Do digital investigators have to program? A controlled experiment in digital investigation

Freiling F, Zoubek C (2017)


Publication Type: Journal article, Original article

Publication year: 2017

Journal

Publisher: Elsevier Ltd

Book Volume: 20S

Pages Range: S37-S46

DOI: 10.1016/j.diin.2017.01.004

Open Access Link: https://www.sciencedirect.com/science/article/pii/S1742287617300282

Abstract

We report on the results of an exploratory study in which graduate students played the role of digital investigators within an advanced digital forensics course. Overall, 39 students were split up into 10 groups. Each group had to solve one out of three arguably realistic cases within a time frame of 11 weeks. Participants had to log their actions and the corresponding time effort. The resulting data was analyzed in order to identify differences in investigative strategies as well as factors that influence the quality of the results. As can be expected, the total effort (in minutes) generally positively influences the results, but rather surprisingly, participants did not (have to) program to solve the cases although they were restricted to using publicly available tools.

Authors with CRIS profile

How to cite

APA:

Freiling, F., & Zoubek, C. (2017). Do digital investigators have to program? A controlled experiment in digital investigation. Digital Investigation, 20S, S37-S46. https://doi.org/10.1016/j.diin.2017.01.004

MLA:

Freiling, Felix, and Christian Zoubek. "Do digital investigators have to program? A controlled experiment in digital investigation." Digital Investigation 20S (2017): S37-S46.

BibTeX: Download