Standardizing Digital Evidence Storage
J. Kornblum
Communications of the ACM

Paper (login required)     Bibtex

Investigators have an increasing need to share digital evidence between different organizations and analysis tools. But today's investigators are hindered by a variety of independently devel- oped and incompatible formats used to store digital evidence. Problems arise when dealing with different disk image formats, and the difficulties are exacerbated when dealing with diverse kinds of evidence, such as nework logs and the contents of mobile devices. Without standards that are both open and technically sound, the risk is that evidence may be lost, cases may be compromised, and innocent people may be improperly convicted or guilty parties let free.

Home     Publications     Presentations     Utilities     Tools     Blog