Planning and Building a Taiwan Cyber Forensic Laboratory

Abstract

The problems of safeguarding cybersecurity have gotten much worse in recent years. The risks in cybersecurity are increasing rapidly in our country. Because the cybersecurity defenses and computer crime investigation systems of our government and businesses have been threatened, the damage of cybercrime for national security and public security will become more critical, even more than violent crime and economic crime. The national cyber forensics mechanism and laboratory will play a crucial role in dealing with cybercrime. In 2003, our government conducted a research of digital evidence, the standard procedure of the operations and cyber forensic laboratory. It included the organization, training, technical capability, legislation, and operation procedures. In 2004, our government made a policy to build the first nationwide cyber security and forensic laboratory. It will be one of the major cybersecurity defense mechanisms in Taiwan. Our bureau (MJIB) made a plan and got the additional budget to build a cyber forensic lab this year. This study has four aspects: 1) The study of reliable cyber forensic software and hardware; 2) The standard of the operating procedures of cyber forensics; 3) Training courses for the examiner, including an internationally well-known certification system in cyber forensics; and 4) The study of certification for the cyber forensic laboratory. Cyber forensics is still in its early stages in Taiwan. More professional cyber forensic manpower is needed, as well as a certified cyber forensic mechanism. It is expected that cyber forensics will become increasingly important for cybersecurity policy and management in the future. Hence, building a certificated laboratory and establishing the SOP of cyber forensics from this study can be the basis to cultivate cyber forensic capabilities in our country. In this way, law enforcement will get more help from our laboratory. The laboratory, through its operation, also enhances the ability of Taiwan's cyber forensic professionals and provides more convincing digital evidence in court. Furthermore, it can consolidate cybersecurity systems and the e-Taiwan environment.