One area that seems to need research is ways to ensure untaintedness of evidence. Developing a good logical framework for data gathering so both practitioners and system administrators could develop good data preservation policies. The would research the volatility of various file system designs with respect to file retention after "deletion", differences in different hardware with respect to power changes, trojans that can overwrite data. Lots of good things. -----Original Message----- From: mstevenson [mailto:mstevensonat_private] Sent: Sun March 17 2002 12:41 To: forensicsat_private Subject: Suggestions for research Hello, I know that most of you are practitioners in this field (as I am), but I decided to give it a shot anyway. I'm starting a Ph.D. in CS and I want to research on computer forensics. However, my advisor knows very little about forensics, and I'm having a difficult time trying to find a suitable research topic. Does anybody here have a suggestion? Perhaps some crazy idea you had but you thought, "Oh, only in grad school I'd have the time to try it"? Thanks for your input, -- Matthew K Stevenson mstevensonat_private ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ----------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Mar 18 2002 - 19:42:05 PST