An efficient computer forensics selective imaging model
Selective imaging is a new concept in computer forensics. It is used for collecting only the data that is relevant to the crime and helps in improves the scalability of the investigation process. However, the current selective imaging approaches directly image the identified data without considering...
| Main Authors: | , , , , , |
|---|---|
| Other Authors: | |
| Format: | Book Section |
| Language: | English |
| Published: |
Springer
2014
|
| Online Access: | http://psasir.upm.edu.my/id/eprint/36400/1/An%20efficient%20computer%20forensics%20selective%20imaging%20model.pdf |
| _version_ | 1796972904570683392 |
|---|---|
| author | Halboob, Waleed Alghathbar, Khaled S. Mahmod, Ramlan Udzir, Nur Izura Abdullah @ Selimun, Mohd Taufik Deghantanha, Ali |
| author2 | Park, James J. (Jong Hyuk) |
| author_facet | Park, James J. (Jong Hyuk) Halboob, Waleed Alghathbar, Khaled S. Mahmod, Ramlan Udzir, Nur Izura Abdullah @ Selimun, Mohd Taufik Deghantanha, Ali |
| author_sort | Halboob, Waleed |
| collection | UPM |
| description | Selective imaging is a new concept in computer forensics. It is used for collecting only the data that is relevant to the crime and helps in improves the scalability of the investigation process. However, the current selective imaging approaches directly image the identified data without considering their offsets on the targeted user storage. This paper investigates the impact of the relevant data offsets on the efficiency of the selective imaging process. A practical selective imaging model is presented which includes a digital evidence ordering algorithm (DEOA) for ordering the selected relevant data items. The proposed selective imaging model has been implemented and evaluated in different types of storage devices. The evaluation result shows that even if our proposed algorithm has a small efficiency negative impact before the imaging process starts; it has a large positive effect on the efficiency of the selective imaging process itself. |
| first_indexed | 2024-03-06T08:35:12Z |
| format | Book Section |
| id | upm.eprints-36400 |
| institution | Universiti Putra Malaysia |
| language | English |
| last_indexed | 2024-03-06T08:35:12Z |
| publishDate | 2014 |
| publisher | Springer |
| record_format | dspace |
| spelling | upm.eprints-364002016-05-17T03:11:37Z http://psasir.upm.edu.my/id/eprint/36400/ An efficient computer forensics selective imaging model Halboob, Waleed Alghathbar, Khaled S. Mahmod, Ramlan Udzir, Nur Izura Abdullah @ Selimun, Mohd Taufik Deghantanha, Ali Selective imaging is a new concept in computer forensics. It is used for collecting only the data that is relevant to the crime and helps in improves the scalability of the investigation process. However, the current selective imaging approaches directly image the identified data without considering their offsets on the targeted user storage. This paper investigates the impact of the relevant data offsets on the efficiency of the selective imaging process. A practical selective imaging model is presented which includes a digital evidence ordering algorithm (DEOA) for ordering the selected relevant data items. The proposed selective imaging model has been implemented and evaluated in different types of storage devices. The evaluation result shows that even if our proposed algorithm has a small efficiency negative impact before the imaging process starts; it has a large positive effect on the efficiency of the selective imaging process itself. Springer Park, James J. (Jong Hyuk) Stojmenovic, Ivan Choi, Min Xhafa, Fatos 2014 Book Section PeerReviewed application/pdf en http://psasir.upm.edu.my/id/eprint/36400/1/An%20efficient%20computer%20forensics%20selective%20imaging%20model.pdf Halboob, Waleed and Alghathbar, Khaled S. and Mahmod, Ramlan and Udzir, Nur Izura and Abdullah @ Selimun, Mohd Taufik and Deghantanha, Ali (2014) An efficient computer forensics selective imaging model. In: Future Information Technology. Lecture Notes in Electrical Engineering, 276 . Springer, Heidelberg, Germany, pp. 277-284. ISBN 9783642408601; EISBN: 9783642408618 http://link.springer.com/chapter/10.1007%2F978-3-642-40861-8_41 10.1007/978-3-642-40861-8_41 |
| spellingShingle | Halboob, Waleed Alghathbar, Khaled S. Mahmod, Ramlan Udzir, Nur Izura Abdullah @ Selimun, Mohd Taufik Deghantanha, Ali An efficient computer forensics selective imaging model |
| title | An efficient computer forensics selective imaging model |
| title_full | An efficient computer forensics selective imaging model |
| title_fullStr | An efficient computer forensics selective imaging model |
| title_full_unstemmed | An efficient computer forensics selective imaging model |
| title_short | An efficient computer forensics selective imaging model |
| title_sort | efficient computer forensics selective imaging model |
| url | http://psasir.upm.edu.my/id/eprint/36400/1/An%20efficient%20computer%20forensics%20selective%20imaging%20model.pdf |
| work_keys_str_mv | AT halboobwaleed anefficientcomputerforensicsselectiveimagingmodel AT alghathbarkhaleds anefficientcomputerforensicsselectiveimagingmodel AT mahmodramlan anefficientcomputerforensicsselectiveimagingmodel AT udzirnurizura anefficientcomputerforensicsselectiveimagingmodel AT abdullahselimunmohdtaufik anefficientcomputerforensicsselectiveimagingmodel AT deghantanhaali anefficientcomputerforensicsselectiveimagingmodel AT halboobwaleed efficientcomputerforensicsselectiveimagingmodel AT alghathbarkhaleds efficientcomputerforensicsselectiveimagingmodel AT mahmodramlan efficientcomputerforensicsselectiveimagingmodel AT udzirnurizura efficientcomputerforensicsselectiveimagingmodel AT abdullahselimunmohdtaufik efficientcomputerforensicsselectiveimagingmodel AT deghantanhaali efficientcomputerforensicsselectiveimagingmodel |