Section: Software and Platforms

Derric

Participants : Tijs Van Der Storm, Jeroen Van Den Bos [correspondent] .

Characterization:

A-2-up3, SO-4, SM-2-up3, EM-3, SDL-3-up4, OC-DA-3-CD-3-MS-3-TPM-3.

WWW:

http://www.derric-lang.org

Objective:

Encapsulate all the variability in the construction of so-called “carving” algorithms, then generate the fastest and most accurate implementations. Carving algorithms recover information that has been deleted or otherwise scrambled on digital media such as hard-disks, usb sticks and mobile phones.

Users:

Digital forensic investigation specialists

Impact:

Derric has the potential of revolutionizing the carving area. It does in 1500 lines of code what other systems need tens of thousands of lines for with the same accuracy. Derric will be an enabler for faster, more specialized and more successful location of important evidence material.

Competition:

Derric competes in a small market of specialized open-source and commercial carving tools.

Engineering:

Derric is a Rascal program of 1.5 kloc designed by two persons.

Publications:

[35] , [34] [14] , [16] , [15]

Novelties

• Construction of a 1TB benchmark based on Wikipedia images.

• The Derric DSL for digital forensics now features Trinity, a runtime IDE to debug file format descriptions [35] .