UPM Institutional Repository

An efficient computer forensics selective imaging model


Halboob, Waleed and Alghathbar, Khaled S. and Mahmod, Ramlan and Udzir, Nur Izura and Abdullah @ Selimun, Mohd Taufik and Deghantanha, Ali (2014) An efficient computer forensics selective imaging model. In: Future Information Technology. Lecture Notes in Electrical Engineering, 276 . Springer, Heidelberg, Germany, pp. 277-284. ISBN 9783642408601; EISBN: 9783642408618


Selective imaging is a new concept in computer forensics. It is used for collecting only the data that is relevant to the crime and helps in improves the scalability of the investigation process. However, the current selective imaging approaches directly image the identified data without considering their offsets on the targeted user storage. This paper investigates the impact of the relevant data offsets on the efficiency of the selective imaging process. A practical selective imaging model is presented which includes a digital evidence ordering algorithm (DEOA) for ordering the selected relevant data items. The proposed selective imaging model has been implemented and evaluated in different types of storage devices. The evaluation result shows that even if our proposed algorithm has a small efficiency negative impact before the imaging process starts; it has a large positive effect on the efficiency of the selective imaging process itself.

Download File

PDF (Abstract)
An efficient computer forensics selective imaging model.pdf

Download (34kB) | Preview

Additional Metadata

Item Type: Book Section
Divisions: Faculty of Computer Science and Information Technology
DOI Number: https://doi.org/10.1007/978-3-642-40861-8_41
Publisher: Springer
Keywords: Computer forensics; Digital evidence; Selective imaging; Efficiency; Ordering algorithm
Depositing User: Nabilah Mustapa
Date Deposited: 17 May 2016 03:11
Last Modified: 17 May 2016 03:11
Altmetrics: http://www.altmetric.com/details.php?domain=psasir.upm.edu.my&doi=10.1007/978-3-642-40861-8_41
URI: http://psasir.upm.edu.my/id/eprint/36400
Statistic Details: View Download Statistic

Actions (login required)

View Item View Item