When finding nothing may be evidence of something: Anti-forensics and digital tool marks

Simple item page
dc.contributor.authorHorsman, Graeme
dc.contributor.authorErrickson, David
dc.date.accessioned2019-06-24T14:09:46Z
dc.date.available2019-06-24T14:09:46Z
dc.date.issued2019-06-03
dc.description.abstractThere are an abundance of measures available to the standard digital device users which provide the opportunity to act in an anti-forensic manner and conceal any potential digital evidence denoting a criminal act. Whilst there is a lack of empirical evidence which evaluates the scale of this threat to digital forensic investigations leaving the true extent of engagement with such tools unknown, arguably the field should take proactive steps to examine and record the capabilities of these measures. Whilst forensic science has long accepted the concept of toolmark analysis as part of criminal investigations, ‘digital tool marks’ (DTMs) are a notion rarely acknowledged and considered in digital investigations. DTMs are the traces left behind by a tool or process on a suspect system which can help to determine what malicious behaviour has occurred on a device. This article discusses and champions the need for DTM research in digital forensics highlighting the benefits of doing so.en_UK
dc.identifier.citationHorsman G, Errickson D. When finding nothing may be evidence of something: Anti-forensics and digital tool marks. Science and Justice, Volume 59, Issue 5, September 2019, pp. 565-572en_UK
dc.identifier.issn1355-0306
dc.identifier.urihttps://doi.org/10.1016/j.scijus.2019.06.004
dc.identifier.urihttp://dspace.lib.cranfield.ac.uk/handle/1826/14256
dc.language.isoenen_UK
dc.publisherElsevieren_UK
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International*
dc.rights.urihttp://creativecommons.org/licenses/by-nc-nd/4.0/*
dc.subjectDigital forensicsen_UK
dc.subjectAnti forensicsen_UK
dc.subjectDigital tool marksen_UK
dc.subjectInvestigationen_UK
dc.subjectCrimeen_UK
dc.titleWhen finding nothing may be evidence of something: Anti-forensics and digital tool marksen_UK
dc.typeArticleen_UK

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
anti-forensic_and_digital_tool_marks-2019.pdf
Size:
721.14 KB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Staff publications (CDS)