Difference between revisions of "Timeline Analysis Bibliography"
From Forensics Wiki
m |
m (→Papers) |
||
| Line 1: | Line 1: | ||
==Papers== | ==Papers== | ||
* S. Willassen, [http://www.igi-global.com/articles/details.asp?ID=33298 "A Model Based Approach to Timestamp Evidence Interpretation"], International Journal of Digital Crime and Forensics, 1:2, 2009 | * S. Willassen, [http://www.igi-global.com/articles/details.asp?ID=33298 "A Model Based Approach to Timestamp Evidence Interpretation"], International Journal of Digital Crime and Forensics, 1:2, 2009 | ||
| + | |||
| + | * [http://www.bth.se/fou/cuppsats.nsf/bbb56322b274389dc1256608004f052b/2e5256fe7d0e57d5c12574bd0072d894!OpenDocument Digital Evidence with an Emphasis on Time], Jens Olsson, Master's Thesis, Blekinge Institute of Technology, September 2008. | ||
* R. Koen, M. Olivier, [http://icsa.cs.up.ac.za/issa/2008/Proceedings/Full/43.pdf "The Use of File Timestamps in Digital Forensics"], ISSA 2008, Johannesburg, South Africa, July 2008 | * R. Koen, M. Olivier, [http://icsa.cs.up.ac.za/issa/2008/Proceedings/Full/43.pdf "The Use of File Timestamps in Digital Forensics"], ISSA 2008, Johannesburg, South Africa, July 2008 | ||
* S. Willassen, [http://www.diva-portal.org/ntnu/abstract.xsql?dbid=2145 "Methods for Enhancement of Timestamp Evidence in Digital Investigations"], PhD Dissertation, Norwegian University of Science and Technology, 2008 | * S. Willassen, [http://www.diva-portal.org/ntnu/abstract.xsql?dbid=2145 "Methods for Enhancement of Timestamp Evidence in Digital Investigations"], PhD Dissertation, Norwegian University of Science and Technology, 2008 | ||
| Line 17: | Line 19: | ||
* [http://infoviz.pnl.gov/pdf/themeriver99.pdf ThemeRiver: In Search of Trends, Patterns, and Relationships], Susan Havre, Beth Hetzler, and Lucy Nowell, Battelle Pacific Northwest Division, Richland, Washington, 1999 | * [http://infoviz.pnl.gov/pdf/themeriver99.pdf ThemeRiver: In Search of Trends, Patterns, and Relationships], Susan Havre, Beth Hetzler, and Lucy Nowell, Battelle Pacific Northwest Division, Richland, Washington, 1999 | ||
* [http://www.conceptsymbols.com/web/publications/2003_timelines.pdf Timeline Visualization of Research Fronts], Steven A. Morris2, G. Yen, Zheng Wu, Benyam Asnake , School of Electrical and Computer Engineering, Oklahoma State University, Stillwater, Oklahoma. 2003 | * [http://www.conceptsymbols.com/web/publications/2003_timelines.pdf Timeline Visualization of Research Fronts], Steven A. Morris2, G. Yen, Zheng Wu, Benyam Asnake , School of Electrical and Computer Engineering, Oklahoma State University, Stillwater, Oklahoma. 2003 | ||
| − | * [http://well-formed-data.net/archives/26/visualizing-gaps-in-time-based-lists Visualizing gaps in time-based lists], Moritz Stefaner | + | * [http://well-formed-data.net/archives/26/visualizing-gaps-in-time-based-lists Visualizing gaps in time-based lists], Moritz Stefaner |
| − | + | ||
==Programs== | ==Programs== | ||
Revision as of 17:23, 31 July 2009
Papers
- S. Willassen, "A Model Based Approach to Timestamp Evidence Interpretation", International Journal of Digital Crime and Forensics, 1:2, 2009
- Digital Evidence with an Emphasis on Time, Jens Olsson, Master's Thesis, Blekinge Institute of Technology, September 2008.
- R. Koen, M. Olivier, "The Use of File Timestamps in Digital Forensics", ISSA 2008, Johannesburg, South Africa, July 2008
- S. Willassen, "Methods for Enhancement of Timestamp Evidence in Digital Investigations", PhD Dissertation, Norwegian University of Science and Technology, 2008
- S. Willassen, "Finding Evidence of Antedating in Digital Investigations", ARES 2008, Barcelona, Spain, March 2008
- S. Willassen, "Hypothesis Based Investigation of Digital Timestamp", 4th IFIP WG 11.9 Workskop on Digital Evidence, Kyoto, Japan, January 2008
- S. Willassen, "Timestamp Evidence Correlation by model based clock hypothesis testing", E-Forensics 2008, Adelaide, Australia, January 2008
- F. Buchholz, "An Improved Clock Model for Translating Timestamps", JMU-INFOSEC-TR-2007-001, James Madison University
- F. Buchholz, B. Tjaden, "A brief study of time", Digital Investigation 2007:4S
- K. Chow, F. Law, M. Kwan, P. Lai, "The Rules of Time on NTFS File System", 2nd International Workshop on Systematic Approaches to Digital Forensic Engineering, Seattle, Washington, April 2007
- B. Schatz, G. Mohay, A. Clark, "A correlation method for establishing provenance of timestamps in digital evidence", Digital Investigation 2006:3S
- P. Gladyshev, A. Patel, "Formalizing Event Time Bouding in Digital Investigation", International Journal of Digital Evidence, vol 4:2, 2005
- C. Boyd, P. Forster, "Time and Date issues in forensic computing - a case study", Digital Investigation 2004:1
- M.W. Stevens, "Unification of relative time frames for digital forensics", Digital Investigation 2004:1
- M.C. Weil, "Dynamic Time & Date Stamp Analysis", International Journal of Digital Evidence, vol 1:2, 2002
- ThemeRiver: In Search of Trends, Patterns, and Relationships, Susan Havre, Beth Hetzler, and Lucy Nowell, Battelle Pacific Northwest Division, Richland, Washington, 1999
- Timeline Visualization of Research Fronts, Steven A. Morris2, G. Yen, Zheng Wu, Benyam Asnake , School of Electrical and Computer Engineering, Oklahoma State University, Stillwater, Oklahoma. 2003
- Visualizing gaps in time-based lists, Moritz Stefaner
Programs
- Zeitline — Forensic timeline editor
- http://projects.cerias.purdue.edu/forensics/timeline.php
- http://sourceforge.net/projects/zeitline/
