SaTC: EDU: Expanding Digital Forensics Education with Artifact Curation and Scalable, Accessible Artifact Exercises

在数字法医调查中，从业人员通常在数字法医文物中找到具有法医价值的数据。数字证据科学工作组(SWGDE)将人工制品定义为“由于使用显示过去活动的电子设备而产生的信息或数据”。然而，教育项目和资源没有跟上数字取证文物--这是现实世界调查的基石。从业者面临着他们遇到的数字法医文物的多样性和数量的挑战。这使得将文物整合到教育项目中的过程变得困难。几乎没有研究集中于创建可扩展的教育材料，教师可以使用这些材料来教授人工制品的管理和分析过程。这不仅造成了学术课程的学习差距，而且降低了学生毕业时拥有进行文物分析所需技能的可能性。社区需要一个细粒度的、经过验证的学术人工制品数据集，以及使用它们的学术练习。该项目将支持开发解决文物问题的教育材料，并将引导毕业生了解文物、它们是什么以及恢复主题的过程。通过利用过去在文物基因组项目(AGP)上的工作，研究人员将策划数字法医文物，并使用它们来设计可扩展的、自定进度的、开放的在线数字法医练习。此外，这项工作产生的文物将影响实践。这项工作将对世界各地的许多组织产生影响，包括私人组织、地方组织和联邦组织。这项工作还将通过将范式从只关注数据转储转向数字取证文物来影响数字取证教育。最后，随着时间的推移，文物的管理有助于探索与文物是什么、它们的本体论和定义相关的基本科学原则。这一奖项反映了NSF的法定使命，并通过使用基金会的智力价值和更广泛的影响审查标准进行评估，被认为值得支持。

In digital forensic investigations, practitioners typically find data of forensic value in digital forensic artifacts. The Scientific Working Group on Digital Evidence (SWGDE) defines an artifact as "Information or data created as a result of the use of an electronic device that shows past activity". However, educational programs and resources have not kept up with digital forensics artifacts - which are the cornerstone of real-world investigations. Practitioners face the challenge of the diversity and volume of digital forensic artifacts they encounter. This makes the process of integrating artifacts into educational programs difficult. Little to no research has focused on creating scalable educational material that may be employed by instructors to teach the process of artifact curation and analysis. This is not only causing a learning gap in academic programs but is decreasing the possibility of students graduating with the necessary skills to conduct artifact analysis upon graduation. The community needs a granular, validated academic artifact dataset as well as academic exercises that employ them. This project will support the development of educational materials to address the artifact problem and will lead to graduates that understand artifacts, what they are and the process of recovering them.By leveraging past work on the Artifact Genome Project (AGP), the researchers will curate digital forensic artifacts, and use them to design scalable, self-paced, open, online digital forensic exercises. Furthermore, artifacts produced from this work will impact practice. The work will have an impact on a multitude of organizations worldwide spanning private, local, and federal organizations. The work will also impact digital forensics education through a paradigm shift from focusing only on data dumps, to digital forensic artifacts. Lastly, the curation of artifacts over time aids in the exploration of the basic scientific principles related to what artifacts are, their ontology, and definition.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.