Selective Imaging and Analysis Concept for Forensic Solutions

1453 Words3 Pages
bulb-icon

Recommended: Issues in computer forensics

The selective imaging and distributed analysis concepts have been introduced in the literature to reduce the digital evidences collection and analysis costs (resources and time). Using the selective imaging concept, the investigator first has to select the relevant data items and then the selected data items are imaged according to their selection order not according to their offsets (physical position or address on the storage). The output of the selective imaging process is a partial forensics image. In the paper, we proposed an efficient selective imaging process that first ordered the selected data items based on their offsets. Based on the selected data size and available time, the selected data are imaged into one or more partial forensic image in such a way that the produced images can be analyzed by different investigators and using several machines. An experiment study has been used to evaluate the performance of the selected imaging process which shows that even if the ordering the selected digital evidences has a small performance negative impact but it has a positive effect on the performance of the selective imaging process itself. A qualitative study has been also used to evaluate the system and management scalability of the distributed analysis. Keywords: Computer forensics; Selective imaging; Digital evidences; Distributed analysis and Scalability. 1. Introduction Existing computer forensics solutions collect digital evidences by making a bit-by-bit image from the whole suspect’s data storage and later on, at the Computer Forensics Lab (CFL), the collected image is analyzed. This procedure has been already proven to be unacceptable solution due to the increase in user data and storage size which will increase the ... ... middle of paper ... ...s been scanned and analyzed, the investigator searches for relevant evidence and saves the search results in a report. For this purpose, several computer forensics tools - such as Winhex (X-Ways), FTK Access Data, and CnWRecovery – have been tested and used. These tools enable the investigator to search for and select the relevant data items using different methods can be categorized as manual and semi-automatic selection methods. In addition, the investigator can report the search result in a standard file format files mostly in a Common Separated Values (csv) file format report. However, the output of this step is several .csv files for different search tries in which, each .csv file contains several hits for one search result. In anyway, these .csv reports contain metadata (file name, path, size, offset, etc.) of all found data (existing and deleted artifacts).

Show More
Related

  • Evidence Analysis: Homicide Scene Analysis

    1197 Words  | 3 Pages

    Evidence analysis and ranging is the most crucial stage of investigation. The success of the case exposure lies in the gradual evidence research and collecting prior to the laboratory analysis. The CSI systematically makes his way through the crime scene collects all potential evidence, tagging, logging and packaging so it remains intact on its way to the lab. Depending on the task breakdown of the CSI unit he may or may not analyze the evidence in the lab.

    Read More

  • Forensic Community Essay

    560 Words  | 2 Pages

    It is the computer forensics job to look through all of the computer files, even the deleted ones, to see if there are any incriminating files that would prove them guilty. Even reporting them to the jury is one of the jobs that a computer forensic person might have. Not only does this community work closely with eh police force, they can also work within the FBI or a company that uses computers in their business like Apple. Th...

    Read More

  • Physical And Environmental Security Impact On Forensics Investigations

    1934 Words  | 4 Pages

    Forensics investigations that require the analyzation and processing of digital evidence can be influenced both positively and negatively by a number of outside sources. In this paper, we will explore how physical security plays a role in forensics investigations activities. We will start by examining how physical and environmental security might impact the forensics investigation process. Next, we will discuss the role that physical and logical security zones play in supporting effective forensics activities. We will illustrate how centralized and decentralized physical and environmental security affects the forensics professional’s approach toward the investigation. Lastly, we will evaluate some potential areas of risk related to the physical security of our case study organization, Widget Factory, identified in Attachment 1.

    Read More

  • Using Forensic Science to Identify Criminals

    1906 Words  | 4 Pages

    Rape, murder, theft, and other crimes almost always leave a devastating mark on the victim. More often than not, it would be impossible to identify the perpetrator a crime without forensic science and the technology it uses. Forensic science allows investigators to unmask the secrets of the crime scene. Evidence gathered at the crime scene helps to identify the guilty party, murder weapon, and even the identity of the victim (Harkawy, 1991: 276). The new technologies enables the forensic experts to have better and faster access to accumulated information, to be more accurate in the identification of victims or delinquents, and minimizes the possibility of wrongful accusations. New technology has improved the methods and techniques that forensic scientists and law enforcement investigators use, in order to provide a safer environment for other people. Information technology is one of the most important aspects in forensic science. It is very important for the forensic experts to receive the undisturbed evidence, such as fingerprints left at the crime scene, as quickly as possible, for more accurate readings. Thus using space technology, such as satellite communication, enables the forensic experts to "gather and digitize evidence at the crime scene, enter it into an on-site computer, and beam the data to a crime lab for swift analysis" (Paula, 1998: 12). Therefore, due to the use of this technology, forensic experts in laboratories can examine the evidence in short time, and the possibility of damage or unlawful manipulation of the evidence before the trial is minimal (Paula, 1998: 12). More often than not, "criminals" wear gloves at the time of the crime, thus to obtain a fingerprint...

    Read More

  • Serial Killers and Criminal Justice

    929 Words  | 2 Pages

    “Advance in Forensics Provide Creative Tools for Solving Crimes.” www.ctcase.org. Np. n.d. Web. 17 March 2014.

