作者: Sean Peisert , Matt Bishop , Keith Marzullo
关键词:
摘要: Different users apply computer forensic systems, models, and terminology in very different ways. They often make incompatible assumptions reach conclusions about the validity accuracy of methods they use to log, audit, present data. This is problematic, because these fields are related, results from one can be meaningful others. We several systems discuss situations which produce valid accurate also their suspect. models areas useful could augmented. Finally, we some recommendations how scientists, practitioners, lawyers, judges build more complete forensics that take into account appropriate legal details lead scientifically analysis.