Uncertainty in live forensics

IFIP Advances in Information and Communication Technology

Volumn 337 AICT, Issue , 2010, Pages 171-184

  Savoldi, Antonio ^a   Gubian, Paolo ^a   Echizen, Isao ^b  

^a UNIVERSITY OF BRESCIA   (Italy)

^b NATIONAL INSTITUTE OF INFORMATICS   (Japan)

Author keywords

collection tools; Live forensics; measurement of uncertainty

Indexed keywords

ELECTRONIC CRIME COUNTERMEASURES; SILICON COMPOUNDS; UNCERTAINTY ANALYSIS;

COMPUTER MEMORY; LIVE FORENSICS; POST MORTEM ANALYSIS; SYSTEM STATE;

DIGITAL FORENSICS;

EID: 78651065137     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-15506-2_12     Document Type: Conference Paper

References (20)

1. D. Bem, Computer forensic analysis in a virtual environment, International Journal of Digital Evidence, vol. 6(2), 2007.
2. D. Bovet and M. Cesati, Understanding the Linux Kernel, O'Reilly, Sebastopol, California, 2006.
3. E. Casey, Error, uncertainty and loss in digital evidence, International Journal of Digital Evidence, vol. 1(2), 2002.
4. e-fense, Helix3 Enterprise, Washington, DC (www.e-fense.com/hel ix), 2009.
5. G. Garner, Forensic Acquisition Utilities (www.gmgsystemsinc .com/fau), 2009.
6. J. Halpern, Reasoning about Uncertainty, MIT Press, Cambridge, Massachusetts, 2005.
7. HBGary, FastDump Pro, Sacramento, California (www.hbgary.com /products-services/fastdump-pro).
8. J. Kornblum, Using every part of the buffalo in Windows memory analysis, Digital Investigation, vol. 4(1), pp. 24-29, 2007.
9. D. Lindley, Understanding Uncertainty, John Wiley, Hoboken, New Jersey, 2006.
10. C. Malin, E. Casey and J. Aquilina, Malware Forensics: Investigating and Analyzing Malicious Code, Syngress, Burlington, Massachusetts, 2008.
11. Mandiant, Memoryze, Washington, DC (www.mandiant.com/soft ware/memoryze.htm).
12. ManTech, Memory DD, Vienna, Virginia (cybersolutions.mantech .com/products.htm).
13. M. McDougal, Windows Forensic Toolchest (WFT) (www.foolmoon .net/security/wft), 2005.
14. National Institute of Standards and Technology, The NIST Reference on Constants, Units and Uncertainty, Gaithersburg, Maryland, 2006.
15. M. Oliveira, R. Redin, L. Carro, L. da Cunha Lamb and F. Wagner, Software quality metrics and their impact on embedded software, Proceedings of the Fifth International Workshop on Model-Based Methodologies for Pervasive and Embedded Software, pp. 68-77, 2008.
16. P. Rubin, D. MacKenzie and S. Kemp, GNU dd (www.gnu.org/soft ware/coreutils).
17. P. Rubin, D. MacKenzie, S. Kemp, J. Kornblum and A. Medico, dc3dd (dc3dd.sourceforge.net).
18. A. Savoldi and P. Gubian, Blurriness in live forensics: An introduction, Proceedings of the Third International Conference on Information Security and Assurance, pp. 119-126, 2009.
19. A. Savoldi and P. Gubian, Volatile memory collection and analysis for Windows mission-critical computer systems, International Journal of Digital Crime and Forensics, vol. 1(3), pp. 42-61, 2009.
20. M. Suiche, win32dd (win32dd.msuiche.net).