FORZA - Digital forensics investigation framework that incorporate legal issues

Summary Digital forensics is essential for the successful prosecution of digital criminals which involve diverse digital devices such as computer system devices, network devices, mobile devices and storage devices. The digital forensic investigation must be retrieved to obtain the evidence that will be accepted in the court of law. Therefore, for digital forensic investigation to be performed successfully, there are a number of important steps that have to be taken into consideration. The aim of this paper is to produce the mapping process between the processes/activities and output for each phase in Digital Forensic Investigation Framework (DFIF). Existing digital forensic frameworks will be reviewed and then the mapping is constructed. The result from the mapping process will provide a new framework to optimize the whole investigation process.

/pdf/mapping-process-of-digital-forensic-investigation-framework-4oj7jwy43l.pdf

Mapping Process of Digital Forensic Investigation Framework

Summary With the proliferation of the digital crime around the world, numerous digital forensic investigation models already being develop .In fact many of the digital forensic investigation model focus on technical implementation of the investigation process as most of it develop by traditional forensic expert and technologist. As an outcome of this problem most of the digital forensic practitioners focus on technical aspect and forget the core concept of digital forensic investigation model .In this paper we are introducing a new digital forensic model which will be capture a full scope of an investigation process based on Malaysia Cyber Law .The proposed model is also compared with the existing model which currently available and being apply in the investigation process.

/pdf/digital-forensic-model-based-on-malaysian-investigation-3e7dk5uwy2.pdf

Digital Forensic Model Based On Malaysian Investigation Process

In this paper we assess current academic and certificate based education and training programs in digital forensics education. Strong interest in the digital forensics field has led to a proliferation of education options in both academia and professional training programs. Yet, few studies have attempted to define quality attributes or measures of excellence for these programs. This study defines a set of excellence measures for academic programs seeking to teach digital forensics distilled from existing training documents, author experience and other studies. The expectation is that this first attempt to define program excellence will generate discussion and stimulate others in the forensics community to add their own measures of excellence in addition to critiquing ours. We also describe other needed components for digital forensics education in order for the field to move forward

Forensics Education: Assessment and Measures of Excellence

Digital crime inflicts immense damage to users and systems and now it has reached a level of sophistication that makes it difficult to track its sources or origins especially with the advancements in modern computers, networks and the availability of diverse digital devices. Forensic has an important role to facilitate investigations of illegal activities and inappropriate behaviors using scientific methodologies, techniques and investigation frameworks. Digital forensic is developed to investigate any digital devices in the detection of crime. This paper emphasized on the research of traceability aspects in digital forensic investigation process. This includes discovering of complex and huge volume of evidence and connecting meaningful relationships between them. The aim of this paper is to derive a traceability index as a useful indicator in measuring the accuracy and completeness of discovering the evidence. This index is demonstrated through a model (TraceMap) to facilitate the investigator in tracing and mapping the evidence in order to identify the origin of the crime or incident. In this paper, tracing rate, mapping rate and offender identification rate are used to present the level of tracing ability, mapping ability and identifying the offender ability respectively. This research has a high potential of being expanded into other research areas such as in digital evidence presentation.

/pdf/a-forensic-traceability-index-in-digital-forensic-23s0t20mtt.pdf

A Forensic Traceability Index in Digital Forensic Investigation

The field of computer forensics is one of the newer disciplines in the area of forensic science. Like all of the others, it is going through a transition from an art practiced by individuals to a more standardized set of techniques for which “best practices” can be defined. Over the past few years, a number of documents have been published by governmental and nonprofit groups that may well serve as de facto statements of best practices. Certainly no computer forensic professional can fail to understand that these documents may well turn up as the basis for questions in cross-examination. In this paper, we review the state of the field and identify the key documents and publications—virtually all freely available over the Internet—that are forever changing the very nature of computer forensics. This paper is based on material presented by coauthors Brill and Pollitt at the 2005 National Training Conference of the International High-Technology Crime Investigation Association. It should be noted tha...

Carrie Morgan Whitcomb

Papers

The Evolution of Computer Forensic Best Practices: An Update on Programs and Publications