Mark Hartong Rajni Goel Duminda Wijesekera 255-265 2007 IFIP Int. Conf. Digital Forensics http://dx.doi.org/10.1007/978-0-387-73742-3_18 conf/ifip11-9/2007 db/conf/ifip11-9/df2007.html#HartongGW07