Abstract
The goal of live digital forensics is to collect crucial evidence that cannot be acquired under the well-known paradigm of post-mortem analysis. Volatile information in computer memory is ephemeral by definition and can be altered as a consequence of the live forensic approach. Every running tool on an investigated system leaves artifacts and changes the system state. This paper focuses on the understanding and measurement of the uncertainty related to the important and emerging paradigm of live forensic investigations. It also presents some practical examples related to the evaluation of uncertainty. © 2010 International Federation for Information Processing.
Author supplied keywords
Cite
CITATION STYLE
Savoldi, A., Gubian, P., & Echizen, I. (2010). Uncertainty in live forensics. In IFIP Advances in Information and Communication Technology (Vol. 337 AICT, pp. 171–184). Springer New York LLC. https://doi.org/10.1007/978-3-642-15506-2_12
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
