ipl-logo

Ethics Of Digital Forensics

1087 Words5 Pages
bulb-icon

Recommended: Computer forensics and ethics

Ethics of Digital forensics

Introduction The purpose of this article is describe the ethics of digital forensics .Digital forensics has become a predominant field in recent times and courts have had to deal with an influx of related cases over the past decade. As cyber related criminal attacks become more predominant in today’s technologically driven society the need for and use of, digital evidence in courts has increased. There is the urgent need to hold perpetrators of such crimes accountable and successfully prosecuting them. The process used to acquire this digital evidence (to be used in cases in courts) is digital forensics. Furthermore the digital evidence increasing growth of the Internet has increased the number of ways in which …show more content…

But other aspects may be involved in the acquisition of evidence. some forensic investigators believe in gathering evidence before shutting down the suspect.s computer; this is a source of arguments within the forensics community whether to shutdown the computer immediately and preserve the exact state that it was found, or to gather evidence before shutting down in order to gain any volatile data that might be destroyed on shutdown.
And the second step is the authentication of the evidence is the process of ensuring that the evidence has not been altered during the acquisition process. Investigators authenticate the hard drive evidence by generating a checksum of the contents of the hard drive. This checksum is like an electronic fingerprint in that it is almost impossible for two hard drives with different data.
The last and most time-consuming step in a forensics investigation is the analysis of the evidence. It is in the analysis phase that evidence of wrongdoing is uncovered the investigator. Analysts can also inspect the contents of the Recycle Bin that holds files that are deleted by the user. When a file is deleted it is moved to the Recycle Bin where a record is created in a system file of the Recycle Bin. All the evidence had been computerized or digitized . This steps was proven as a way to protect and …show more content…

The agency is known as CyberSecurity Malaysia (CSM). CyberSecurity Malaysia provides digital forensics services to the country. These services include: the secure collection and imaging of digital evidence; digital evidence investigation, analysis and presentation; analysis of audio and video evidence (analogue evidence); digital evidence protection and data recovery.

In the age of information technology, computers are used everywhere. Demand for digital forensic services has shown a tremendous growth over the past few years. Criminals use computers to facilitate their criminal intentions. Their activities, plans, or even information related to their crime may be stored in a computer. In a criminal proceeding, it is necessary to prove that the computer is associated with the accused. This is when an expert is needed to set his expertise in the area and provide an explanation to the court. CyberSecurity Malaysia has been the focal point in the country to assist in providing these services. This can be inferred from the statistics of cases referred to the agency for the past few

Show More
Related
458 Words | 2 Pages

This ultimately results is a subsequent communication which requires the holder to disclose those passwords or taking on an additional task of tracking the passwords. In both the cases, the level of work is expanded and the police investigator has to take on additional tasks then he was initially required to. This while increasing the cost of investigation also increases the time taken in investigation. Therefore while identifying the property, or the hardware of the computer, an inclusion needs to be made in relation to the passwords that may be protecting that hardware. Similarly for the data demanded in the digital format the investigator, would have to highlight that mere data in digital format is not required, but also the passwords or the code's which restrict access to that data are also required.

Read More
593 Words | 3 Pages

i. Manage The term manage is used to mean acquiring the necessary contractual vehicle and resources that include financial resources that are used in running forensic labs and programs. It can also be used to mean to coordinate and build internal and external consensus that can be used to develop and manage an organizational digital forensic program. Management also is to establish a digital forensic team, usually, the one that is composed of investigators, IT professionals and incidents handlers to perform digital and network forensics. Management provides adequate workspaces that at minimum take in to account

Read More
635 Words | 3 Pages

“The special properties and technical complexity of digital evidence often makes it even more challenging, as courts find it difficult to understand the true nature and value of that evidence (Boddington, 2015)”. It’s not uncommon for innocents to be convicted and guilty people acquitted because of digital evidence (Boddington, 2015). However, other factors can also affect the validity of the evidence, including: failure of the prosecution or a plaintiff to report exculpatory data; evidence taken out of context and misinterpreted; failure to identify relevant evidence; system and application processing errors; and so forth (Boddington, 2015). “There is a perception, largely undeserved, that digital evidence somehow alters the true nature of the original evidence and is therefore unreliable. Presented properly, digital evidence is capable of being of tremendous assistance to the courts (Hak,

Read More
1619 Words | 7 Pages

4.7.5 Data Preservation and Isolation from the Network. The main purpose of a digital forensic report is to keep the data integrity, avoiding any type of data alteration, in order to present valid evidences, for instance in a court. The use of not valid software to check the stored information in a mobile phone can alter these information. The action of receive new data can alter the information stored, for instance an automatic firmware update, or remote device control with the risks involved. Therefore, it is extremelly important have the device completely isolated from the network.

