The Forensic Image Generator Generator

Moch C, Freiling F (2009)

Publication Language: English

Publication Type: Conference contribution, Original article

Publication year: 2009

Publisher: IEEE Computer Society

City/Town: Stuttgart, Germany

Pages Range: 78-93

Conference Proceedings Title: Proceedings of the Fifth International Conference on Incident Management and Forensics

Event location: Stuttgart, Germany DE

DOI: 10.1109/IMF.2009.8

Abstract

We describe a system that allows to produce file system images for training courses in forensic computing. The instructor can program certain user behavior (like copying files and deleting them) in a script file which is then executed by the system using a combination of Python and Qemu. The result is a file system image that can be analysed by students within exercises on forensic computing. The analysis results of the students can then be compared with the truth encoded in the input script. The system therefore allows to easily generate large numbers of artificial but still challenging images without the privacy concerns of, for example, using and analysing second hand hard disks.

Authors with CRIS profile

Christian Moch Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Felix Freiling Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen)

How to cite

APA:

Moch, C., & Freiling, F. (2009). The Forensic Image Generator Generator. In Proceedings of the Fifth International Conference on Incident Management and Forensics (pp. 78-93). Stuttgart, Germany, DE: Stuttgart, Germany: IEEE Computer Society.

MLA:

Moch, Christian, and Felix Freiling. "The Forensic Image Generator Generator." Proceedings of the Proceedings of the Fifth International Conference on Incident Management and Forensics, Stuttgart, Germany Stuttgart, Germany: IEEE Computer Society, 2009. 78-93.

BibTeX: Download