Enabling the remote acquisition of digital forensic evidence through secure data transmission and verification

Files in This Item:
File Description SizeFormat 
Scanlon_ucd_5090N_10187.pdf2.92 MBAdobe PDFDownload
Title: Enabling the remote acquisition of digital forensic evidence through secure data transmission and verification
Authors: Scanlon, Mark
Advisor: Kechadi, Tahar
Permanent link: http://hdl.handle.net/10197/9276
Date: 2009
Abstract: Providing the ability to any law enforcement officer to remotely transfer an image from any suspect computer directly to a forensic laboratory for analysis, can only help to greatly reduce the time wasted by forensic investigators in conducting on-site collection of computer equipment. RAFT (Remote Acquisition Forensic Tool) is a system designed to facilitate forensic investigators by remotely gathering digital evidence. This is achieved through the implementation of a secure, verifiable client/server imaging architecture. The RAFT system is designed to be relatively easy to use, requiring minimal technical knowledge on behalf of the user. One of the key focuses of RAFT is to ensure that the evidence it gathers remotely is court admissible. This is achieved by ensuring that the image taken using RAFT is verified to be identical to the original evidence on a suspect computer.
Type of material: Master Thesis
Publisher: University College Dublin. School of Computer Science  
Qualification Name: M.Sc.
Copyright (published version): 2009 the author
Keywords: Cybercrime InvestigationDigital ForensicsEvidence AcquisitionRemote Forensics
Other versions: http://dissertations.umi.com/ucd:10187
Language: en
Status of Item: Peer reviewed
Appears in Collections:Computer Science Theses

Show full item record

Google ScholarTM


This item is available under the Attribution-NonCommercial-NoDerivs 3.0 Ireland. No item may be reproduced for commercial purposes. For other possible restrictions on use please refer to the publisher's URL where this is made available, or to notes contained in the item itself. Other terms may apply.