Iowa State University Capstones, Theses and Graduate Theses and Dissertations Dissertations 2020 Digital forensic imaging: A quasi-experimental comparison of simulator to traditional training Douglas G. Elrick Iowa State University Follow this and additional works at: https://lib.dr.iastate.edu/etd Recommended Citation Elrick, Douglas G., "Digital forensic imaging: A quasi-experimental comparison of simulator to traditional training" (2020). Graduate Theses and Dissertations. 17992. https://lib.dr.iastate.edu/etd/17992 This Thesis is brought to you for free and open access by the Iowa State University Capstones, Theses and Dissertations at Iowa State University Digital Repository. It has been accepted for inclusion in Graduate Theses and Dissertations by an authorized administrator of Iowa State University Digital Repository. For more information, please contact [email protected]. Digital forensic imaging: A quasi-experimental comparison of simulator to traditional training by Douglas G. Elrick A dissertation submitted to the graduate faculty in partial fulfillment of the requirements for the degree of DOCTOR OF PHILOSOPHY Major: Education (Curriculum and Instructional Technology) Program of Study Committee: Constance Hargrave, Major Professor Larysa Nadolny Doug Jacobson Stephen Gilbert Doug Wieczorek The student author, whose presentation of the scholarship herein was approved by the program of study committee, is solely responsible for the content of this dissertation. The Graduate College will ensure this dissertation is globally accessible and will not permit alterations after a degree is conferred. Iowa State University Ames, Iowa 2020 Copyright © Douglas G. Elrick, 2020. All rights reserved. ii DEDICATION For my family and friends who have given me so much support. This is especially for my loving wife, Lori, who has encouraged, sacrificed, and helped me throughout this process. For my immediate family members who have been the biggest cheerleaders for me, thank you, and I love you all. For my church family has lifted me up in their prayers. Thank you all so very much. iii TABLE OF CONTENTS Page LIST OF FIGURES ....................................................................................................................... vi LIST OF TABLES ........................................................................................................................ vii ACKNOWLEDGMENTS ........................................................................................................... viii ABSTRACT ................................................................................................................................... ix INTRODUCTION TO THE STUDY .......................................................................1 Background ................................................................................................................................ 1 Increased Use of Online Education ...................................................................................... 1 Procedural Knowledge Development ................................................................................... 5 Use of Simulations to Teach Procedural Knowledge ........................................................... 6 Digital Forensics ........................................................................................................................ 8 Needs Assessments in Digital Forensics .............................................................................. 9 Summary .................................................................................................................................. 15 Statement of the Problem ........................................................................................................ 16 Purpose of the Study ................................................................................................................ 16 Research Questions .................................................................................................................. 17 Conceptual Framework ............................................................................................................ 17 Overview of Research Methods .............................................................................................. 18 Definition of Terms ................................................................................................................. 18 LITERATURE REVIEW .......................................................................................20 Literature Review on Learning Theories and Simulators ........................................................ 20 Literature Review on Studies in Digital Forensic Simulators ................................................. 24 Review of Research on Training Simulator Usage in Engineering, Medical Services, and Law Enforcement .................................................................................................................... 28 Effective Use of Simulations in Engineering ..................................................................... 33 Effective Use of Simulators in Medical Training .............................................................. 37 Effective Use of Simulators in Law Enforcement .............................................................. 44 A Detractor to Simulation Training.................................................................................... 46 Summary .................................................................................................................................. 48 CHAPTER 3 DESIGN, DEVELOPMENT AND PILOT TEST OF DIGITAL FORENSIC IMAGING SIMULATOR .............................................................................................................50 Design of the Digital Forensic Imaging Simulator .................................................................. 50 Analysis .............................................................................................................................. 51 Design ................................................................................................................................. 51 Development ...................................................................................................................... 58 Implementation and Evaluation.......................................................................................... 58 DFIS Experience For Users: Description of Simulated Forensic Data Acquisition ................ 59 Before Beginning the simulation ........................................................................................ 59 iv Logging in to DFIS............................................................................................................. 59 Instructions for the User and Case Description .................................................................. 60 Purchasing Imaging Equipment ......................................................................................... 61 Onsite Decisions to Make at the Digital Crime Scene ....................................................... 63 Task Support....................................................................................................................... 64 Duplication Method Decision ............................................................................................ 65 Drive Imaging Process with Trouble-shooting .................................................................. 66 Simulated Imaging Time Versus Real-Time ...................................................................... 67 Completing the Imaging Task ............................................................................................ 68 Final Imaging Assessment.................................................................................................. 69 DFIS Log Files ................................................................................................................... 70 Summary of the Design and User Experience.................................................................... 70 Pilot Testing With DFIS .......................................................................................................... 71 Law Enforcement Pilot ....................................................................................................... 71 College Student Pilot Study ............................................................................................... 73 Research Methodology: Comparison between Simulator Training and Hands-on Training ................................................................................................................................... 76 Summary .................................................................................................................................. 77 CHAPTER 4. RESULTS OF THE QUASI-EXPERIMENTAL DESIGN STUDY .....................78 Statement of the Problem ........................................................................................................ 78 Purpose of the Study ................................................................................................................ 79 Research Study Details ............................................................................................................ 79 Research Question and Hypothesis .................................................................................... 79 Results ....................................................................................................................................