Journal Published Online: 01 November 2004
Volume 49, Issue 6

Defining Event Reconstruction of Digital Crime Scenes



Event reconstruction plays a critical role in solving physical crimes by explaining why a piece of physical evidence has certain characteristics. With digital crimes, the current focus has been on the recognition and identification of digital evidence using an object's characteristics, but not on the identification of the events that caused the characteristics. This paper examines digital event reconstruction and proposes a process model and procedure that can be used for a digital crime scene. The model has been designed so that it can apply to physical crime scenes, can support the unique aspects of a digital crime scene, and can be implemented in software to automate part of the process. We also examine the differences between physical event reconstruction and digital event reconstruction.

Author Information

Carrier, BD
Purdue University—CERIAS, West Lafayette, IN
Spafford, EH
Purdue University—CERIAS, West Lafayette, IN
Pages: 8
Price: $25.00
Reprints and Permissions
Reprints and copyright permissions can be requested through the
Copyright Clearance Center
Stock #: JFS2004127
ISSN: 0022-1198
DOI: 10.1520/JFS2004127