Volume 49, Issue 6 (November 2004)

    Defining Event Reconstruction of Digital Crime Scenes

    (Received 20 March 2004; accepted 5 June 2004)

    Published Online: November

    CODEN: JFSOAD

      Format Pages Price  
    PDF Version 8 $25   ADD TO CART


    Abstract

    Event reconstruction plays a critical role in solving physical crimes by explaining why a piece of physical evidence has certain characteristics. With digital crimes, the current focus has been on the recognition and identification of digital evidence using an object's characteristics, but not on the identification of the events that caused the characteristics. This paper examines digital event reconstruction and proposes a process model and procedure that can be used for a digital crime scene. The model has been designed so that it can apply to physical crime scenes, can support the unique aspects of a digital crime scene, and can be implemented in software to automate part of the process. We also examine the differences between physical event reconstruction and digital event reconstruction.


    Author Information:

    Carrier, BD
    Purdue University—CERIAS, West Lafayette, IN

    Spafford, EH
    Purdue University—CERIAS, West Lafayette, IN


    Stock #: JFS2004127

    ISSN: 0022-1198

    DOI: 10.1520/JFS2004127

    ASTM International
    is a member of CrossRef.

    Author
    Title Defining Event Reconstruction of Digital Crime Scenes
    Symposium , 0000-00-00
    Committee E30