Mason Archival Repository Service

A Distributed Digital Body Farm for Dynamic Monitoring of File Decay Patterns on the NTFS Filesystem

Show simple item record

dc.contributor.advisor Jones, James H.
dc.creator Agada, Omoche Cheche 2023-03-17T19:05:35Z 2023-03-17T19:05:35Z 2022
dc.description.abstract Forensic recovery of previously deleted data could be a time-consuming activity during a digital forensic investigation. As tedious as the procedure is, it may not produce useful results or any results at all, as the deleted file data decay process may have rendered such data irrecoverable. Proper insight into the rates, patterns, and factors that influence digital artifact decay is necessary to help investigators determine if attempting a recovery is a wise use of time. A significant amount of research effort has been invested in the study of deleted artifact decay, but knowledge gaps still exist. This work developed, implemented, tested, and applied a tool to collect deleted file decay data, then analyzed that data to determine decay rates and patterns, as well as factors affecting those decay rates and patterns. The work describes a methodology and the implementation of a distributed digital body farm (DDBF) – a suite of applications that use differential analysis to monitor and record patterns of decay as data are erased or overwritten on a secondary storage medium attached to a live system. The patterns are remotely collected from systems belonging to independent users without violating the privacy of such users. The extracted patterns are subsequently analyzed using multiple data models to provide further insight into the deleted file decay rates, processes, and influencing factors.
dc.format.extent 231 pages
dc.format.medium doctoral dissertations
dc.language.iso en
dc.rights Copyright 2022 Omoche Cheche Agada
dc.subject Deleted file decay
dc.subject Deleted file persistence
dc.subject Digital body farm
dc.subject Digital forensics
dc.subject Digital investigation
dc.subject Distributed digital body farm
dc.title A Distributed Digital Body Farm for Dynamic Monitoring of File Decay Patterns on the NTFS Filesystem
dc.type Text Ph.D. in Information Technology Doctoral Information Technology George Mason University
dc.subject.keywords Information technology
dc.subject.keywords Computer science

Files in this item

This item appears in the following Collection(s)

Show simple item record

Search MARS


My Account