The General Digital Forensics Model

Steven Rigby
BYU-Idaho
Rexburg, ID USA
rigbys@byui.edu

Marcus K. Rogers
Purdue University
West Lafayette IN USA
rogersmk@purdue.edu

Abstract

The lack of a graphical representation of all of the principles, processes, and phases necessary to carry out an digital forensic investigation is a key inhibitor to effective education in this newly emerging field of study. Many digital forensic models have been suggested for this purpose but they lack explanatory power as they are merely a collection of lists or one-dimensional figures.  This paper presents a new multi-dimensional model, the General Digital Forensics Model (GDFM), that shows the relationships and inter-connectedness of the principles and processes needed within the domain of digital forensics.

Keywords: process model, computer forensics, expert learning, educational framework, digital forensics