Bringing science to digital forensics with standardized forensic corpora

Digital Investigation

Volumn 6, Issue SUPPL., 2009, Pages

  Garfinkel, Simson ^a,b   Farrell, Paul ^a   Roussev, Vassil ^c   Dinolt, George ^a  

^a Naval Postgraduate School   (United States)

^b HARVARD UNIVERSITY   (United States)

^c UNIVERSITY OF NEW ORLEANS   (United States)

Author keywords

Corpora; Forensics; Human subjects research; Real data corpus; Realistic data

Indexed keywords

COMPUTER FORENSICS; DIGITAL FORENSICS;

CORPORA; FORENSICS; HUMAN SUBJECTS; REAL DATA CORPUS; REALISTIC DATA;

FORENSIC SCIENCE;

EID: 68649110054     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2009.06.016     Document Type: Article

References (26)

1. Calhoun William C, Coles Drue. Predicting the types of file fragments. In: Digital Investigation: The Proceedings of the eighth annual DFRWS conference, vol. 5; 2008.
2. Carrier B. Digital forensics tool testing images (2007). http://dftt. sourceforge.net/
3. Committee on Identifying the Needs of the Forensic Science Community. Strengthening forensic science in the united states: a path forward, February 2009.
4. Computer forensic tool testing program. Forensic string searching tool requirements specification (January 24 2008). http://www.cftt.nist.gov/ss-req-sc-draft-v1_0.pdf
5. Cunningham Robert, Lippmann Richard P, Fried David J, Garfinkel Simson L, Graf Isaac, Kendall Kris R, Webster Seth E, Wyschogrod Dan, Zissman Marc A. Evaluating intrusion detection systems without attacking your friends: the 1998 DARPA intrusion detection evaluation. In: Third conference and workshop on intrusion detection and response; 1999.
6. MIT Lincoln Laboratory. DARPA intrusion detection data sets (2000). http://www.ll.mit.edu/mission/communications/ist/corpora/ideval/data/
7. Deolalikar V., and Latte H. Provenance as data mining: combining file system metadata with content analysis (February 12 2009), Usenix. http://www.usenix.org/events/tapp09/tech/full_papers/deolalikar/deolalikar.pdf
8. DMCI. Dublin core metadata initiative (March 2009). http://www. dublincore. org
9. Farrell Paul. A framework for automated digital forensic reporting. Master's thesis, Naval Postgraduate School; 2009.
10. Federal rules of evidence, article X, rule 1003: admissibility of duplicates (2008). http://www.law.cornell.edu/rules/fre/rules.htm
11. Garfinkel S.L. IRBs and security research: myths, facts and mission creep. Usability, psychology and security 2008 (co-located with the 5th USENIX symposium on Networked Systems Design and Implementation (NSDI '08)) (April 2008). http://www.simson.net/clips/academic/2008.UPS2008. pdf
12. Garfinkel S.L. Automating disk forensic processing with sleuthkit, xml and python. Proceedings of the fourth international IEEE workshop on systematic approaches to digital forensic engineering (2009), IEEE
13. Garfinkel S.L. Providing cryptographic security and evidentiary chain-of-custody with the advanced forensic format, library, and tools. The International Journal of Digital Crime and Forensics 1 (2009)
14. Garfinkel S., and Shelat A. Remembrance of data passed. IEEE Security and Privacy (January 2002)
15. Honeynet. Scan of the month (2009). http://old.honeynet.org/scans/
16. Klimt B., and Yang Y. Introducing the enron corpus. Conference on Email and Anti-Spam (CEAS) (2004), CEAS. http://www.ceas.cc/papers-2004/168.pdf
17. Kornblum J. Boomer-win2 k (2007). http://dftt.sourceforge.net/test13/
18. Lyle J. The cfreds project (2008). http://www.cfreds.nist.gov/
19. Lyle J. Unicode string searching-Russian text (2008). http://www.cfreds.nist.gov/utf-16-russ.html
20. Mawi working group traffic archive (2009). http://tracer.csl.sony.co. jp/mawi/
21. McDaniel Mason. Automatic file type detection algorithm. Master's thesis, James Madison University; 2001.
22. Moody Sarah J, Erbacher Robert F. SÁdi statistical analysis for data type identification. In: Third international workshop on systematic approaches to digital forensic engineering; 2008. pp. 41-54.
23. National Center for Biotechnology Information. Genbank overview (April 2 2008). http://www.ncbi.nlm.nih.gov/Genbank/
24. Patzakis J. The best evidence rule. EnCase Legal Journal (2001) 31-38
25. Ryan Julie JCH, Ryan Daniel J. Institutional and professional liability in information assurance education. working paper; http://www.danjryan.com/papers.htm; 2009.
26. The National Science Digital Library. Metadata guidelines (2009). http://nsdl.org/collection/type.php