Digital Computer Forensic: Validation and Verification for Disk Imaging

In digital forensic investigation, there are numerous digital forensics preservation tools are used by practitioners all over the world. It is important to have the right specialized tools in order to ensure all the collected evidence are processed correctly and in a timely manner. Moreover, guidelines of validation and verification (VV) in computer forensic tools provide great opportunities for practitioners to remove necessity for developing individual tests for tools. Since practitioners in Malaysia are not aware of the significant of VV of disk imaging and there is no standard guideline for disk imaging process, thus a guideline model for VV for disk imaging has been created. The survey results provide indication on the process of developing guideline of VV of disk imaging in Malaysia and manage to produce a new conceptual model for VV the disk imaging tools in computer forensic environment. This conceptual model is emphases more on the management element which encompasses three supporting elements:documentation, maintenance of tools and monitoring. The internal layer are consists of technical elements:checklist of mandatory features and optional features and report writing.

Autorentext

P.Siva Shamala received her Master's degree in Computer Science(Information Security) from the Universiti Teknologi Malaysia,Kuala Lumpur in 2009. She is currently working on her PhD at the Universiti Teknikal Malaysia Melaka, Malaysia. Her field of interests includes Digital Computer Forensics and Information Security Risk Management.