NCJ Number
217723
Journal
Evidence Technology Magazine Volume: 5 Issue: 1 Dated: January-February 2007 Pages: 30-33
Date Published
January 2007
Length
4 pages
Annotation
This article describes the benefits of using open-source software for digital forensic work.
Abstract
There are two main benefits of using open-source software, which is defined as software that is not copywritten by a corporation and is freely available for modification by developers worldwide: (1) low cost and (2) the significant capability open-source software brings. The significant benefits and capabilities are highlighted in the article followed by a description of the seven main ways that open-source software can be utilized in a digital forensic laboratory. Some of the benefits of using open-source software are the ability to cross-check software, which enables technicians to view data in a different manner and to double check reported results, and the benefit of having granular and modular control over the processing and over the manner in which the data is viewed. One of the most important benefits of using open-source software is the ability to gain the support of thousands of talented open-source users, many of whom are experts in their fields. Once the benefits of using open-source software are established, the question turns to capacity: how can open-source software be of value to a digital forensic laboratory? Seven main uses are identified: (1) case management; (2) acquisition; (3) analysis; (4) miscellaneous tools of interest; (5) operating systems and support software; (6) virtual platforms; and (7) mobile acquisition and analysis. The benefits of using open-source software for each of these uses are described in turn.