical crime scenes, can support the unique aspects of a digital crime scene, and can be implemented in software to automate part of the process. We also examine the differences between physical event reconstruction and digital event reconstruction.

Date

2004 – 02

Booktitle

Proceedings of the American Academy of Forenstic Sciences (AAFS) Annual Meeting

Key alpha

Carrier

Publication Date

2004-02-01

Language

English

Location

A hard-copy of this is in the CERIAS Library

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Inproceedings{ Carrier,
	title = "Digital Crime Scene Reconstruction",
	author = "Brian D. Carrier and Eugene H. Spafford",
	year = "2004",
	month = "02",
	booktitle = "Proceedings of the American Academy of Forenstic Sciences (AAFS) Annual Meeting",
	abstract = "  Event reconstruction plays a critical role in solving physical crimes by explaining why a piece of physical evidence has certain characteristics. With digital crimes, the current focus has been on the recognition and identification of digital evidence using an object's characteristics, but not on the identification of the events that caused the characteristics. This paper examines digital event reconstruction and proposes a process model and procedure that can be used for a digital crime scene. The model has been designed so that it can apply to physical crime scenes, can support the unique aspects of a digital crime scene, and can be implemented in software to automate part of the process. We also examine the differences between physical event reconstruction and digital event reconstruction.",
	language = "English",
}