{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,20]],"date-time":"2026-03-20T17:59:55Z","timestamp":1774029595409,"version":"3.50.1"},"reference-count":37,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2023,9,30]],"date-time":"2023-09-30T00:00:00Z","timestamp":1696032000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Digital Threats"],"published-print":{"date-parts":[[2023,9,30]]},"abstract":"<jats:p>\n            Digital investigations are largely concerned with reconstructing past events based on traces in digital systems. Given their importance, many concepts have been established to describe their quality\u2014most of them concerned with procedural aspects, i.e., authenticity and integrity, for example. Besides that, there exist principal concepts that have been overlooked in the past: Two of those criteria are\n            <jats:italic>relevance<\/jats:italic>\n            and\n            <jats:italic>expressiveness<\/jats:italic>\n            of digital evidence. Unlike others, those are directly concerned with reaching the investigative goal. Therefore, we approach these two overlooked concepts of digital evidence by giving formal definitions. To illustrate the usefulness, we present two applications: First, we demonstrate that the notions of expressiveness and completeness can be used to guide investigations by presenting the\n            <jats:italic>Facet-oriented Criminalistic Cycle<\/jats:italic>\n            as a thinking model, which extends the well-established criminalistic cycle. Second, we put the concepts into practice by calculating the expressiveness of facets from a state machine representation of a digital system utilizing temporal logic and a model checker. Furthermore, we sketch out the implications of this improved way of defining relevance and expressiveness. Accordingly, this article aims to improve the understanding of these critical aspects of the overall investigative process.\n          <\/jats:p>","DOI":"10.1145\/3608485","type":"journal-article","created":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T12:26:35Z","timestamp":1689251195000},"page":"1-16","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["A Formal Treatment of Expressiveness and Relevanceof Digital Evidence"],"prefix":"10.1145","volume":"4","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1862-2900","authenticated-orcid":false,"given":"Jan","family":"Gruber","sequence":"first","affiliation":[{"name":"Department of Computer Science, Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2251-8519","authenticated-orcid":false,"given":"Merlin","family":"Humml","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU), Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,10,6]]},"reference":[{"key":"e_1_3_2_2_2","first-page":"784","article-title":"Criminalistics is reasoning backwards","volume":"85","author":"Berger Charles","year":"2010","unstructured":"Charles Berger. 2010. Criminalistics is reasoning backwards. Nederl. Jurist. 85, 13 (2010), 784\u2013789.","journal-title":"Nederl. Jurist."},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1093\/oso\/9780198859307.003.0014"},{"key":"e_1_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2006.06.011"},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45657-0_29"},{"issue":"6","key":"e_1_3_2_6_2","first-page":"339","article-title":"Characteristic evidence, counter evidence and reconstruction problems in forensic computing","volume":"57","author":"Dewald Andreas","year":"2015","unstructured":"Andreas Dewald. 2015. Characteristic evidence, counter evidence and reconstruction problems in forensic computing. it Inf. Technol. 57, 6 (2015), 339\u2013346.","journal-title":"it Inf. Technol."},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2004.03.001"},{"key":"e_1_3_2_8_2","volume-title":"Handbuch Der Kriminalistik: Wissenschaft und Praxis Des Verbrechensbek\u00e4mpfung","author":"Gross Hans","year":"1977","unstructured":"Hans Gross and Friedrich Geerds. 1977. Handbuch Der Kriminalistik: Wissenschaft und Praxis Des Verbrechensbek\u00e4mpfung. M. Pawlak."},{"key":"e_1_3_2_9_2","first-page":"1","volume-title":"Proceedings of the Digital Forensics Research Conference Europe (DFRWS EU\u201923)","author":"Gruber Jan","year":"2023","unstructured":"Jan Gruber, Merlin Humml, Lutz Schr\u00f6der, and Felix C. Freiling. 2023. Formal verification of necessary and sufficient evidence in forensic event reconstruction. In Proceedings of the Digital Forensics Research Conference Europe (DFRWS EU\u201923), Edita Bajramovic and Ricardo J. Rodr\u00edguez (Eds.). dfrws.org, Bonn, 1\u201311."