디지털 포렌식 이미지 포맷 변환 도구 설계와 구현

Abstract

Digital forensic acquisition utilities are tendency to rely on analysis tool using specific format. It has limitations in the choice of acquisition tool. Most of Open Source Acquisition Tools(OSATs) is hard to use in practice because OSATs have no conformance test and digital evidence analyst is experienced at commercial tool. This thesis analyzes the acquisition and analysis tools for digital forensics. First, the conformance test for OSATs are performed according to CFTT procedures. And the evidence image format conversion tool for digital forensics is proposed. It allows an evidence image format by an OSAT to be used in a commercial tool. This thesis analyzes the various image format, and then designs and implements the conversion tool. The developed tool is verified by the conformance test.