Computer Forensic Functions Testing: Media Preparation, Write Protection and Verification

Yinghua Guo, Jill Slay
2010 Journal of Digital Forensics, Security and Law  
The growth in the computer forensic field has created a demand for new software (or increased functionality to existing software) and a means to verify that this software is truly forensic i.e. capable of meeting the requirements of the trier of fact. In this work, we review our previous work---a function oriented testing framework for validation and verification of computer forensic tools. This framework consists of three parts: function mapping, requirements specification and reference set
more » ... elopment. Through function mapping, we give a scientific and systemized description of the fundamentals of computer forensic discipline, i.e. what functions are needed in the computer forensic investigation process. We focus this paper on the functions of media preparation, write protection and verification. Specifically, we complete the function mapping of these functions and specify their requirements. Based on this work, future work can be conducted to develop corresponding reference sets to test any tools that possess these functions.
doi:10.15394/jdfsl.2010.1072 fatcat:py4a6fnyi5a65pge7nz3idavum