IT Forensics
Development and Improvement of IT Forensic Tools
Technological advancements, the growing volume of data, and the widespread availability of storage space continually present IT forensic investigators with significant challenges that they can only overcome with the help of specialized tools. To this end, it is essential that these tools operate both effectively and efficiently in as many relevant cases as possible. They should deliver accurate, reliable, and admissible analysis results at the lowest possible cost.
Appropriate quality tests are necessary to evaluate and improve IT forensic tools. Such tests are not only relevant for manufacturers of IT forensic tools. It is also important for users of these tools to know to what extent they can trust the results. Furthermore, tests can be used to evaluate and compare the performance of IT forensic tools under various conditions.
Quality Tests
Fraunhofer SIT tests the quality of IT forensic tools. For manufacturers of IT forensic tools, Fraunhofer SIT can test the performance and other characteristics of their products, compare them with competitors’ products in studies, or confirm the determined quality to third parties. The results obtained through neutral and independent testing are always helpful to manufacturers: If, for example, vulnerabilities are discovered during testing, the developer gains valuable insights for product improvement. If a product successfully passes all tests, the manufacturer can use this in their own marketing. Fraunhofer SIT conducts tests and studies for both manufacturers and users of IT forensic tools.
Testing typically requires test data that can be searched for traces, for example. If no real test data is available for specific cases, Fraunhofer SIT can efficiently generate synthetic data with the desired characteristics using its own method, which can then be used for testing purposes. The synthetic data is generated based on suitable simulation models to ensure that the resulting characteristics are as realistic as possible.
In addition to testing IT forensic tools, Fraunhofer SIT also works on improving and further developing tools, provided that specific opportunities for improvement can be identified. Fraunhofer SIT can support manufacturers both in the conceptual work for improvement and further development as well as in the implementation.
