{"id":1322,"date":"2025-09-04T02:33:14","date_gmt":"2025-09-04T07:33:14","guid":{"rendered":"https:\/\/fbreitinger.de\/?p=1322"},"modified":"2025-09-04T02:35:47","modified_gmt":"2025-09-04T07:35:47","slug":"evaluating-tamper-resistance-of-digital-forensic-artifacts-during-event-reconstruction-imf","status":"publish","type":"post","link":"https:\/\/fbreitinger.de\/?p=1322","title":{"rendered":"Evaluating tamper resistance of digital forensic artifacts during event reconstruction @ IMF"},"content":{"rendered":"

Thanks to my co-authors C\u00e9line Vanini<\/a> and Chris Hargreaves<\/a> for working with me on this article which is available open access in ACM DTAP<\/a>. The work can be access here<\/a> and will be presented at the IMF 2025 conference<\/a> in September 2025. An earlier version of the paper is available here: https:\/\/arxiv.org\/abs\/2412.12814<\/a><\/p>\n

\n

Here are the details about the paper:<\/p>\n

Abstract<\/h2>

Event reconstruction is a fundamental part of the digital forensic process, helping to answer key questions like who, what, when, and how. A common way of accomplishing that is to use tools to create timelines, which are then analyzed. However, various challenges exist, such as large volumes of data or contamination. While prior research has focused on simplifying timelines, less attention has been given to tampering, i.e., the deliberate manipulation of evidence, which can lead to errors in interpretation. This article addresses the issue by proposing a framework to assess the relative tamper resistance of different data sources used in event reconstruction. We discuss factors affecting data resilience, introduce a scoring system for evaluation, and illustrate its application with case studies. This work aims to improve the reliability of forensic event reconstruction by considering tamper resistance.<\/p>\n

C\u00e9line Vanini, Chris Hargreaves, Frank Breitinger: <\/span> Evaluating tamper resistance of digital forensic artifacts during event reconstruction<\/span>. In: <\/span>Digital Threats, <\/span>2025<\/span>, (Just Accepted)<\/span>.<\/span><\/div>\n","protected":false},"excerpt":{"rendered":"

Thanks to my co-authors C\u00e9line Vanini and Chris Hargreaves for working with me on this article which is available open access in ACM DTAP. The work can be access here and will be presented at the IMF 2025 conference in September 2025. An earlier version of the paper is available here: https:\/\/arxiv.org\/abs\/2412.12814 Here are the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1322","post","type-post","status-publish","format-standard","hentry","category-publication"],"_links":{"self":[{"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/posts\/1322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1322"}],"version-history":[{"count":3,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions"}],"predecessor-version":[{"id":1325,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=\/wp\/v2\/posts\/1322\/revisions\/1325"}],"wp:attachment":[{"href":"https:\/\/fbreitinger.de\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fbreitinger.de\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}