Title
Reliability validation for file system interpretation
Abstract
This paper examines current best practices for Digital Forensic (DF) tool and method validation in the context of file system interpretation for digital evidence. In order to meet the legal and scientific requirements in criminal procedures file system (FS) reverse engineering (RE) is a necessity. Currently, there is no standard procedure for reliability testing of FS RE. Ideal validation requirements exist, but they are on high-level and practical implementation is missing. In this paper we propose a formal reliability validation procedure for file system reverse engineering, documenting the forensic process, including the tools used, ensuring reliability and reproducibility of the method and the results. The procedure is based on legal and scientific criteria and tested against file system reverse engineering methods. It is applicable to all types of reverse engineering methods in digital forensics.
Year
DOI
Venue
2021
10.1016/j.fsidi.2021.301174
Forensic Science International: Digital Investigation
Keywords
DocType
Volume
Digital Forensics,Validation,Reliability,Reproducibility,File systems,Reverse engineering,Black-box testing
Journal
37
ISSN
Citations 
PageRank 
2666-2817
1
0.38
References 
Authors
16
5
Name
Order
Citations
PageRank
Rune Nordvik151.85
Radina Stoykova212.07
Katrin Franke3558.10
stefan axelsson4105.94
Fergus Toolan551.85