Phase 1 Individual Project

							  Phase 1 Individual Project



       Jai-san Williams



      CS376-1201C-02



   Object Oriented Methods



Professor Jeffrey A. Hedrington



       January 30, 2012
Client introduction:

Whodunit offers unique computer forensics services to a nationwide client base of businesses
and private individuals seeking evidence of specific kinds of computer use. Whodunit staff
members are experts in their specialized area of computer investigations, but they lack the
knowledge and skills to create the computer system needed to store and organize the
information they collect. Whodunit would like your company to design a system to help them
categorize, sort, store, and otherwise manipulate the thousands of artifacts they collect using
your well-known expertise in object-oriented analysis and design. Additional information
about Whodunit's needs shall be provided for each phase of the design process.



Problem identification:

There are many employees in whodunit who perform their respective job roles with
combination of disparate manual and computerized systems and techniques. The workflow is
well defined in each department and roles. But there is a need to centralize the overall
workflow of the company in a system accessible from anywhere. The workflow must
incorporate all the workflow artifacts and elements into the system. The system must be
secure with the role based profiles and using login authentication for accessing the system.

The actors involved are:

   1.   Administrator
   2.   Examiner s
   3.   Trainees
   4.   Sherrifs
   5.   Guest
   6.   director

The derived use cases are :

   1. Login to system
   2. Change password
   3. Logoff
   4. Search
   5. Create user account
   6. View activity
   7. View cases
   8. Settle cases
   9. Cross drive acquisition
   10. Live acquisition
   11. Deleted acquisition
   12. Volatile acquisition
   13. Create report
   14. View report
15. Create analysis
16. View analysis
Use Case Title: Login to system

Use case ID: UC01.1

Use Case Description:

The user wants to login to system to perform his desired task.

Actors:

Administrator, examiners, trainees, sherrifs, guest

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user clicks login.

The user account exists on system.

Task sequence                                     Exceptions
The user enters user id as assigned by the
administrator.
User enters password.                             The account credentials did not match.
User logins successfully.
User sees his profile page.


Post conditions:

User login metaddata is stored in activity log.

If there was unseccessfull attempt to login to system, a report will be sent to admin with
metadata.

The metadata for login include, ip addresses from where accessed, certificate data, browser
capabilities and version, hostname.

Unresolved issues:

If the user does not have account what should he do.
Use Case Title: Change password

Use case ID: UC01.2

Use Case Description:

The user wants to change his password, the first time password was generated by the system.

The system generated password is difficult generally, so user wants to select his own
password.

Actors:

Administrator, examiners, sherrifs.

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has logined successfully in the system.

The user clicks change password option in account settings.



Task sequence                                      Exceptions
User enters previous password
User enters new password
New password is entered again
User clicks confirm to make changes to his         Previous password is incorrect.
password.                                          The new password do not match
                                                   The new passwords entered does not comply
                                                   with the password competency requirements


Post conditions:

The user will be logged out , so that he can login again with new credentials.

Unresolved issues:

Password competeny requirements.
Use Case Title: Log Off

Use case ID: UC01.3

Use Case Description:

The user wants to log off from the system

Actors:

Administrator, examiners, sherrifs, trainees.

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system.

The user clicks log off



Task sequence                                     Exceptions
The user confirm log off.




Post conditions:

User is redirected to the home page of the company

Unresolved issues:
Use Case Title: Search

Use case ID: UC01.4

Use Case Description:

Search option is used to search all data through out the system. But the search targets are
limited according to the roles of the users. All artifacts and data are not accessible and
searcheable to all users. When an examiner is searching his search is limited to the sources
that he is entitled for my role definition. For example he can only search through the artifacts
on which he is assigned currently or previously. A guest can only search through publications
of the company.

Actors:

Examiner, trainee, sherrif, guest.

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system.

The user click search.



Task sequence                                     Exceptions
User scrolls through the list of the types of
data source to search from.
User selects type of source
User enters search keyword
User enters to let the system search and give
results


Post conditions:

The system returns a list of possible matches based on his search criteria.

Unresolved issues:
Use Case Title: create user account

Use case ID: UC01.5

Use Case Description:

All the users of the systems are first configured by the administrator for primary
authentication credentials.

Actors:

Administrator

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has been logined successfully in the system with administrator previliges.

Administrator clicks create new user



Task sequence                                    Exceptions
User enters bio data of the new user
User create authentication credentials
User selects the appropriate system role for     Role does not exist.
the new user.
Submits the form creation request.



Post conditions:

The requests are viewed by the director and await approval.

Unresolved issues:
Use Case Title: View Activity

Use case ID: UC01.6

Use Case Description:

All of the activities in the system are managed and saved for each user. These activities can be
viewed to determine the status of any on going case etc. The activities also include loggin in
the system and summary of all the actions performed being logged into the system.
Sometimes administrator can also view some activities to detect any anomaly in the system by
tracking all the sequence of actions trail.

Actors:

Examiner, director, administrator

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

User clicks view activity.



Task sequence                                     Exceptions
User scrolls from the list of type of activity.
User selects the appropriate type.




Post conditions:

System shows all the saved activity done on the selected entity.

