Solved

Digital Forensics

Posted on 2011-09-11
5
286 Views
Last Modified: 2012-05-12
Hi

can some one explain in details what the differences between Bit Stream Copy and Bit Stream image ? please don't just post links. i Google them but the definition on the internet quite confused ???


thanks
0
Comment
Question by:ang3lus
  • 2
  • 2
5 Comments
 
LVL 37

Assisted Solution

by:Gerwin Jansen
Gerwin Jansen earned 40 total points
ID: 36519786
Hi, where did you find your definitions? When I read both, 'bit stream copy' would refer to the process and 'bit stream image' in the result. Otherwise said, a bit stream copy method would give you a bit stream image. I also read about mirror or ghost images that do not always produce a forensic image of a drive as the applications used to create them may leave out not used sectors for example.
0
 
LVL 5

Accepted Solution

by:
ChopOMatic earned 85 total points
ID: 36520547
While I don't know where you're pulling the jargon from and thus don't have any context, as a fulltime digital forensic geek, I can share the following:

As I've heard it used most commonly over the years, the terms "bitstream copy" and "bitstream image" usually refer to exactly the same thing, that being what I prefer to call a forensic image. Either could be used to describe the process of creating the forensic image, ie. used as a verb. Either could also be used to describe the resulting forensic image, ie. used as a noun.

A forensic image is a file that contains an exact duplicate of the dataset from the source device. Every binary bit of data is copied, hence the term "bitstream." This process captures not only active files, but slack space, unallocated space, hidden files, etc.

Hope this helps...

Chop
0
 

Author Comment

by:ang3lus
ID: 36535588
First, thanks

Second, these defintions  that i found:

- A bit-stream image is a sector-by-sector / bit-by-bit copy of a hard drive. A bit-stream image is actually a set of files that can be used to create an exact copy of a hard drive, preserving all latent data in addition to the files and directory structures.  


- Bitstream Copying—is more commonly known as "backing up your data," and refers to the process of making an exact duplicate of a digital object. Though a necessary component of all digital preservation strategies, bitstream copying in itself is not a long-term maintenance technique, since it deals only with the question of data loss due to hardware and media failure, whether resulting from normal malfunction and decay, malicious destruction or natural disaster. Bitstream copying is often combined with remote storage so that the original and the copy are not subject to the same disastrous event.  <<http://www.icpsr.umich.edu/dpm/dpm-eng/terminology/strategies.html>>
0
 
LVL 5

Expert Comment

by:ChopOMatic
ID: 36536473
They say basically the same thing as we did, but in much more confusing language. :)
0
 

Author Closing Comment

by:ang3lus
ID: 36536634
thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
recover formated drive 7 305
Provider not found in jdk1.4 4 537
convert a raw dd to vmdk for virtualbox on windows 4 1,042
How does one repair damaged jpg files 9 159
The foremost challenge encountered by an investigator at the very beginning of a forensics investigation is, accessing a file/data to read/view its contents. Owing to the fact, a platform is necessary for both; opening as well as examining any file.…
In this era, as you know, cybercrime and other sorts of frauds using the internet has increased day by day. We should protect our information assets and confidential information from getting exploiting by the attacker or intruders. Most of the fraud…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now