Dear all, 

We have submitted the paper „Digital Evidence Object Model for Retrieval of Relevant Information in Digital Forensics Investigation“

Abstract: The aim of a forensic investigation is to identify and preserve evidence, extract information, document every investigation step, and analyze extracted information in terms of a set of five variables: Why, When, Where, What, and Who (5W). Digital forensic investigation is the process of collecting, examining and analyzing digital data from various places, such as digital devices, networks, big data in the cloud etc. Here we propose a novel Digital Evidence Object (DEO) model for forensics data reduction in digital forensic investigation and describe its application. The proposed DEO model is based on the category theory, and is used for integrating five categories of digital investigation analysis techniques for digital evidence acquisition. We present a real-world case study to demonstrate its applicability for assisting computer forensics expert in the digital evidence investigation process. Our results show that the application of the DEO model can significantly reduce the number of false positive evidence objects precented to a forensics exper, thus reducing his/her workload.

This paper is still under evaluation. 

If it gets accepted, we will acknowledge SPARTA.

Best,

Algimantas Venčkauskas

Kauno technologijos universitetas