| EPSRC Reference: |
EP/J004189/1 |
| Title: |
Quantifying Digital Forensic Investigations and their Evidence |
| Principal Investigator: |
Overill, Dr RE |
| Other Investigators: |
|
| Researcher Co-Investigators: |
|
| Project Partners: |
|
| Department: |
Computer Science |
| Organisation: |
Kings College London |
| Scheme: |
Overseas Travel Grants (OTGS) |
| Starts: |
01 February 2012 |
Ends: |
30 April 2012 |
Value (£): |
14,222
|
| EPSRC Research Topic Classifications: |
| Modelling & simul. of IT sys. |
Statistics & Appl. Probability |
|
| EPSRC Industrial Sector Classifications: |
| No relevance to Underpinning Sectors |
|
|
| Related Grants: |
|
| Panel History: |
|
|
Summary on Grant Application Form |
With the growth of the world-wide web (WWW), there has been a corresponding growth in crimes that use the WWW. Specialist law enforcement investigators are ever more frequently required to examine PCs, laptops, mobile phones, sat-navs, and personal digital assistants (PDAs) for look for incriminating (or exonerating) evidence. This has led to a situation where there is a severe shortage of digital forensic examiners with long backlogs of work, leading to even longer delays within the judicial process.
At the same time, lawyers are becoming ever more savvy in finding ingenious alternative explanations for the recovered digital evidence which, if accepted by the court, would allow their client to be acquitted.
This research project aims to address both these issues.
The former issue will be tackled by devising one or more digital forensic triage schemes in which a digital forensic technician filters or screens each digital device for the expected traces of evidence and the 'probative value' or weight of the recovered evidence is accumulated. Only if this accumulated weight of evidence meets one or more prescribed criteria is the device passed on to an experienced forensic investigator for a full digital examination.
The latter issue is to be addressed by using the notions of likelihoods and odds to determine how plausible it is that the recovered digital evidence was in fact formed by the process that the prosecution suspects, rather than by some alternative process that the defence might suggest. If the prosecuting authority performs such an analysis it will aid their decision as to whether to go to trial, and if the expert witnesses are armed with this data it will enable them to be more authoritative than previously regarding the strength of the available digital evidence.
|
|
Key Findings |
|
This information can now be found on Gateway to Research (GtR) http://gtr.rcuk.ac.uk
|
|
Potential use in non-academic contexts |
|
This information can now be found on Gateway to Research (GtR) http://gtr.rcuk.ac.uk
|
|
Impacts |
|
| Description |
This information can now be found on Gateway to Research (GtR) http://gtr.rcuk.ac.uk |
| Summary |
|
| Date Materialised |
|
|
|
|
Sectors submitted by the Researcher |
|
This information can now be found on Gateway to Research (GtR) http://gtr.rcuk.ac.uk
|
| Project URL: |
|
| Further Information: |
|
| Organisation Website: |
|