Title: Software selection: towards an understanding of forensic software tool selection in industrial practice

Authors: Rory V. O'Connor

Addresses: School of Computing, Faculty of Engineering and Computing, Dublin City University, Dublin, Ireland

Abstract: As a result of the increasing importance of the forensic examination of computer systems, numerous forensic software tools have appeared in the market. The selection of such tools is an important technical and strategic business decision that may have serious legal implications. This paper examines the main issues surrounding the selection of forensic software tools for use by computer forensic investigators pursuing digital evidence as part of an organisational, civil or criminal investigation. The primary objective of this research was to develop a set of characteristics which highlight the main technical and non-technical selection issues and their relative significance in explaining the selection of a particular forensic software tool in industrial practice. This paper presents the results of interviews with commercial forensic investigators in order to assess their attitudes, opinions and experience in making tool selection decisions. In addition a model is developed which describes the main discriminating selection criteria.

Keywords: software selection; technology adoption; technology management; forensic software tools; digital evidence; selection criteria; computer forensic investigation.

DOI: 10.1504/IJTPM.2005.008633

International Journal of Technology, Policy and Management, 2005 Vol.5 No.4, pp.311 - 329

Published online: 12 Jan 2006 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article