},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.fsidi.2022.301438"},{"key":"e_1_3_2_11_2","volume-title":"Assessing the Reliability of Digital Evidence from Live Investigations Involving Encryption.","author":"Hargreaves Christopher James","year":"2009","unstructured":"Christopher James Hargreaves. 2009. Assessing the Reliability of Digital Evidence from Live Investigations Involving Encryption.Ph.D. Dissertation. Cranfield University, UK."},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.4103\/2349-5014.164662"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1016\/S0379-0738(02)00031-2"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-11534-9_9"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.forsciint.2021.110941"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.2307\/1141173"},{"key":"e_1_3_2_17_2","volume-title":"Crime Investigation (2nd ed.)","author":"Kirk Paul L.","year":"1974","unstructured":"Paul L. Kirk. 1974. Crime Investigation (2nd ed.). John Wiley & Sons."},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84927-0_22"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1080\/00450618.2011.555418"},{"key":"e_1_3_2_20_2","doi-asserted-by":"crossref","first-page":"30","DOI":"10.4324\/9781315541945-3","volume-title":"The Routledge International Handbook of Forensic Intelligence and Criminology","author":"Margot Pierre","year":"2017","unstructured":"Pierre Margot. 2017. Traceology, the bedrock of forensic science and its associated semantics. In The Routledge International Handbook of Forensic Intelligence and Criminology. Routledge, 30\u201339."},{"key":"e_1_3_2_21_2","doi-asserted-by":"publisher","DOI":"10.1002\/wfs2.1472"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.01.016"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-99277-8_1"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1080\/20961790.2020.1837429"},{"key":"e_1_3_2_25_2","volume-title":"Proceedings of the 4th International Conference on Cybercrime Forensics Education & Training (CFET\u201910)","author":"Overill Richard E.","year":"2010","unstructured":"Richard E. Overill and Jantje A. M. Silomon. 2010. Digital meta-forensics: Quantifying the investigation. In Proceedings of the 4th International Conference on Cybercrime Forensics Education & Training (CFET\u201910)."},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2012.17"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2010.42"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/SADFE.2013.6911547"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1977.32"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/1066677.1066745"},{"key":"e_1_3_2_31_2","doi-asserted-by":"crossref","first-page":"136","DOI":"10.4324\/9781315541945-12","volume-title":"The Routledge International Handbook of forensic Intelligence and Criminology","author":"Ribaux Olivier","year":"2017","unstructured":"Olivier Ribaux and Stefano Caneppele. 2017. Forensic intelligence. In The Routledge International Handbook of forensic Intelligence and Criminology. Routledge, 136\u2013148."},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1111\/1556-4029.14860"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.07.006"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00113-9"},{"key":"e_1_3_2_35_2","volume-title":"Criminal Investigation : An Introduction to Principles and Practice","author":"Stelfox Peter","year":"2009","unstructured":"Peter Stelfox. 2009. Criminal Investigation : An Introduction to Principles and Practice. Willan, Cullompton."},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33962-2_7"},{"key":"e_1_3_2_37_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2019.01.021"},{"key":"e_1_3_2_38_2","volume-title":"Kriminalistisches Denken (10th ed.)","author":"Walder Hans","year":"2016","unstructured":"Hans Walder and Thomas Hansjakob. 2016. Kriminalistisches Denken (10th ed.). Kriminalistik, C.F. M\u00fcller."}],"container-title":["Digital Threats: Research and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3608485","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3608485","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:29:46Z","timestamp":1750285786000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3608485"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,30]]},"references-count":37,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2023,9,30]]}},"alternative-id":["10.1145\/3608485"],"URL":"https:\/\/doi.org\/10.1145\/3608485","relation":{},"ISSN":["2692-1626","2576-5337"],"issn-type":[{"value":"2692-1626","type":"print"},{"value":"2576-5337","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9,30]]},"assertion":[{"value":"2023-06-02","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-06-26","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-10-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}