Abstract
The Forensic Image Generator Generator (Forensig2) is a system that allows to produce file system images for training in forensic computing. We report experiences of using Forensig2 within a course on forensic computing. Apart from revealing the pitfalls when using artificially generated images in class, we argue that they can be used to quantify the difficulty of an analysis problem and, in turn, help to understand misinterpretation issues in practice.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Carrier, B.: File System Forensic Analysis. Addison-Wesley (2005)
Richard III, G.G.: Rhino Hunt: DFRWS 2005 Rodeo Challenge (2005), http://www.cfreds.nist.gov/dfrws/Rhino_Hunt.html
Moch, C., Freiling, F.C.: The forensic image generator generator (forensig2). In: Goebel, O., Ehlert, R., Frings, S., Günther, D., Morgenstern, H., Schadt, D. (eds.) IMF, pp. 78–93. IEEE Computer Society (2009)
Moch, C., Freiling, F.C.: Forensig2 homepage (2009), http://pi1.informatik.uni-mannheim.de/forensig2/
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 ICST Institute for Computer Science, Social Informatics and Telecommunications Engineering
About this paper
Cite this paper
Moch, C., Freiling, F.C. (2012). Evaluating the Forensic Image Generator Generator. In: Gladyshev, P., Rogers, M.K. (eds) Digital Forensics and Cyber Crime. ICDF2C 2011. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 88. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-35515-8_20
Download citation
DOI: https://doi.org/10.1007/978-3-642-35515-8_20
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-35514-1
Online ISBN: 978-3-642-35515-8
eBook Packages: Computer ScienceComputer Science (R0)