Analysis of Evidence Using Formal Event Reconstruction
arXiv:1302.2308 · doi:10.1007/978-3-642-11534-9_9
Abstract
This paper expands upon the finite state machine approach for the formal analysis of digital evidence. The proposed method may be used to support the feasibility of a given statement by testing it against a relevant system model. To achieve this, a novel method for modeling the system and evidential statements is given. The method is then examined in a case study example.
10 pages, 11 figures, Presented at the 1st International Conference on Digital Forensics & Cyber Crime