    Read More

  • Forensics in the Criminal Justice System

    334 Words  | 1 Pages

    The criminal justice system has changed a lot since the good old days of the Wild West when pretty much anything was legal. Criminals were dealt with in any fashion the law enforcement saw fit. The science of catching criminals has evolved since these days. We are better at catching criminals than ever and we owe this advancement to forensic science. The development of forensic science has given us the important techniques of fingerprinting and DNA analysis. We can use these techniques to catch criminals, prove people's innocence, and keep track of inmates after they have been paroled. There are many different ways of solving crimes using forensic evidence. One of these ways is using blood spatter analysis; this is where the distribution and pattern of bloodstains is studied to find the nature of the event that caused the blood spatter. Many things go into the determination of the cause including: the effects of various types of physical forces on blood, the interaction between blood and the surfaces on which it falls, the location of the person shedding the blood, the location and actions of the assailant, and the movement of them both during the incident. Another common type of forensic evidence is trace evidence. This is commonly recovered from any number of items at a crime scene. These items can include carpet fibers, clothing fibers, or hair found in or around the crime scene. Hairs recovered from crime scenes can be used as an important source of DNA. Examination of material recovered from a victim's or suspect's clothing can allow association to be made between the victim and other people, places, or things involved in the investigation. DNA analysis is the most important part of forensic science. DNA evidence can come in many forms at the crime scene. Some of these forms include hair; bodily fluids recovered at the crime scene or on the victim's body, skin under the victim's fingernails, blood, and many others. This DNA can be the basis of someone's guilt or innocence; it has decided many cases in the twentieth century. As the times continue to change and the criminals get smarter we will always need to find new ways to catch them. Forensic science is the most advanced method yet, but is only the beginning. As the field of science grows so will the abilities of the

    Read More

  • The Importance Of Crime Scene Investigations

    1033 Words  | 3 Pages

    During an investigation there are number of important roles, methods, and a few other things

    Read More

  • The Importance of Collection, Custody and Preservation of Forensic Evidence

    1566 Words  | 4 Pages

    Collection of evidence is usually a term designated to refer to the collection of physical evidence, government agencies such as police or environmental protection departments will have their own methods for the collection, storage and conservation of physical evidence and it is the responsibility of forensic personnel to adhere to these set guidelines. General principles which are shared amongst various agencies include, the creation of contemporaneous notes, recording the collection of evidence via photographing, videotaping and/or audiotapes, preserving the crime scene by sealing off the location and only allowing designated personnel to enter, avoiding contamination of the crime scene by investigators through the use of full body covering and also preventing cross-contamination with the scene and any suspects.

    Read More

  • Collecting the Evidence From a Crime Scene

    1095 Words  | 3 Pages

    Collecting evidence from a crime scene is a crucial aspect of solving crimes. Before evidence can be seized, there must first be a court order approving the search of the crime scene and the seizure of the evidence found at the scene. Standard protocol for officers is for them to always use latex gloves, avoid plastic bags, double wrap small objects, package each object separately, and to collect as much evidence as possible. It is better to have too much evidence than to not have enough. There are countless amounts of evidence that can be found at a crime scene.

    Read More

  • Computer Forensic Tools

    895 Words  | 2 Pages

    The use of computers in homes, schools, offices, and other places has increased in the past few years due to technological developments. As computers have become important components of modern communication, their increased use has also led to the emergence of computer crimes. Computer crimes basically involve the use of a computer system to carry out an illegal activity. In attempts to lessen the frequency and impact of computer crimes, law enforcement agencies use computer forensic to investigate these offenses. Actually, computer crimes are governed by specific laws and dealt with through conducting a computer forensic investigation (Easttom & Taylor, 2011, p.337). Notably, a computer forensic investigation is usually carried out through the use of computer forensic tools, which help in collection of evidence based on the specific offense.

    Read More

  • Data Acquisition

    1744 Words  | 4 Pages

    The data a computer forensics acquisition tool collects is stored as an image file in one of three formats. Two formats are open source and the third is proprietary. Each vendor has unique features, so several different proprietary formats are available. Depending on the ...

    Read More

  • Forensic Science: Stopping the Crime

    1600 Words  | 4 Pages

    Forensic Science, recognized as Forensics, is the solicitation of science to law to understand evidences for crime investigation. Forensic scientists are investigators that collect evidences at the crime scene and analyse it uses technology to reveal scientific evidence in a range of fields. Physical evidence are included things that can be seen, whether with the naked eye or through the use of magnification or other analytical tools. Some of this evidence is categorized as impression evidence2.In this report I’ll determine the areas of forensic science that are relevant to particular investigation and setting out in what method the forensic science procedures I have recognized that would be useful for the particular crime scene.

    Read More

  • Scientific Method Essay

    916 Words  | 2 Pages

    probable explanation for the crime event in which they are investigating. For experts they use the

    Read More

  • The 18 Year-Old Cold Case Of Krystal Lynn Beslanowitch

    1334 Words  | 3 Pages

    Forensic science has paved the way to a new world of technological advancements in solving crime, through DNA analysis, new technology such as M-Vac, improving systems such as CODIS and other investigative methods. As forensic science technology advances, the chance of an individual being able to commit a crime and walk away free without leaving any trace of evidence will lessen. While forensic science has its limitations, it can be the only way to provide an accurate account of what actually occurred at some crime scenes.

    Read More

  • Essay On Forensic Investigation

    1363 Words  | 3 Pages

    Forensic investigations require skills of specially trained scientists, police, engineers, doctors and others. “These investigators observe all types of evidence, from weapons to bloodstains and from computers to bugs” (Erzinclioglu 5). The greater the evidence against a person, the greater the chance of conviction.

    Read More

More about Selective Imaging and Analysis Concept for Forensic Solutions

Open Document