Unresolved issues:
Use Case Title: View Cases

Use case ID: UC01.7

Use Case Description:

Users want to see the open cases for which investigation and processes are going on or see
previous settled cases.

Actors:

Director, examiner, trainee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

User clicks view case.




Task sequence                                     Exceptions
User enters case id
User can upload his artifacts in the cases that
are open
The user can delete artifacts.
The user can enter comments in the case.



Post conditions:

The changes made by user are saved and are reflected to other users also as changes made by
specific user at specific time.

Unresolved issues:
Use Case Title: Cross drive acquisition

Use case ID: UC01.9

Use Case Description:

In cross drive acquisition user uploads the data recovered from the hard drives to reference
later for analysis.

Actors:

Examiner, trainee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects cross drive acquisition link



Task sequence                                   Exceptions
User uploads the artifacts collected from the
physical hard drives.
User enters metadata associated with the
action
User can assign a person for performing
analysis on the acquisited data.


Post conditions:

The data is uploaded to the server with the metadata. The metadata include time of upload,
uploaded by user data, and ownership information.

Unresolved issues:
Use Case Title: Live acquisition

Use case ID: UC01.10

Use Case Description:

The user uses this for performing live artifacts acquisition. The extracted evidence is uploaded
for later analysis.

Actors:

Examiners, trainee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects cross live acquisition link




Task sequence                                   Exceptions
User uploads the artifacts extracted from the
operating system and upload on the
User provide other information associated
with the extraction.


Post conditions:

The data is uploaded to the server with the metadata. The metadata include time of upload,
uploaded by user data, and ownership information.



Unresolved issues:
Use Case Title: Deleted acquisition

Use case ID: UC01.11

Use Case Description:

The user uses this for performing deleted artifacts acquisition. The extracted evidence is
uploaded for later analysis.



Actors:

Examiner, trainee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects deleted acquisition link




Task sequence                                    Exceptions
User uploads the extracted deleted data
User adds associated data


Post conditions:

Data is uploaded on the server with the associated metadata.

An email is generated to the person responsible for analysis reporting the upload of artifact.

Unresolved issues:
Use Case Title: volatile acquisition

Use case ID: UC01.12

Use Case Description:

The user uses this for performing volatile artifacts acquisition. The extracted evidence is
uploaded for later analysis.



Actors:

Examiner, trainee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects deleted volatile acquisition link




Task sequence                                    Exceptions
User mark the directories containing the
volatile extracted data.
User enters metadata associated
User can assign a person as analyst to
perform analysis.


Post conditions:

Data is uploaded on the server with the associated metadata.

An email is generated to the person responsible for analysis reporting the upload of artifact.



Unresolved issues:
Use Case Title: Create Report

Use case ID: UC01.13

Use Case Description:

Report is an important part of work flow. Each work flow ends in a report. The report can be
generated from any module/part of the system.

Actors:

Examiner, administrator, trainees, director

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects create report link




Task sequence                                    Exceptions
User enters data for report in the rich text
editor online.
User can attach external supporting files.
User can tag tag users if he wants to restrict
the report to few users.


Post conditions:

The report is created and saved on report repository server. If the users has tagged other users
then a notification email willl be sent to the persons tagged.

Unresolved issues:
Use Case Title: View Report

Use case ID: UC01.14

Use Case Description:

The user can view reports previously created report. Each artifact has associated reports
which an examiner needs to see while examinig or referencing any artifact.

Actors:

Examiner, trainees, director

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects view report link




Task sequence                                   Exceptions
Report oopens in the new window
User add comments to the report.
User saves the view report




Post conditions:

Any additional data added as comments will be reported to the creator of the report.

And additional information will be saved for record.

Unresolved issues:
Use Case Title: create analysis

Use case ID: UC01.15

Use Case Description:

Create analysis will be used to automate the process of analysis on artifacts. All the tools
associated with the type of analysis will be available in the create analysis window.



Actors:

Examiner.

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects create analysis link




Task sequence                                    Exceptions
User run benchmarks and tools to perform
analysis
Comments are added to the analysis results.


Post conditions:

All the analysis and actions performed on the acquisited data targeted for analysis wil be
saved for referenced search.

Unresolved issues:
Use Case Title: View Analysis

Use case ID: UC01.16

Use Case Description:

A user can view analysis on an acquisited artifact. So that a case can be propagated for
finalization and settlement.

Actors:

Examiner, director, internee

Pre conditions:

The user must have certificate installed for accessing the web system

The user has internet accessibility.

The user has successfully logged in the system with appropriate privileges.

The user selects view analysis link




Task sequence                                   Exceptions
Analysis page opens
user can download analysis


Post conditions:



Unresolved issues:
References
Ambler, S. W. (2012, Jan 30). System Use Cases. Retrieved from Agile Modeling:
      http://www.agilemodeling.com/artifacts/systemUseCase.htm

gatherspace.com. (n.d.). Writing effective Use Case. Retrieved Jan 30, 2012, from
       gatherspace.com: http://www.gatherspace.com/static/use_case_example.html

Papworth, A. (n.d.). Use case narrative. Retrieved Jan 30, 2012, from
      businessanalystmentor.com: http://businessanalystmentor.com/2008/12/03/use-cases-
      the-use-case-narrative/