An Ontology for Supporting Digital Forensics Controlled Experiments: Early Stages of Development

• Thiago J. Silva UEM
• Edson OliveiraJr UEM

DOI: https://doi.org/10.5753/bresci.2022.222813

Resumo

The experimentation process is one of the main means of science to evaluate theories based on hypothesis. Science evolves most taking into account the performing of controlled experiments, thus providing trust evidence for different research fields. However, for the Digital Forensics (DF) field, formal controlled experimentation has been neglected over the years. In a recent systematic mapping of the literature, we found more than 200 experiments with few formalization of their procedures, thus jeopardizing its evidence reliability and the capacity of reproducibility. Therefore, this paper provides early steps to specify an ontology for supporting proper planning, conducting, and dissemination of DF controlled experiments. The ontology has as a basis a conceptual model created to specify the main elements of an experiment. We adopted the Uschold and King approach to develop such an ontology. We first designed the ontology with the protégé ontology editor, as it organizes knowledge. In addition, the WebVOWL tool was also used from the json file generated in the protegé tool, as this aids at the construction of a dynamic visual identity for the ontology. As general results, we understand that despite the number of ontologies in the literature being relevant, few present a structure that satisfies a relation of similar objects for their properties, in addition do not covering the context of a DF experiment. Therefore, despite the ontology construction is in its early stages, it is expected that it will shad light to the field of experimentation in DF throughout a hierarchy and formalized process.

Palavras-chave: Ontology, Digital Forensics, Controlled Experiments

Referências

Alvarez, L. (2011). Software designer reports error in anthony trial. New York Times, 19.

Casey, E. (2013). Experimental design challenges in digital forensics. Digital Investigation, 9(3):167–169.

OliveiraJr, E., Silva, T., Zorzo, A., and Neu, C. (2022). Digital forensics experimentation: Analysis and recommendations. Forensic science review, 34(1):21–41.

OliveiraJr, E., Zorzo, A. F., and Neu, C. V. (2020). Towards a conceptual model for promoting digital forensics experiments. Forensic Science International: Digital Investigation, 35:301014.

OliveiraJr, E., Zorzo, A. F., and Neu, C. V. (2021). Experimentation of digital multimedia forensics: State of the art and research gaps. Wiley Interdisciplinary Reviews: Forensic Science, page e1406.

Overill, R. and Collie, J. (2020). Deep: Extending the digital forensics process model for criminal investigations. Athens Journal of Sciences, 7(4):225–240.

Tedre, M. and Moisseinen, N. (2014). Experiments in computing: A survey. The Scientific World Journal, 2014(1):1–12.

Uschold, M. and King, M. (1995). Towards a methodology for building ontologies. In Workshop on Basic Ontological Issues in Knowledge Sharing, pages 1–15.

Villar-Vega, H., Perez-Lopez, L., and Moreno-Sanchez, J. (2019). Computer forensic analysis protocols review focused on digital evidence recovery in hard disks devices. In Journal of Physics: Conference Series, volume 1418, page 012008. IOP Publishing.

Wohlin, C., Runeson, P., Höst, M., Ohlsson, M. C., Regnell, B., and Wesslén, A. (2012). Experimentation in software engineering. Springer Science & Business Media.