Modeling Evidence Recovery from Digital Media

A. Chris Bogen and David A. Dampier

Department of Computer Science and Engineering
Mississippi State University Mississippi State, MS 39762-9637 USA,


This paper is intended to identify research goals for the modeling of activities performed during the examination and analysis of digital evidence. The scope of this paper, with respect to computer forensics, is limited to the search for, identification of, and analysis of evidence found on digital storage media.