Lessons Learned Writing Computer Forensics Tools and Managing a 30TB Digital Evidence Corpus

Loading...
Thumbnail Image
Authors
Garfinkel, Simson
Subjects
Digital forensics
Lessons learned
Digital corpora
Advisors
Date of Issue
2012-08
Date
Publisher
Language
Abstract
Writing digital forensics (DF) tools is difficult because of the diversity of data types that needs to be processed, the need for high performance, the skill set of most users, and the requirement that the software run without crashing. Developing this software is dramatically easier when one possesses a few hundred disks of other people's data for testing purposes. This paper presents some of the lessons learned by the author over the past 14 years developing DF tools and maintaining several research corpora that currently total roughly 30TB.
Type
Paper
Description
DFRWS 2012, Aug. 6-8, 2012, Washington, DC.
The article of record as published may be found at http://dx.doi.org/10.1016/j.diin.2012.05.002
Refereed Conference Paper
Series/Report No
Department
Organization
Identifiers
NPS Report Number
Sponsors
Funder
Format
Citation
Garfinkel, S., "Lessons Learned Writing Computer Forensics Tools and Managing a Large Digital Evidence Corpus", DFRWS 2012, Aug. 6-8, 2012, Washington, DC.
Distribution Statement
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.
Collections