Abstract

The paper evaluates the suitability of the Rust ecosystem for forensic tool development. As a case study, a forensic tool named Stringsext is developed. Starting from analyzing the specefic requirements of forensic software in general and those of the present case study, all stages of the software development life-cycle are executed and evaluated. Stringsext is a re-implementation and enhancement of the GNU-strings tool, a widely used program in forensic investigations.

Stringsext recognizes Cyrillic, CJKV East Asian characters and other scripts in all supported multi-byte-encodings while GNU-strings fails in finding these in UTF-16 and other encodings. During the case study it has become apparent that the Rust ecosystem provides good support for secure coding principles and unit testing. Furthermore, the bench-marks showed a satisfactory performance of the resulting Stringsext binaries comparable to the original C version.

Getreu, Jens and Maennel, Olaf (2019) "Enhancing Forensic-Tool Security with Rust: Development of a String Extraction Utility," Journal of Digital Forensics, Security and Law: Vol. 14 : No. 2 , Article 4. Available at: https://commons.erau.edu/jdfsl/vol14/iss2/4