The Study on Planning and Building a Cyber Forensic Laboratory in MJIB, Taiwan, R.O.C

Abstract

The problems of safeguarding cybersecurity have gotten much worse in recent years. The risks in cybersecurity are increasing rapidly in our country. Because the cybersecurity defense and computer crime investigation system of our government and businesses have been threatened, the damage of cybercrime for the national security and public security will be more critical, even more than the violence crime and economic crime. The national cyber forensics mechanism and laboratory will play a very crucial role in dealing with cybercrime. In 2003 our government conducted a research of digital evidence, the standard procedure of operation and cyber forensic laboratory. It included the organization, training, technical capability, legislation and operation procedures. In 2004 the government made a policy to build the first nationwide cyber security and forensic laboratory. It will be one of the major cybersecurity defense mechanisms in our country. Our bureau (MJIB) had made a plan and got the additional budget to build a cyber forensic lab this year. This study has four aspects: 1) the study of reliable cyber forensic software and hardware; 2) the standard of operating procedure of cyber forensics; 3) the training courses for examiner, including the internationally well-known certification system in cyber forensics; and 4) the study of certification of cyber forensic laboratory. Cyber forensics is still at its early stage in Taiwan. More professional cyber forensic manpower is needed, as well as a certified cyber forensic mechanism. It is expected that cyber forensic will become increasingly important for cybersecurity policy and management in the future. Hence, building a certificated laboratory and establishing the SOP of cyber forensics from this study can be a basis to cultivate cyber forensic capability in our country. In this way the law enforcement will get more help from our laboratory. The laboratory through its operation also enhances the ability of Taiwan's cyber forensic professionals and provides more convincing digital evidence in the court. Furthermore, it can consolidate cybersecurity system and e-Taiwan environment