CHAPTER 03: DIGITAL EVIDENCES IN CRIMINAL INVESTIGATIONS1
Introduction1
Intelligence vs. Evidence2
Definition of a Digital Evidence3
Types Of Evidences4
Out door6
Indoor6
Conveyance7
Sources Of Digital Evidences9
Rules of Digital Evidence12
Digital Investigation as a branch of computer science13
Digital evidences vs. Traditional evidences - secret intelligence14
Current Perception of Forensic Science14
Historical View17
Fingerprinting in Forensic Science21
Witness Testimony23
Strengths And Weaknesses Of Digital Evidences24
Process Involved With Digital Forensic Evidence25
The legal context26
The processes involved with digital forensic evidence28
Identification28
Collection29
Transportation29
Storage30
Analysis, interpretation, and attribution31
Reconstruction31
Presentation32
Destruction32
Expert witnesses33
Tools and tool use in digital forensics33
Role Of The Digital Forensic Experts, Technicians And Investigators In The Process Of Intelligence And Evidence Gathering33
CHAPTER 4. COMPUTER FORENSIC AND DIGITAL EVIDENCE INVESTIGATION IN THE UK AND THE USA36
Introduction36
Handling digital evidence36
Legislation and regulation relating to UK corporate computer forensics investigations38
Personal data accessed during a corporate computer forensic investigation38
Monitoring of computer networks during a corporate computer forensic investigation39
Procedures used for corporate computer forensic investigations39
Offences that must be reported to the police42
Non-UK legislation potentially relevant to corporate computer forensic investigations43
Legislation and regulation relating to the outcomes of UK corporate computer forensics investigations43
CHAPTER 03: DIGITAL EVIDENCES IN CRIMINAL INVESTIGATIONS
Introduction
Despite the growing attractiveness of the control and esteem as an locality for learned study, argument still lives over the most befitting title for the subject. The consideration on this reflectors some of the 'Computing versus Computer Science' argument in the Computing Benchmark consideration ([QAA, 2000] and [QAA, 2007]). Programme names suggested in the subject locality at UK universities include: computer forensics; forensic computing; digital investigation; digital forensics; cyberforensics; cybercrime forensics; computing and forensics investigation; and computing (forensics). To perplex affairs farther there are a sequence of sub-disciplines or specialisms encompassing mesh forensics (Garfinkel, 2002 S. Garfinkel, Network forensics: tapping the internet, O'Reilly, Sebastopol, CA (2002).[Garfinkel, 2002] and [Soe et al., 2004]); Internet forensics ([Berghel, 2003] and [Jones, 2005]); and programs forensics (Slade, 2004). In this paper the period Digital Investigation (DI) will be utilised as a generic period to recount any undertaking that engages the use of computer expertise to enquire misdeed and make forensically robust evidence. The period Digital Investigation embraces both the enquiry of a suspect's digital devices(s) and the use of computers to analyze and assess crimes.
Is Digital Investigation adequately distinct in feature from living learned disciplines for example Computer or Forensic Science to be called a distinct discipline? Is it a occupation in its own right? The authors summarize why the argument is a important one in periods of its penalties for expert measures, value command, learned and individual accreditation. The paper emphasises the dissimilarities in the way we educate digital enquiries in evaluation to computer research covering idea, perform, the learning versus teaching argument, the interdisciplinary environment of the subject, a difficulty explaining and difficulty founded approach, and the need to focus professionalism and ethics. The contentions for four alternate places are proposed: Digital Investigation as a agency of Computer Science, Digital Investigation as a agency of Forensic Science, Digital Investigation as an inter-disciplinary research and Digital Investigation as a distinct ...