Hypothesis-based investigation of digital timestamps

IFIP International Federation for Information Processing

Volumn 285, Issue , 2008, Pages 75-86

  Willassen, Svein ^a  

^a InsideOut AS   (Norway)

Author keywords

Causality; Clock hypothesis testing; Digital investigations; Timestamps

Indexed keywords

CAUSALITY; CONSISTENCY TESTS; DIGITAL INVESTIGATION; EXTERNAL SOURCES; HYPOTHESIS TESTING; TIME STAMPS;

DIGITAL STORAGE;

CLOCKS;

EID: 51149114414     PISSN: 15715736     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-0-387-84927-0_7     Document Type: Article

References (7)

1. C. Boyd and P. Forster, Time and date issues in forensic computing - A case study, Digital Investigation, vol. 1(1), pp. 18-23, 2004.
2. B. Carrier, A hypothesis-based approach to digital forensic investigations, Technical Report 2006-06, Center for Education and Research in Information Assurance and Security, Purdue University, West Lafayette, Indiana, 2006.
3. C. Fidge, Logical time in distributed computing systems, IEEE Computer, vol. 24(8), pp. 28-33, 1991.
4. P. Gladyshev and A. Patel, Formalizing event time bounding in digital investigations, International Journal of Digital Evidence, vol. 4(2), 2005.
5. L. Lamport, Time, clocks and the ordering of events in a distributed system, Communications of the ACM, vol. 21(7), pp. 558-565, 1978.
6. B. Schatz, G. Mohay and A. Clark, A correlation method for establishing the provenance of timestamps in digital evidence, Digital Investigation, vol. 3(S1), 98-107, 2006.
7. M. Weil, Dynamic time and date stamp analysis, International Journal of Digital Evidence, vol. 1(2), 2002.