• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Seventh International Conference on IT Security Incident Management and IT Forensics >Selective Imaging Revisited
【24h】

Selective Imaging Revisited

机译：再谈选择性成像

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

The standard procedure for the acquisition of digital evidence in forensic investigations is to produce a bit-wise 1:1 copy of the original data on a digital storage device. This is often called imaging and becoming a bottleneck in modern digital investigations. The notion of selective imaging was introduced by Turner in 2005 and associated with the decision not to acquire all possible information during the evidence capture process. In this paper, we precisely define the term selective imaging, thereby generalizing the concept to allow acquisition of data objects in any combination and from any level of abstraction. We have implemented this approach as a plug in for the open source Digital Forensics Framework (DFF) using a container format based on the Advanced Forensic Framework 4 (AFF4). We present some design and implementation details as well as a performance evaluation.
机译：在法医调查中获取数字证据的标准程序是在数字存储设备上按比例生成原始数据的1：1副本。这通常被称为成像，并成为现代数字调查中的瓶颈。选择性成像的概念是特纳在2005年提出的，它与在证据捕获过程中不获取所有可能信息的决定有关。在本文中，我们精确定义了“选择性成像”一词，从而概括了该概念，以允许以任何组合和任何抽象级别获取数据对象。我们已使用基于Advanced Forensic Framework 4（AFF4）的容器格式将这种方法作为开源数字取证框架（DFF）的插件实施。我们介绍一些设计和实施细节以及性能评估。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号