|
The
Forensics Aspects of Event Data Recorders
Jeremy S. Daily
University of Tulsa
600 S. College Ave.
Tulsa, OK 74104
918-631-3056
jeremy-daily@utulsa.edu
Nathan Singleton
University of Tulsa
600 S. College Ave.
Tulsa, OK 74104
918-631-3056
nathan-singleton@utulsa.edu
Elizabeth Downing
Digital Forensics Professionals, Inc.
401 S. Boston Ave. Ste. 1701
Tulsa, OK 74103
918-856-5337
Beth.downing@dfpinc.com
Gavin W. Manes
Digital Forensics Professionals, Inc.
401 S. Boston Ave. Ste. 1701
Tulsa, OK 74103
918-856-5337
Gavin.manes@dfpinc.com
(Corresponding Author)
ABSTRACT
The proper generation and preservation
of digital data from Event Data Recorders (EDRs) can provide
invaluable evidence to automobile crash reconstruction
investigations. However, data collected from the EDR can be
difficult to use and authenticate, complicating the presentation
of such information as evidence in legal proceedings. Indeed,
current techniques for removing and preserving such data do not
meet the court’s standards for electronic evidence.
Experimentation with an EDR unit from a 2001 GMC Sierra pickup
truck highlighted particular issues with repeatability of
results. Fortunately, advances in the digital forensics field
and memory technology can be applied to EDR analysis in order to
provide more complete and usable data. The presented issues
should assist in the identification and development of a model
for forensically sound collection and investigation techniques
for EDRs.
Keywords: Event Data Recorder,
Digital Forensics, Evidence Production, Civil Procedure, Crash
Reconstruction
|