This paper expands upon the finite state machine approach for the formal analysis of digital evidence. The proposed method may be used to support the feasibility of a given statement by testing it against a relevant system model. To achieve this, a novel method for modeling the system and evidential statements is given. The method is then examined in a case study example.
@article{arxiv.1302.2308,
title = {Analysis of Evidence Using Formal Event Reconstruction},
author = {Joshua I. James and Pavel Gladyshev and Mohd Taufik Abdullah and Yuandong Zhu},
journal= {arXiv preprint arXiv:1302.2308},
year = {2013}
}
Comments
10 pages, 11 figures, Presented at the 1st International Conference on Digital Forensics & Cyber Crime