Digital forensics can be a difficult discipline to teach effectively because of its interdisciplinary nature, closely integrating law and computer science. Prior research in Physics and Computer Science has shown that the traditional lecture approach is inadequate for the task of provoking students’ thought-processes and systematically engaging them in problem-solving during class. Peer instruc...

Database Forensics is an important topic that has received hardly any research attention. This paper starts from the premise that this lack of research is due to the inherent complexity of databases that is not fully understood in a forensic context yet. The paper considers the relevant differences between file systems and databases and then transfers concepts of File System Forensics to Databa...

Contrast enhancement(CE) forensics has always been attracted widely attention on image forensic community. It can provide an effective rule for recovering image history and identifying and locating tampered images. Although, a number of algorithms have been proposed, the robustness of CE forensics technique for common pre/post processings is not satisfactory. To deal with it, in this letter, we...

The field of forensics is multidisciplinary by nature, founded on the disciplines of criminology and information technology. However, most course work leading to a foundation in the field are offered within the Chemistry and Biology disciplines in addition to Computer Science. Regardless of the framework in which the courses are offered, the coursework itself must address social, legal, and eth...

Cloud Forensics refers to digital forensics investigations performed in Cloud Computing Environments. Nowadays digital investigators face various technical, legal, and organizational challenges to keep up with current developments in the field of Cloud Computing. But, due to its dynamic nature, Cloud Computing also offers several opportunities to improve digital investigations in Cloud Environm...

With the increase of computer network crimes and the changes of the forms, the work of the network electronic forensics is becoming more and more important, and it is required that the technology of electronic forensics should be adapted to the development of complex network crimes. In this paper, the traditional electronic evidence collection technology and the electronic evidence collection m...

We present a visual analytic framework for exploring the relationship of textual evidence for computer forensics. Based upon a task analysis study performed with practitioners, our tool addresses the inefficiency of searching for related text documents on a hard drive. Our framework searches both allocated and unallocated sectors for text and performs some pre-analysis processing; this informat...

Electronic evidence becomes more and more popular in case handling. In order to maintain its original effect and be accepted by court, its integrity has to be supervised by judges. This paper studies on how to reduce the burden of judges’ task to determine the integrity of chain of custody, even there is no technique experts on the spot.

Today’s cloud computing architectures often lack support for computer forensic investigations. Besides this, the existing digital forensics tools cannot cope with the dynamic nature of the cloud. This paper explores the challenges of digital forensics in the cloud, possible attacks on cloud-evidence, and mitigation strategies against those challenges. Digital Forensics in the Cloud To identify ...