Time aspect of information stored on Windows application memory

Olajide, F ORCID: https://orcid.org/0000-0003-1627-6637, Trafford, R, Akmayeva, G and Shoniregun, C, 2012. Time aspect of information stored on Windows application memory. In: Proceedings of the World Congress on Sustainable Technologies (WCST-2012), London, 19-22 November 2012. Piscataway, NJ: Institute of Electrical and Electronics Engineers (IEEE). ISBN 978190832009

Preview

Text 1597914_Olajide.pdf - Published version Download (1MB) | Preview

Abstract

In today digital investigation, forensic time aspect of information has become an important part of digital forensic research. Vital user input information can be gathered from the physical memory of computer systems. Digital forensic community demand accurate data collection, preservation, examination, validation, data analysis and presentation. This process has become the most important aspect of digital investigation. The extraction of forensically relevant evidence from the physical memory can reveals users' actions. This research will report the evidence that can be extracted and how that evidence changes with the length of time that the system is switched on when the application is still opened. In this experiment, the qualitative assessment of user input on some commonly used applications will be discussed.

Item Type:	Chapter in book
Description:	Paper presented at the World Congress on Sustainable Technologies (WCST-2012), London, 19-22 November 2012.
Creators:	Olajide, F., Trafford, R., Akmayeva, G. and Shoniregun, C.
Publisher:	Institute of Electrical and Electronics Engineers (IEEE)
Place of Publication:	Piscataway, NJ
Date:	6 August 2012
ISBN:	978190832009
Identifiers:	Number Type 1597914 Other
Rights:	Copyright © 2012 by Infonomics Society. All rights reserved. Copyright and Reprint Permissions: Abstracting is permitted with credit to the source. Libraries are permitted to photocopy beyond the limit of U.S. copyright law for private use of patrons those articles in this volume that carry a code at the bottom of the first page, provided that the per-copy fee indicated in the code is paid through the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923.
Divisions:	Schools > School of Science and Technology
Record created by:	Linda Sullivan
Date Added:	22 Sep 2022 12:46
Last Modified:	22 Sep 2022 12:46
URI:	https://irep.ntu.ac.uk/id/eprint/47080

Actions (login required)

Edit View

Statistics

Views

Downloads