Horsman Graeme
Teesside University, Middlesbrough, Tees Valley TS1 3BX, UK.
Sci Justice. 2018 Nov;58(6):433-440. doi: 10.1016/j.scijus.2018.04.001. Epub 2018 Apr 17.
The field of digital forensics maintains significant reliance on the software it uses to acquire and investigate forms of digital evidence. Without these tools, analysis of digital devices would often not be possible. Despite such levels of reliance, techniques for validating digital forensic software are sparse and research is limited in both volume and depth. As practitioners pursue the goal of producing robust evidence, they face the onerous task of both ensuring the accuracy of their tools and, their effective use. Whilst tool errors provide one issue, establishing a tool's limitations also provides an investigatory challenge leading the potential for practitioner user-error and ultimately a grey area of accountability. This article debates the problems surrounding digital forensic tool usage, evidential reliability and validation.
数字取证领域严重依赖用于获取和调查数字证据形式的软件。没有这些工具,对数字设备的分析往往是不可能的。尽管依赖程度如此之高,但用于验证数字取证软件的技术却很少,而且相关研究在数量和深度上都很有限。随着从业者追求提供可靠证据的目标,他们面临着既要确保工具的准确性又要确保其有效使用的艰巨任务。虽然工具错误是一个问题,但确定工具的局限性也带来了调查挑战,导致从业者出现用户错误的可能性,最终造成责任归属的灰色地带。本文探讨了围绕数字取证工具使用、证据可靠性和验证的问题。