Error, Uncertainty and Loss in Digital Evidence

Despite the potentially grave ramifications of relying on faulty information in the investigative or probabitive stages, the uncertainty in digital evidence is not being evaluated at present, thus making it difficult to assess the reliability of evidence stored on and transmitted using computer networks. As scientists, forensic examiners have a responsibility to reverse this trend and address formally the uncertainty in any evidence they rely on to reach conclusions. This paper discusses inherent uncertainties in network related evidence that can be compounded by data corruption, loss, tampering, or errors in interpretation and analysis. Methods of estimating and categorizing uncertainty in digital data are introduced and examples are presented. 1 Reliability refers to the consistency of a measuring or recording process. A perfectly reliable process will record the same value when repeated measurements of the same entity are taken. Accuracy and error both refer to the difference betwe...

• Type: Journal
• Year: 2002
• Where: IJDE
• Authors: Eoghan Casey
• Keywords: Faulty Information, Grave Ramifications, IJDE 2002, Probabitive Stages