Perbandingan Kinerja Perangkat Lunak Forensik untuk File Carving dengan Metode National Institute Of Standards And Technology (NIST)

Performance Analysis of Forensic Software for Carving Files using National Institute of Standards and Technology (NIST) Method

Doddy Teguh Yuwono -  Universitas Ahmad Dahlan, Indonesia
*Abdul Fadlil -  Universitas Ahmad Dahlan, Indonesia
Sunardi Sunardi -  Universitas Ahmad Dahlan, Indonesia
Received: 28 Nov 2018; Revised: 19 Apr 2019; Accepted: 22 Jul 2019; Published: 31 Jul 2019; Available online: 4 Aug 2019.
Open Access Copyright (c) 2019 Jurnal Teknologi dan Sistem Komputer
Citation Format:
Article Info
Section: Articles
Language: ID

Supp. File(s):
Analisis File Carving Dengan Metode National Institute Of Standards And Technology (NIST)
Subject Digital Forensic, Flash Memory, Hard Drive, NIST, Scalpel
Type Research Instrument
  View (55KB)    Indexing metadata
Statistics: 25
Abstract
Data lost due to the fast format or system crash will remain in the media sector of storage. Digital forensics need proof and techniques for retrieving data lost in storage. This research studied the performance comparison of open-source forensic software for data retrieval, namely Scalpel, Foremost and Autopsy, using the National Institute of Standards Technology (NIST) forensic method. The testing process was carried out using the file carving technique. The carving file results are analyzed based on success rate (accuracy) of the forensic tools used in returning the data. Scalpel performed the highest accuracy for file carving of 100% success rate for 20 document files in pdf and Docx format, and 90% for 10 image file in png and jpeg format.

Note: This article has supplementary file(s).

Keywords
digital forensics; data retrieval tools; file carving; accuracy of forensic tools

Article Metrics: