±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 34183
New Yesterday: 2 Visitors: 153

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Daubert Standard and Open Source/Proprietary Tools

Discussion of legislation relating to computer forensics.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Daubert Standard and Open Source/Proprietary Tools

Post Posted: Fri Nov 07, 2014 11:16 pm

Hello,

I'm a Digital Forensics major at Chestnut Hill college. I'm writing a research paper on computer forensic tools and the Daubert Standard and I was wondering if you guys would help me out by taking a survey about Open Source and Proprietary tools and how well you think each one fits the Daubert (or Frye) standard. Thanks!!

www.surveymonkey.com/s/MR6Z89T  

AndreFowler
Newbie
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Sat Nov 08, 2014 5:46 am

Your survey is unlikely to give the answers you want. You focus a lot on open source versus propriety commercial software. Though that should be open source versus closed source software, IMO. Since there are a lot of free tools out there that are closed source as well.

Another point is that you do not take into account that a closed source program still can be adequately transparent to provide admissible evidence.  

joachimm
Senior Member
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Mon Nov 10, 2014 2:35 am

Take a look at DC3 DCCI and NIST and how they test software.  

jhup
Senior Member
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Mon Nov 10, 2014 9:11 am

- jhup
Take a look at DC3 DCCI and NIST and how they test software.


And how they miss important issues Smile  

thefuf
Senior Member
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Mon Nov 10, 2014 2:23 pm

I welcome your constructive criticism of their protocols.

- thefuf
- jhup
Take a look at DC3 DCCI and NIST and how they test software.


And how they miss important issues Smile
 

jhup
Senior Member
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Mon Nov 10, 2014 2:47 pm

- jhup
I welcome your constructive criticism of their protocols.


What about non-constructive criticism on the amount of tests they make? Rolling Eyes

www.forensicfocus.com/...5/#6569805

Wink

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 

jaclaz
Senior Member
 
 
  

Re: Daubert Standard and Open Source/Proprietary Tools

Post Posted: Mon Nov 10, 2014 3:17 pm

- jhup
I welcome your constructive criticism of their protocols.

- thefuf
- jhup
Take a look at DC3 DCCI and NIST and how they test software.


And how they miss important issues Smile


1. They (NIST guys) don't test "dirty" file systems on purpose (they did only ONE test with a file system that was not unmounted properly, and got an interesting result, but they didn't repeat this in other tests) – they miss several source data modification issues when testing SMART Linux and PALADIN.
2. They don't test file systems both on HDDs and SSDs – some forensic software acts differently when evidentiary data is located on SSD, not on HDD.
3. They don't test Live CDs by booting them from different media types – it is known that some forensic live distributions alter the source data only when booting from USB HDD (and not from CD or USB Flash).

And so on.  

thefuf
Senior Member
 
 

Page 1 of 2
Go to page 1, 2  Next