Jillian Brown

Develop realistic, high quality case material for computer forensic investigations

Suitably complex primary data Apply theoretical aspects of research to the

resolution of computer forensics cases 4 weeks “Setting up realistic, high quality forensic

scenarios is a difficult problem” (Brueckner, S 2008)

Time Realistic Reproducibility

◦ “Without reproducibility there can be no objective evaluation of student work” (Garfinkel, 2009)

Sufficient data Students Copyright & Privacy Intellectual Property Duty of care

Time Realistic Reproducibility

◦ “Without reproducibility there can be no objective evaluation of student work” (Garfinkel, 2009)

Sufficient data Students Copyright & Privacy Intellectual Property Duty of care

NTFS file system running Windows XP Pro Research, Planning & Testing Five user accounts Four scenarios Creation of cases Final Year Project

Many problems to consider Need careful consideration, planning and

plenty of time Better investigator Sharing case studies or creating a single

database of case studies

Brueckner, S et al (2008) ‘Automated Computer Forensics Training in a Virtualized Environment’, Digital Investigation, Vol 5, Supp 1, September 2008, pp s105-s111.

Garfinkel, S et al (2009) ‘Bringing Science to Digital Forensics with Standardised Forensic Corpora’, Digital Investigation, Vol 6, Supp 1, September 2009, pp s2-s11.