A brief study of time

DFRWS 2007 Annual Conference

Volumn , Issue , 2007, Pages

  Buchholz, Florian ^a   Tjaden, Brett ^a  

^a JAMES MADISON UNIVERSITY   (United States)

Author keywords

Computer clocks; Computer forensics; Time measurement; Time synchronization; Timestamp correlation

Indexed keywords

CLOCK MODEL; COMPUTER CLOCKS; FORENSIC INVESTIGATION; REFERENCE TIME; TIME SYNCHRONIZATION; TIME-STAMP; WEB SERVERS;

CLOCKS; COMPUTER FORENSICS; INTERNET; TIME MEASUREMENT;

COMPUTER CRIME;

EID: 84868353250     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1016/j.diin.2007.06.004     Document Type: Conference Paper

References (20)

1. Boyd Chris, Foster Pete. Time and date issues in forensic computing - a case study. Digit Investig 2004;1(1):18-23.
2. CBS News. The Alibi: reasonable doubt, 〈http://www.cbsnews.com/ stories/2002/10/10/48hours/main525143.shtml〉; January 2005.
3. DMOZ Top Listed Domains, 〈http://www.domaintools.com/internet- statistics/dmoz-listings.php. [accessed October 2006].
4. Fielding R, Gettys J, Mogul J, Frystyk H, Masinter L, Leach P, et al. Hypertext Transfer Protocol - HTTP/1.1. Technical Report RFC 2616, Internet Society; June 1999. 〈ftp://ftp.isi.edu/in-notes/rfc2616.txt〉.
5. Gladyshev Pavel, Patel Ahmed. Formalising event time bounding in digital investigations. Int J Digit Evid 2005;4(2).
6. Guyton James D, Schwartz Michael F. Experiences with a survey tool for discovering network time protocol servers. In: USENIX Summer; 1994. p. 257-65.
7. Koff Stephen. Task force in blackout outlines grid failure. The Plain Dealer, 〈http://www.cleveland.com/blackout/index.ssf?/blackout/more/ 106335939217%2910.html〉 September 2003.
8. Kohno T, Broido A, Claffy KC. Remote physical device fingerprinting. In: IEEE symposium on security and privacy, Oakland, CA, USA, May 2005.
9. Lamport L, Melliar-Smith PM. Synchronizing clocks in the presence of faults. J ACM 1985;32(1):52-78.
10. McAlpin John P. U.S. energy secretary says weeks needed to analyze blackout data. The Standard Times, 〈http://www.southcoasttoday.com/daily/ 08-03/08-28-03/a19wn082.htm〉 August 2003 [AP Press].
11. Mills D. Network Time Protocol (version 3): specification, implementation and analysis. Technical Report RFC 1305, Network Working Group; March 1992.
12. Minar Nelson. A survey of the NTP network, 〈http://www.media.mit. edu/wnelson/research/ntp-survey99/〉; December 1999.
13. Paxson V. On calibrating measurements of packet transit times. Meas Model Comput Syst 1998;11-21. (Pubitemid 128593218)
14. Schatz Bradley, Mohay George, Clark Andrew. A correlation method for establishing provenance of timestamps in digital evidence. In: Proceedings of the 6th annual digital forensic research workshop, August 2006.
15. Stevens Malcolm W. Unification of relative time frames for digital forensics. Digit Investig 2005;1(3):225-39.
16. Symmetricom: Timing, Test, and Measurement Division. How time finally caught up with the power grid, 〈http://www.symmttm.com/pdf/Gps/wp- PowerGrid.pdf〉.
17. Symmetricom: Timing, Test, and Measurement Division. Stochastic model estimation of network time variance, 〈http://www.symmttm.com/pdf/Network- Timing/wp-Stochastic-Model.pdf〉.
18. United States House of Representatives: Committee on Energy and Commerce. Energy policy act of 2005, 〈http://frwebgate.access.gpo.gov/cgi-bin/ getdoc.cgi?dbname=109-cong-bills&docid=f:h6enr.txt.pdf 2005 [public law 109-58].
19. United States Naval Observatory: Astronomical Applications Department. What is universal time?, 〈http://aa.usno.navy.mil/faq/docs/UT.html, 2003.
20. Weil Michael C. Dynamic time & date stamp analysis. Int J Digit Evid 2002;1(2).