Digital Cosmo - Forensics : the Final Frontier ? Richard
نویسندگان
چکیده
In this paper we study the likelihood that digital forensic evidential traces could be corrupted or otherwise compromised by extra-terrestrial physical processes and their epiphenomena. Specifically, we consider cosmic rays with solar, galactic and extragalactic origins. The potential of such cosmic rays or radiation to alter the individual bits of current memory devices (hard disc ferromagnetic grains, conventional CMOS RAM and SSD Flash memory) is investigated using scaling and statistical techniques. Our memory model for this study permits the incorporation of error correcting codes (ECC) such as Hamming single error correction, double error detection (SEC-DED) logic. The available data enables a quantitative determination of a strong upper bound on the frequency (or probability) of such potentially evidence compromising, naturally occurring events to be made. The relevance of our findings for proactively blocking a number of potentially mountable legal defence stratagems is discussed in the context of both in vivo and post mortem digital forensics.
منابع مشابه
Analyzing registry, log files, and prefetch files in finding digital evidence in graphic design applications
The products of graphic design applications leave behind traces of digital information which can be used during a digital forensic investigation in cases where counterfeit documents have been created. This paper analyzes the digital forensics involved in the creation of counterfeit documents. This is achieved by first recognizing the digital forensic artifacts left behind from the use of graphi...
متن کاملMemory forensics: The path forward
Traditionally, digital forensics focused on artifacts located on the storage devices of computer systems, mobile phones, digital cameras, and other electronic devices. In the past decade, however, researchers have created a number of powerful memory forensics tools that expand the scope of digital forensics to include the examination of volatile memory as well. While memory forensic techniques ...
متن کاملMassive Threading: Using GPUs to Increase the Performance of Digital Forensics Tools
The current generation of Graphics Processing Units (GPUs) contain a large number of general purpose processors, in sharp contrast to previous generation designs, where special-purpose hardware units (such as texture and vertex shaders) were commonly used. This fact, combined with the prevalence of multicore generalpurpose CPUs in modern workstations, suggests that performance-critical software...
متن کاملMassively Threaded Digital Forensics Tools
Digital forensics comprises the set of techniques to recover, preserve, and examine digital evidence and has applications in a number of important areas, including investigation of child exploitation, identity theft, counter-terrorism, and intellectual property disputes. Digital forensics tools must exhaustively examine and interpret data at a low level, because data of evidentiary value may ha...
متن کاملDigital Forensonomics – the Economics of Digital Forensics
This paper introduces the economics of digital forensics (EDF) and describes the use of template patterns based on Bayesian network architectures for producing cost effective digital forensic investigations, making use of econometric quantities such as return on investment or cost benefit ratio to prioritise the recovery of digital evidential traces. A case study involving an actual distributed...
متن کامل