ASTM E2916-19
(Terminology)Standard Terminology for Digital and Multimedia Evidence Examination
Standard Terminology for Digital and Multimedia Evidence Examination
SIGNIFICANCE AND USE
3.1 This terminology includes general as well as discipline-specific definitions as they apply across the spectrum of image analysis, computer forensics, video analysis, forensic audio, and facial identification.
SCOPE
1.1 This is a compilation of terms and corresponding definitions used in the examination of digital and multimedia evidence to include the areas of computer forensics, image analysis, video analysis, forensic audio, and facial identification.
1.2 Legal or scientific terms that generally are understood or defined adequately in other readily available sources may not be included.
1.3 This international standard was developed in accordance with internationally recognized principles on standardization established in the Decision on Principles for the Development of International Standards, Guides and Recommendations issued by the World Trade Organization Technical Barriers to Trade (TBT) Committee.
General Information
Relations
Buy Standard
Standards Content (Sample)
NOTICE: This standard has either been superseded and replaced by a new version or withdrawn.
Contact ASTM International (www.astm.org) for the latest information
Designation: E2916 − 19
Standard Terminology for
1
Digital and Multimedia Evidence Examination
This standard is issued under the fixed designation E2916; the number immediately following the designation indicates the year of
original adoption or, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. A
superscript epsilon (´) indicates an editorial change since the last revision or reapproval.
1. Scope 3. Significance and Use
1.1 This is a compilation of terms and corresponding 3.1 This terminology includes general as well as discipline-
definitions used in the examination of digital and multimedia
specific definitions as they apply across the spectrum of image
evidence to include the areas of computer forensics, image
analysis, computer forensics, video analysis, forensic audio,
analysis, video analysis, forensic audio, and facial identifica-
and facial identification.
tion.
4. Terminology: Terms and Definitions
1.2 Legalorscientifictermsthatgenerallyareunderstoodor
defined adequately in other readily available sources may not
4.1 Definitions:
be included.
achievable resolution, resolving power, n—the measure of
1.3 This international standard was developed in accor- imaging system’s practical limit to distinguish between
separate adjacent elements, typically by imaging a known
dance with internationally recognized principles on standard-
ization established in the Decision on Principles for the reference standard.
Development of International Standards, Guides and Recom-
acquisition, n—in computer forensics, the process of using an
mendations issued by the World Trade Organization Technical
access interface to read digital data from a digital source and
Barriers to Trade (TBT) Committee.
to create a destination object.
2. Referenced Documents
ad hoc image, n—see uncontrolled image.
2
2.1 ANSI/NIST Standards:
allocated space, allocated storage, n—in computer forensics,
ANSI/NIST-ITL 1-2011 Data Format for the Interchange of
the portions of storage that are assigned or reserved for
Fingerprint, Facial, and Other Biometric Information
active instructions or for data.
NIST SP 800-86 Guide to Integrating Forensic Techniques
IEEE 100-2000, (C) 610.10-1994w
into Incident Response
anthropometric analysis, n—in facial identification,anex-
NIST SP 800-88 Guidelines for Media Sanitization
3 plicit measurement of landmarks on a face and a comparison
2.2 IEEE Standards:
of these measurements between two samples.
IEEE 100-2000 The Authoritative Dictionary of IEEE Stan-
dards Terms, 7th Edition
anti-forensics, n—the application of a process to modify,
4
2.3 ISO Standards:
conceal or destroy information to inhibit or prevent the
ISO/IEC 10918-1:1994 Information Technology — Digital effectiveness of forensic science examinations.
Compression and Coding of Continuous-Tone Still Im-
archive image, n—in computer forensics,a bit stream dupli-
ages: Requirements and Guidelines
cate of data placed on media that is suitable for long-term
storage.
1
This terminology is under the jurisdiction of ASTM Committee E30 on
artifact, n—a by-product, artificial feature, or change resulting
Forensic Sciences and is the direct responsibility of Subcommittee E30.12 on
from human activity or a technical process. (Compare
Digital and Multimedia Evidence.
noise.)
Current edition approved March 1, 2019. Published March 2019. Originally
approved in 2013. Last previous edition approved in 2018 as E2916 – 18. DOI:
DISCUSSION—Examples include speckles in a scanned picture,
10.1520/E2916-19.
“blocking” in compressed images, distortion in over-saturated audio,
2
Available from National Institute of Standards and Technology (NIST), 100
and the automatic creation of temporary files due to normal usage of a
Bureau Dr., Stop 1070, Gaithersburg, MD 20899-1070, http://www.nist.gov.
computer.
3
Available from Institute of Electrical and Electronics Engineers, Inc. (IEEE),
445 Hoes Ln., Piscataway, NJ 08854, http://www.ieee.org.
aspect ratio, n—the ratio of the width to the height of a
4
Available from International Organization for Standardization (ISO), ISO
rectangle, such as an image, a pixel, or an active video
Central Secretariat, BIBC II, Chemin de Blandonnet 8, CP 401, 1214 Vernier,
Geneva, Switzerland, http://www.iso.org. frame.
