A Turing Machine-Based Model for Computer Forensic Reconstruction

Abstract

Reconstruction is of critical importance for computer forensics: reliability depends on our ability to do so with a quantifiable degree of certainty. In this paper, we propose a new model for computer forensic reconstruction by creating a mathematical model of a computer system that reliably shows how computation progressed. Since the new model is Turing Machine-based, the reliability of other forensic reconstruction systems can be evaluated by comparing to this new model.