{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T16:24:06Z","timestamp":1781108646062,"version":"3.54.1"},"reference-count":24,"publisher":"IGI Global Scientific Publishing","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017,10,1]]},"abstract":"<p>Digital forensic methodology deviates significantly relative to the methods of other forensic sciences for numerous practical reasons, and it has been largely influenced by factors derived from the inception and evolution of this relatively new and rapidly changing field. Digital forensics methodology was developed more by practitioners in its early days rather than by computer scientists. This led to accepted best practices in the field that may not represent the best or, at least, tested, science. This paper explores some of these differences in the practice and evolution between digital and other forensic sciences, and recommends scientific approaches to apply to many digital forensic practice rituals.<\/p>","DOI":"10.4018\/ijitn.2017100101","type":"journal-article","created":{"date-parts":[[2017,8,15]],"date-time":"2017-08-15T12:28:58Z","timestamp":1502800138000},"page":"1-9","source":"Crossref","is-referenced-by-count":0,"title":["Exploring Myths in Digital Forensics"],"prefix":"10.4018","volume":"9","author":[{"given":"Gary C.","family":"Kessler","sequence":"first","affiliation":[{"name":"Embry-Riddle Aeronautical University, Daytona Beach, FL, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gregory H.","family":"Carlton","sequence":"additional","affiliation":[{"name":"California State Polytechnic University, Pomona, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"2432","reference":[{"key":"IJITN.2017100101-0","unstructured":"ACPO Association of Chief Police Officers. (2012). Good practice guide for digital evidence Version 5. Retrieved February 2, 2016 from http:\/\/library.college.police.uk\/docs \/acpo\/digital-evidence-2012.pdf"},{"key":"IJITN.2017100101-1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2006.37"},{"key":"IJITN.2017100101-2","author":"E.Casey","year":"2011","journal-title":"Digital Evidence and Computer Crime"},{"key":"IJITN.2017100101-3","first-page":"187","author":"E.Casey","year":"2011","journal-title":"Conducting digital investigations. Digital Evidence and Computer Crime"},{"key":"IJITN.2017100101-4","author":"F.Cohen","year":"2012","journal-title":"Digital Forensic Evidence Examination"},{"key":"IJITN.2017100101-5","unstructured":"Daubert v. Merrill Dow Pharmaceuticals (1993). 509 U.S. 579."},{"key":"IJITN.2017100101-6","unstructured":"Forensic Focus. (2010). Connecting a USB device without a write-blocker. Retrieved February 2, 2016 from http:\/\/www.forensicfocus.com\/Forums\/viewtopic\/t=5809\/"},{"key":"IJITN.2017100101-7","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.84"},{"key":"IJITN.2017100101-8","unstructured":"Henry, P. (2009). Best practices in digital evidence collection. SANS DFIR. Retrieved February 1, 2016 from http:\/\/digital-forensics.sans.org\/blog\/2009\/09\/12\/best-practices-in-digital-evidence-collection\/"},{"key":"IJITN.2017100101-9","doi-asserted-by":"crossref","unstructured":"Kessler, G.C. (2015). Are mobile device examinations practiced like 'forensics'? Digital Evidence and Electronic Signature Law Review, (12).","DOI":"10.14296\/deeslr.v12i0.2237"},{"key":"IJITN.2017100101-10","article-title":"The impact of MD5 hash collisions on digital forensic imaging.","author":"G. C.Kessler","journal-title":"Journal of Digital Forensics, Security, and Law"},{"issue":"3","key":"IJITN.2017100101-11","first-page":"51","article-title":"An analysis of forensic imaging in the absence of write-blockers. Journal of Digital Forensics","volume":"9","author":"G. C.Kessler","year":"2014","journal-title":"Security and Law"},{"key":"IJITN.2017100101-12","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-382165-2.00124-0"},{"key":"IJITN.2017100101-13","unstructured":"Kumho Tire v. Carmichael (1999). 526 U.S. 137."},{"key":"IJITN.2017100101-14","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2010.03.001"},{"key":"IJITN.2017100101-15","unstructured":"National Institute of Standards and Technology (NIST). (2001). General Test Methodology for Computer Forensics Tools. Version 1.9. Gaithersburg (MD): U.S. Department of Commerce. Retrieved February 1, 2016 from http:\/\/www.cftt.nist.gov\/Test Methodology 7.doc"},{"key":"IJITN.2017100101-16","unstructured":"National Institute of Standards and Technology (NIST). (2014). Software Write Block Web page. Gaithersburg (MD): U.S. Department of Commerce, Computer Forensics Tool Testing program. Retrieved February 1, 2016 from http:\/\/www.cftt.nist.gov\/software_write_block.htm"},{"key":"IJITN.2017100101-17","unstructured":"National Institute of Standards and Technology (NIST). (2016). Hardware Write Block Web page. Gaithersburg (MD): U.S. Department of Commerce, Computer Forensics Tool Testing program. Retrieved February 1, 2016 from http:\/\/www.cftt.nist.gov\/hardware_write_block.htm"},{"key":"IJITN.2017100101-18","author":"B.Nelson","year":"2015","journal-title":"Guide to Computer Forensics and Investigations"},{"key":"IJITN.2017100101-19","unstructured":"Palmer, G. (2001). A road map for digital forensic research (DTR-T001-01 Technical Report). Utica (NY): Digital Forensics Research Workshop (DFRWS). Retrieved from http:\/\/www.dfrws.org\/2001\/dfrws-rm-final.pdf"},{"key":"IJITN.2017100101-20","unstructured":"Petherick, W. A., Turvey, B. E., & Ferguson, C. E. (2010). Forensic Criminology. London: Elsevier Academic Press. Retrieved February 2, 2016, from http:\/\/aboutforensics.co.uk\/edmond-locard"},{"key":"IJITN.2017100101-21","unstructured":"SWGDE Scientific Working Group on Digital Evidence. (2006). Best practices for computer forensics. Version 2.1. Retrieved February 1, 2016 from http:\/\/www.oas.org\/juridico\/spanish\/cyb_best_pract.pdf"},{"key":"IJITN.2017100101-22","doi-asserted-by":"crossref","unstructured":"Wang, X., Feng, D., Lai, X., & Yu, H. (2004). Collisions for hash functions MD4, MD5, HAVAL-128 and RIPEMD. International Association for Cryptologic Research. Retrieved February 1, 2016 from http:\/\/eprint.iacr.org\/2004\/199.pdf","DOI":"10.1007\/11426639_1"},{"key":"IJITN.2017100101-23","doi-asserted-by":"crossref","unstructured":"Wang, X. Y. and Yu, H. B. (2005). How to break MD5 and other hash functions. In Advances in Cryptology\u2013Eurocrypt (pp. 19-35).","DOI":"10.1007\/11426639_2"}],"container-title":["International Journal of Interdisciplinary Telecommunications and Networking"],"original-title":[],"language":"ng","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=188434","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,6]],"date-time":"2022-05-06T12:05:45Z","timestamp":1651838745000},"score":1,"resource":{"primary":{"URL":"https:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/IJITN.2017100101"}},"subtitle":["Separating Science From Ritual"],"short-title":[],"issued":{"date-parts":[[2017,10,1]]},"references-count":24,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2017,10]]}},"URL":"https:\/\/doi.org\/10.4018\/ijitn.2017100101","relation":{},"ISSN":["1941-8663","1941-8671"],"issn-type":[{"value":"1941-8663","type":"print"},{"value":"1941-8671","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,10,1]]}}}