Read More
686 Words | 3 Pages

There were cameras in their apartment unit at the time of her death, the accused told the police how to operate the security system but did not tell them about the hard drive. By the time they knew about it, it was gone. The hard drive was brought to Court by Mr Craig McCoy. An IT consultant had been asked to examine it. There were no deleted files and the crown examined it to see if the hard drive had been reset at any time but couldn't find anything to support that idea.

Read More
673 Words | 3 Pages

The process of analyzing, retaining, and storing data that can be crucial during a civil or criminal case against an employee or a business; is referred to as eDiscovery

Read More
724 Words | 3 Pages

The very first step after identifying and selecting the required computer forensics software our company needs, we need to test, verify, and validate the software otherwise the evidence we present would not be admitted in court. In the company, one of our main goals is to always follow the established standards set by federal agencies. For this purpose, when planning our procedure to validate our software, we must meet the standards set by the National Institute of Standards, and Technology, also known as NIST, which creates procedures and criteria for testing and validating computer forensics software and tools. In order to verify, test and validate the forensic software the company will be using we need to meet the criteria established by NIST in 2001 based on standard testing methods, the ISO 17025 criteria for items that have no current standards and the ISO 5725 criteria.

Read More
1144 Words | 5 Pages

Forensic

Read More
1071 Words | 5 Pages

Once the evidence has been properly collected, the CSIRT will perform the forensic analysis to determine the type of crime that was committed (Sindhu & Meshram, 2012). Since NJVC is a contracted company for the Department of Defense, there are many crimes that could pose a significant risk to both NJVC and their customer. In order to protect these two entities, it is critical that the forensic team accurately determine the crime(s) that were committed on NJVC’s

Read More
1871 Words | 8 Pages

Jurors are usually everyday civillains and lack the technical expertise to fully grasp the complexity of digital evidence which can cause misunderstanding and sway the decision of a trial. This problem is heightened by the perception television places on jurors as they often oversimplify the effort that goes into digital forensics. Jurors may have the connotation that results are instant and that sophisticated techniques shown in shows are readily available for all departments, leading to unrealistic expectations for real world criminal proceedings. The media often portrays digital experts as genuises who work best alone and can solve a case independently. In reality, digital forensics investigations involve a collaborative effort to develop a wide set of diverse skills.

Read More
846 Words | 4 Pages

With the introduction of new technology in recent years, the government can discreetly capture evidence from electronic files,

Read More
544 Words | 3 Pages

Computer forensics processes must adhere to standards set by the courtroom that often complicates what could have been a simple data analysis. In court, knowing who connected to the system based on logs is not enough. There must be facts that will support those connection

Read More
1915 Words | 8 Pages

The following section will consider advantages and limitation of the first two mentioned types of digital forensics: Traditional (dead) and Live computer forensics. TRADITIONAL (DEAD) VS LIVE DIGITAL FORENSICS Traditional (Dead) Forensics In order forensic acquisition to be more reliable it must be performed on computers that have been powered off. This type of forensics is known as ‘traditional’ or 'dead ' forensic acquisition. The whole process of dead acquisition, including search and seizure flowchart and acquisition of digital evidence flowchart is shown on Figure 2 and Figure 3 respectively.

Read More
2273 Words | 10 Pages

Ethical issues The different ethical issues are as following: - Ethical Hacking: With hacking one of the ethical issue which comes is “ethical hacking.” For the sake of informing the content owner they try to compromise computer systems they are nothing but ethical hackers or white hat hackers. So it becomes possible for them to fix the problem. So there is no ethical issue, since the target company is aware of and is paying for this service, some security professionals do this for a living.

Read More
4006 Words | 17 Pages

As far back as 2001 when the first “Digital Forensics Workshop” was held and a case for standards was made, considerable progress has been made in ensuring the growth and expansion of the practice of computer forensics. Mason (2003) suggested the need for standards by which digital forensic practitioners ensure that evidences for prosecuting cases in the law courts are valid as more judgments from a growing number of cases were reliant on the use of electronic and digital evidences in proving the cases. XXXX (2005 & 2007) emphasized the dynamic nature of technology and its impact on the digital forensics field. Hence, the need for having early standards in regulating the

Read More

More about Ethics Of Digital Forensics

Related Topics

Open Document