Copyright © ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United States
1
---------------------- Page: 1 ----------------------
E2916 − 19
attempt, n—in facial identification, a submission of a single carve, v—in computer forensics, to extract a portion of data for
set of biometric samples to a biometric system for identifi- the purpose of analysis.
cation or verification. (Compare biometric search.)
certification authority, n—(1) in computer forensics, a trusted
third party ent
...
This document is not an ASTM standard and is intended only to provide the user of an ASTM standard an indication of what changes have been made to the previous version. Because
it may not be technically possible to adequately depict all changes accurately, ASTM recommends that users consult prior editions as appropriate. In all cases only the current version
of the standard as published by ASTM is to be considered the official document.
Designation: E2916 − 18 E2916 − 19
Standard Terminology for
1
Digital and Multimedia Evidence Examination
This standard is issued under the fixed designation E2916; the number immediately following the designation indicates the year of
original adoption or, in the case of revision, the year of last revision. A number in parentheses indicates the year of last reapproval. A
superscript epsilon (´) indicates an editorial change since the last revision or reapproval.
1. Scope
1.1 This is a compilation of terms and corresponding definitions used in the examination of digital and multimedia evidence to
include the areas of computer forensics, image analysis, video analysis, forensic audio, and facial identification.
1.2 Legal or scientific terms that generally are understood or defined adequately in other readily available sources may not be
included.
1.3 This international standard was developed in accordance with internationally recognized principles on standardization
established in the Decision on Principles for the Development of International Standards, Guides and Recommendations issued
by the World Trade Organization Technical Barriers to Trade (TBT) Committee.
2. Referenced Documents
2
2.1 ANSI/NIST Standards:
ANSI/NIST-ITL 1-2011 Data Format for the Interchange of Fingerprint, Facial, and Other Biometric Information
NIST SP 800-86 Guide to Integrating Forensic Techniques into Incident Response
NIST SP 800-88 Guidelines for Media Sanitization
3
2.2 IEEE Standards:
IEEE 100-2000 The Authoritative Dictionary of IEEE Standards Terms, 7th Edition
4
2.3 ISO Standards:
ISO/IEC 10918-1:1994 Information Technology — Digital Compression and Coding of Continuous-Tone Still Images:
Requirements and Guidelines
3. Significance and Use
3.1 This terminology includes general as well as discipline-specific definitions as they apply across the spectrum of image
analysis, computer forensics, video analysis, forensic audio, and facial identification.
4. Terminology: Terms and Definitions
4.1 Definitions:
achievable resolution, resolving power, n—the measure of imaging system’s practical limit to distinguish between separate
adjacent elements, typically by imaging a known reference standard.
acquisition, n—in computer forensics, the process of using an access interface to read digital data from a digital source and to
create a destination object.
ad hoc image,n—see uncontrolled image.
allocated space, allocated storage, n—in computer forensics, the portions of storage that are assigned or reserved for active
instructions or for data.
IEEE 100-2000, (C) 610.10-1994w
1
This terminology is under the jurisdiction of ASTM Committee E30 on Forensic Sciences and is the direct responsibility of Subcommittee E30.12 on Digital and
Multimedia Evidence.
Current edition approved Nov. 1, 2018March 1, 2019. Published November 2018March 2019. Originally approved in 2013. Last previous edition approved in 20132018
as E2916 – 13.18. DOI: 10.1520/E2916-18.10.1520/E2916-19.
2
Available from National Institute of Standards and Technology (NIST), 100 Bureau Dr., Stop 1070, Gaithersburg, MD 20899-1070, http://www.nist.gov.
3
Available from Institute of Electrical and Electronics Engineers, Inc. (IEEE), 445 Hoes Ln., Piscataway, NJ 08854, http://www.ieee.org.
4
Available from International Organization for Standardization (ISO), ISO Central Secretariat, BIBC II, Chemin de Blandonnet 8, CP 401, 1214 Vernier, Geneva,
Switzerland, http://www.iso.org.
Copyright © ASTM International, 100 Barr Harbor Drive, PO Box C700, West Conshohocken, PA 19428-2959. United States
1
---------------------- Page: 1 ----------------------
E2916 − 19
anthropometric analysis, n—in facial identification, an explicit measurement of landmarks on a face and a comparison of these
measurements between two samples.
anti-forensics, n—the application of a process to modify, conceal or destroy information to inhibit or prevent the effectiveness of
forensic science examinations.
archive image, n—in computer forensics, a bit stream duplicate of data placed on media that is suitable for long-term
storagestorage.
artifact, n—a by-product, artificial feature, or change resulting from human activity or a technical process. (Compare noise.)
DISCUSSION—
Examples include speckles in a scanned picture, “blocking” in compressed images, distortion in over-saturated audio, and the automatic creation of
temporary files due to normal usage of a computer.
aspect ratio, n—the ratio of the width to the height of a rectangle, such as an image, a pixel, or an active video frame.
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.