Refining evidence containers for provenance and accurate data representation

IFIP Advances in Information and Communication Technology

Volumn 337 AICT, Issue , 2010, Pages 227-242

  Schatz, Bradley ^a   Cohen, Michael ^b  

^a QUEENSLAND UNIVERSITY OF TECHNOLOGY   (Australia)

^b Australian Federal Police   (Australia)

Author keywords

Evidence containers; provenance; representation; tool interoperability

Indexed keywords

ARBITRARY INFORMATION; BIT STREAM; DATA AND INFORMATION; DATA REPRESENTATIONS; DIGITAL EVIDENCE; DISCONTIGUOUS DATUM; EVIDENCE CONTAINERS; GENERAL APPROACH; GENERAL INFORMATION; GENERAL SOLUTIONS; PROVENANCE; REPRESENTATION; REPRESENTATION SCHEMES; STORAGE ARCHITECTURES;

ELECTRONIC CRIME COUNTERMEASURES; INTEROPERABILITY;

CONTAINERS;

EID: 78651072446     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-15506-2_16     Document Type: Conference Paper

References (17)

1. M. Bartel, J. Boyer, B. Fox, B. LaMacchia and E. Simon, XMLSignature Syntax and Processing, World Wide Web Consortium, Cambridge, Massachusetts (www.w3.org/TR/xmldsig-core), 2009.
2. D. Beckett and T. Berners-Lee, Turtle: Terse RDF Tripe Language, World Wide Web Consortium, Cambridge, Massachusetts (www .w3.org/TeamSubmission/ turtle), 2008.
3. T. Berners-Lee, R. Fielding and L. Masinter, Uniform Resource Identifiers (URI): Generic Syntax, RFC 2396 (www.ietf.org/rfc/rfc 2396.txt), 1998.
4. B. Carrier, Defining digital forensic examination and analysis tools using abstraction layers, International Journal of Digital Evidence, vol. 1(4), 2003.
5. J. Carroll, Signing RDF graphs, Proceedings of the Second International Semantic Web Conference, pp. 369-384, 2003.
6. J. Carroll, C. Bizer, P. Hayes and P. Stickler, Named graphs, provenance and trust, Proceedings of the Fourteenth International Conference on the World Wide Web, pp. 613-622, 2005.
7. J. Carroll and P. Stickler, TriX: RDF Triples in XML, Technical Report HPL-2003-268, HP Labs, Palo Alto, California (www.hpl.hp .com/techreports/2004/ HPL-2004-56.pdf), 2004.
8. M. Cohen, PyFlag: An advanced network forensic framework, Digital Investigation, vol. 5(S1), pp. S112-S120, 2008.
9. M. Cohen, S. Garfinkel and B. Schatz, Extending the Advanced Forensic Format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow, Digital Evidence, vol. 6(S1), pp. S57-S68, 2009.
10. S. Garfinkel, Providing cryptographic security and evidentiary chain-of-custody with the Advanced Forensic Format, library and tools, International Journal of Digital Crime and Forensics, vol. 1(1), pp. 1-28, 2009.
11. S. Garfinkel D. Malan, K. Dubec, C. Stevens and C. Pham, Advanced Forensic Format: An open, extensible format for disk imaging, in Advances in Digital Forensics II, M. Olivier and S. Shenoi (Eds.), Springer, Boston, Massachusetts, pp. 13-27, 2006.
12. R. Meijer, The Carve Path Zero Storage Library and Filesystem (ocfa.sourceforge.net/libcarvpath), 2006.
13. R. Moats, URN Syntax, RFC 2141 (www.ietf.org/rfc/rfc2141.txt), 1997.
14. B. Schatz and A. Clark, An information architecture for digital evidence integration, Proceedings of the AusCERT Asia Pacific Information Technology Security Conference, pp. 15-29, 2006.
15. P. Turner, Unification of digital evidence from disparate sources (digital evidence bags), Digital Investigation, vol. 2(3), pp. 223-228, 2005.
16. K. Watkins, M. McWhorte, J. Long and B. Hill, Teleporter: An analytically and forensically sound duplicate transfer system, Digital Investigation, vol. 6(S1), pp. S43-S47, 2009.
17. World Wide Web Consortium, RDF/XML Syntax Specification (Revised), Cambridge, Massachusetts (www.w3.org/TR/REC-rdfsyntax), 2004.