- Title
- A comparison of open source and proprietary digital forensic software
- Creator
- Sonnekus, Michael Hendrik
- ThesisAdvisor
- Wells, George
- Subject
- Computer crimes
- Subject
- Computer crimes -- Investigation
- Subject
- Electronic evidence
- Subject
- Open source software
- Date
- 2015
- Type
- Thesis
- Type
- Masters
- Type
- MSc
- Identifier
- vital:4717
- Identifier
- http://hdl.handle.net/10962/d1017939
- Description
- Scrutiny of the capabilities and accuracy of computer forensic tools is increasing as the number of incidents relying on digital evidence and the weight of that evidence increase. This thesis describes the capabilities of the leading proprietary and open source digital forensic tools. The capabilities of the tools were tested separately on digital media that had been formatted using Windows and Linux. Experiments were carried out with the intention of establishing whether the capabilities of open source computer forensics are similar to those of proprietary computer forensic tools, and whether these tools could complement one another. The tools were tested with regards to their capabilities to make and analyse digital forensic images in a forensically sound manner. The tests were carried out on each media type after deleting data from the media, and then repeated after formatting the media. The results of the experiments performed demonstrate that both proprietary and open source computer forensic tools have superior capabilities in different scenarios, and that the toolsets can be used to validate and complement one another. The implication of these findings is that investigators have an affordable means of validating their findings and are able to more effectively investigate digital media.
- Format
- 166 leaves, pdf
- Publisher
- Rhodes University, Faculty of Science, Computer Science
- Language
- English
- Rights
- Sonnekus, Michael Hendrik
- Hits: 2052
- Visitors: 2365
- Downloads: 454
Collections
RU Department of Computer Science
| Thumbnail | File | Description | Size | Format | |||
|---|---|---|---|---|---|---|---|
| View Details | SOURCEPDF | 617 KB | Adobe Acrobat PDF | View Details |