Freiling F, Hösch L (2018)
Publication Language: English
Publication Type: Journal article
Publication year: 2018
Publisher: Elsevier Ltd
Book Volume: 24S
Pages Range: S83-S92
DOI: 10.1016/j.diin.2018.01.011
Open Access Link: https://www.sciencedirect.com/science/article/pii/S1742287618300434
We report on a sequence of experiments performed with graduate level students on the tampering of digital evidence. The task of the study participants was to manipulate a given disk image so that it looked as if a website had been accessed and images downloaded in the past. Later, the same students had to distinguish their forgeries from a set of originals in which the images actually had been downloaded. During all parts of the experiment, efforts were recorded in project diaries. Overall, the results show that the tampering task was difficult since none of the forgeries was taken as an original. Furthermore, the analysis effort to detect forgeries consistently was below the effort to create the forgery even in the worst case scenario where the manipulator had full control over the evidence. It also required generally less effort to correctly classify an original than to correctly classify a forgery. Additionally, we derived results confirming that the effort to construct consistently manipulated evidence increases with decreasing control, i.e., the ability to precisely act upon the evidence.
APA:
Freiling, F., & Hösch, L. (2018). Controlled experiments in digital evidence tampering. Digital Investigation, 24S, S83-S92. https://doi.org/10.1016/j.diin.2018.01.011
MLA:
Freiling, Felix, and Leonhard Hösch. "Controlled experiments in digital evidence tampering." Digital Investigation 24S (2018): S83-S92.
BibTeX: Download