Quantification of digital forensic hypotheses using probability theory

The issue of downloading illegal material from a website onto a personal digital device is considered from the perspective of conventional (Pascalian) probability theory. We present quantitative results for a simple model system by which we analyse and counter the putative defence case that the forensically recovered illegal material was downloaded accidentally by the defendant. The model is applied to two actual prosecutions involving possession of child pornography.published_or_final_versio

A cost-effective digital forensic investigation model

Computers operate at discrete points in time and hence digital traces are discrete events in temporal logic that re°ect the occurrence of computer processes. From the perspective of a digital investigation, it is the duty of digital investigators or forensic examiners to retrieve digital traces so as to prove or to refute the alleged computer acts. Given the resource constraints of most organizations and the limited time-frame available for the examination, it is not always feasible or indeed necessary for forensic examiners to retrieve all the related digital traces and to conduct a thorough digital forensic analysis. It is therefore the aim of this paper to propose a model that can o®er swift and practical digital examination in a cost-effective manner.postprin

Sensitivity analysis of a Bayesian network for reasoning about digital forensic evidence

Bayesian network representing an actual prosecuted case of illegal file sharing over a peer-to-peer network has been subjected to a systematic and rigorous sensitivity analysis. Our results demonstrate that such networks are usefully insensitive both to the occurrence of missing evidential traces and to the choice of conditional evidential probabilities. The importance of this finding for the investigation of digital forensic hypotheses is highlighted. © 2010 IEEE.published_or_final_versio

Cyber Insurance

This volume covers a wide spectrum of issues relating to economic and political development enabled by information and communication technology (ICT)

An approach to quantifying the plausibility of the inadvertent download defence

A table of 95% confidence limits on the probabilities for randomly downloading relatively small numbers of illegal images or sensitive documents amongst a relatively large number of other images or documents has been computed. It is anticipated that these data will assist prosecution officials in arriving at a decision as to whether or not there is a reasonable likelihood of a successful criminal prosecution when the inadvertent download defence is employed in cases of possession of child pornography, terrorist material or espionage related documents. The same data can also be used by defence counsels to assess the strength of the prosecution’s case