Paper Info
Title
Measure of Integrity Leakage in Live Forensic Context
Abstract
When a live digital forensic investigation is performed, a measure of integrity leakage related to the collection phase should be mandatory, by stating clearly the grade of blurredness of the acquired data object, such as the RAM memory. Current software approaches, which are often used for data acquisition, have not been able to quantify the dependency of the integrity leakage of factors observed from the host machine, which include the CPU usage, the size of the memory RAM and page file, and the execution priority of the acquisition tool. This paper analyzes the factors which affect preponderantly the integrity of the memory being collected from a live computer system. By applying fuzzy measures, we establish an integrity leakage function.
Year
DOI
Venue
2008
10.1109/IIH-MSP.2008.259
IIH-MSP
Keywords
Field
DocType
acquisition tool,integrity leakage,live digital forensic investigation,random-access storage,live computer system,data acquisition,live forensic context,acquired data,ram memory,cpu usage,memory ram,integrity leakage function,usedfor data acquisition,security of data,operating systems,engineering,technology,imaging,memory,telecommunications,digital forensics,hardware,kernel,computer science
Central processing unit,Digital forensics,Leakage (electronics),CPU time,Computer science,Data acquisition,Data integrity,Software,Paging,Embedded system
Conference
ISBN
Citations 
PageRank 
978-0-7695-3278-3
1
0.41
References 
Authors
6
4
Name
Order
Citations
PageRank
Lei Pan17122.18
Antonio Savoldi27615.04
Paolo Gubian39016.13
Lynn M. Batten4122.66