Evaluating the Use of Assurance Cases for Digital Forensics
Advisor Information
Robin Gandhi
Location
Milo Bail Student Center Dodge Room B
Presentation Type
Oral Presentation
Start Date
8-3-2013 1:45 PM
End Date
8-3-2013 2:00 PM
Abstract
Assurance cases are a standard modeling technique to show that a claim regarding a system's safety or security is reasonably correct. They have been extended into the field of computer security, specifically to show security of a software program or a computer system. Assurance cases are presented in a pictorial diagram that enables a large amount of evidence to be more readily understandable by stakeholders such as owners and upper management. This adds further value to assurance cases by presenting technical ideas in a way that even those without a technical background can get a grasp of their significance. This research project will look at taking assurance cases and extending them into the field of computer forensics, in particular for use in court cases. At this time there does not exist any such modeling tool to take the evidence from a computer investigation and present it in a credible, convincing argument that could be used to support the claim that someone is guilty (or not) of a computer crime. Assurance cases seem like a useful method to fill that gap.
Evaluating the Use of Assurance Cases for Digital Forensics
Milo Bail Student Center Dodge Room B
Assurance cases are a standard modeling technique to show that a claim regarding a system's safety or security is reasonably correct. They have been extended into the field of computer security, specifically to show security of a software program or a computer system. Assurance cases are presented in a pictorial diagram that enables a large amount of evidence to be more readily understandable by stakeholders such as owners and upper management. This adds further value to assurance cases by presenting technical ideas in a way that even those without a technical background can get a grasp of their significance. This research project will look at taking assurance cases and extending them into the field of computer forensics, in particular for use in court cases. At this time there does not exist any such modeling tool to take the evidence from a computer investigation and present it in a credible, convincing argument that could be used to support the claim that someone is guilty (or not) of a computer crime. Assurance cases seem like a useful method to fill that gap.