Home
 
Conferences
Dig Inv Basics
History Model Basics
 
Dig Inv Papers
Dig Inv Tools
File Systems Book
Forensics Tool Testing
Open Source Forensics

Papers and Books

My papers are listed on this page.

Digital Forensic Investigation Theory Papers

Papers on the general theory of digital forensic investigations

Categories of Digital Investigation Analysis Techniques Based
on the Computer History Model

Brian D. Carrier and Eugene H. Spafford

Digital Forensic Research Workshop 2006
August 2006

A Hypothesis-Based Approach to Digital Forensic Investigations

Brian D. Carrier

Ph.D. Dissertation
Purdue University
May 2006 (defended February 2006)

Defining Digital Crime Scene Event Reconstruction

Brian D. Carrier and Eugene H. Spafford

The Journal of Forensic Sciences 49(6)
November 2004
Presented at the AAFS 56th Annual Meeting (February 2004)

An Event-Based Digital Forensic Investigation Framework

Brian D. Carrier and Eugene H. Spafford

Digital Forensic Research Workshop 2004
August 2004

Getting Physical with the Digital Investigation Process

Brian Carrier and Eugene H. Spafford

International Journal of Digital Evidence 2(2)
November 2003

Defining Digital Forensic Examination and Analysis Tools Using Abstraction Layers

Brian Carrier

International Journal of Digital Evidence 1(4)
January 2003

Defining Digital Forensic Examination and Analysis Tools

Brian Carrier

Digital Forensic Research Workshop 2002
August 2002

Forensic Tool-Related Papers

Papers related to the design or development of forensic tools

Automated Digital Evidence Target Definition Using Outlier Analysis and Existing Evidence

Brian D. Carrier and Eugene H. Spafford

Digital Forensic Research Workshop 2005
August 2005

A Hardware-Based Memory Acquisition Procedure for Digital Investigations

Brian D. Carrier and Joe Grand

Journal of Digital Investigations 1(1)
March 2004
Voted "Best Academic Paper of the Year"

The Sleuth Kit Informer

Brian Carrier

Newsletter for The Sleuth Kit and other open source tools.
February 2003 to current

Performing an Autopsy Examination on FFS and EXT2FS Partition Images: An Introduction to TCTUTILs and the Autopsy Forensic Browser

Brian Carrier

SANSFIRE 2001
July 2001

Law-Related Papers

Some law-related papers I have been involved with.

The Trojan Horse Defense In Cybercrime Cases

Susan W. Brenner, Brian Carrier, and Jef Henninger

Santa Clara Computer & High Technology Law Journal 21(1)
November 2004

Open Source Digital Forensic Tools: The Legal Argument

Brian Carrier

@stake Research Report
October 2002

Other Security Papers

Other security papers, including my Master's thesis work on TCP traceback

The Session Token Protocol for Forensics and Traceback

Brian Carrier and Clay Shields

ACM Transactions on Information and System Security 7(3)
August 2004

Methods for Cluster-Based Incident Detection

Brian D. Carrier and Blake Matheny

Second IEEE International Information Assurance Workshop
April 2004

Implementing the Hypercube Quadratic Sieve with Two Large Primes

Brian Carrier and Samuel S. Wagstaff, Jr.

Proceedings of the International Conference on Number Theory for Secure Communications
December 2003

A Recursive TCP Session Token Protocol For Use in Computer Forensics and Traceback

Brian Carrier and Clay Shields

IEEE Infocom 2002
June 2002

A Recursive TCP Session Token Protocol For Use in Computer Forensics and Traceback

Brian Carrier

Master's Thesis from Purdue University
May 2001

Books

Books or chapters that I have been involved with.

File System Forensic Analysis

Brian Carrier

Addison Wesley, 2005

Know Your Enemy 2nd Ed

The Honeynet Project

Addison Wesley, 2004
I wrote Chapters 11 (Computer Forensics Basics) and 12 (Unix Computer Forensics)

Copyright © 2005-2009 by Brian Carrier