Computer forensics in forensis
ACM SIGOPS Operating Systems Review
Matt Bishop
Sean Peisert
Toward a normative approach for forensicability