Sarah Morris

Teaching Assistant / PhD Student
Location: Shrivenham campus
E: s.l.morris@cranfield.ac.uk
T: +44 (0)1793 785098
Department of Engineering and Applied Science


Current activities

Sarah is currently doing PhD research into the strengths, weaknesses and reliability of forensic artefacts recovered from operating system thumbnail caches. The research looks at both live and thumbnail cache files from operating systems such as Ubuntu, Kubuntu, Windows XP, Vista and 7. In order to assess the artefacts recoverable from thumbnail cache file fragments Sarah is also looking at various file carving methods.

As an active STEMnet ambassador, Sarah has created several lessons in different aspects of Forensic Computing which she delivers to students aged 8-18 throughout the local area. She has also developed a one day Forensic Computing Workshop for secondary school pupils called “The mystery of the stolen artwork”; the workshop gives pupils a chance to work through an investigation and explores key computing concepts and links in to the national curriculum.

Background

  • BSc(hons) Computer Science, University of Nottingham
  • Experience Teaching Computing / ICT to pupils aged 11-18
  • Student member of the British Computer Society
  • Registered STEMnet Ambassado

Selected publications

Morris, S. (2010) “A comparative study of the structure and behaviour of the operating system thumbnail caches used in Kubuntu and Ubuntu (9.10 and 10.04)”. Proceedings from 4th Cybercrime Forensics Education & Training. Canterbury Christ Church University, Canterbury, UK.

Morris, S. (2010) “Forensic Computing: A day of investigation” (Poster Presentation).  Computing At School Conference 2010, University of Birmingham, UK