Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Data corpora for digital forensics education and research

: Yannikos, York; Graner, Lukas; Steinebach, Martin; Winter, Christian


Peterson, G. ; International Federation for Information Processing -IFIP-, Working Group Digital Forensics:
Advances in digital forensics X. 10th IFIP WG 11.9 International Conference 2014 : Vienna, Austria, January 8-10, 2014; Revised selected papers
Berlin: Springer, 2014 (IFIP advances in information and communication technology 433)
ISBN: 3-662-44951-X
ISBN: 978-3-662-44951-6 (Print)
ISBN: 978-3-662-44952-3 (Online)
International Conference on Digital Forensics <10, 2014, Vienna>
Fraunhofer SIT ()
forensic data corpora; synthetic disk images; model-based simulation

Data corpora are very important for digital forensics education and research. Several corpora are available to academia; these range from small manually-created data sets of a few megabytes to many terabytes of real-world data. However, different corpora are suited to different forensic tasks. For example, real data corpora are often desirable for testing forensic tool properties such as effectiveness and efficiency, but these corpora typically lack the ground truth that is vital to performing proper evaluations. Synthetic data corpora can support tool development and testing, but only if the methodologies for generating the corpora guarantee data with realistic properties.
This paper presents an overview of the available digital forensic corpora and discusses the problems that may arise when working with specific corpora. The paper also describes a framework for generating synthetic corpora for education and research when suitable real-world data is not available.