Investigation Of Digital Evidence Research Articles

Forensic Investigation of Digital Evidence on Flash Disk with Forensic Process Method Based on NIST

Flash disk merupakan barang yang tidak lepas dari kehidupan sehari-hari. Dengan Flash disk pengguna dapat menyimpan beberapa daya penting baik bagi pribadi maupun perusahaan. Selain itu, tidak dapat disangkal bahwa banyak kasus-kasus hukum di Indonesia yang menjadikan Flash disk sebagai barang bukti. UU ITE (Undang-undang Informasi dan Transaksi Elektronik) mengatur tentang bagaimana ketentuan bagaimana barang bukti digital menjadi barang bukti yang kuat di persidangan. Penelitian ini melakukan studi investigasi forensik terhadap bukti digital pada Flashdisk dengan empat skenario percobaan. Pengolahan forensik digital menggunakan metode forensic process berdasarkan panduan NIST (National Institute of Standards and Technology). Penelitian ini menghasilkan analisis dimana barang bukti yang diolah dengan skenario 1 dan 4 merupakan barang bukti digital yang valid dan sah untuk diajukan ke persidangan sedangkan barang bukti 2 dan 3 merupakan barang bukti yang tidak sah.

Deciphering emoji variation in courts: a social semiotic perspective

Emojis are increasingly being used as digital evidence in courts due to the miscommunication and misinterpretation arising from the high variability of their usage and interpretation. Emojis in courts have been extensively researched in extant studies, but relatively little attention has been paid to the emoji variation phenomena in Chinese courts. Through an empirical qualitative content analysis of the court judgments in China and the United States and some supplementary materials, this study posits that an emoji’s meaning in courts can be subject to the following six categories of variations: i. variation across platforms, including devices, operating systems, software programs and clients; ii. temporal variation; iii. variation in court cases under different rules of evidence; iv. variation in individual participants; v. variation across social groups; and vi. linguistic-cultural variation. From a social semiotic perspective, emojis as dynamic signs have great meaning potentials, making their meanings context-dependent and interpreter-dependent. For this reason, it is suggested that legal professionals untangle and weave historical, social, cultural and legal contexts into the interpretation of an emoji’s meaning. Moreover, a probe into the contextualized configuration of emojis can offer practical insights into the interpretation of emoji-bearing texts in judicial decision-making as well as the admissibility and investigation of digital evidence in courts.

Digital Forensik dalam Upaya Mengedukasi Masyarakat Berperilaku Sehat di Media Sosial

Social Media has an important role during the Covid-19 pandemic, namely by facilitating new forms of social interaction, dialogue, information exchange and collaboration. It enables all users and organizations in the world to exchange ideas, post comments, and participate in activities and events and share their wider interests. At the same time, such a phenomenon has led to a significant increase in criminal activity by perpetrators who are increasingly sophisticated in their attempts to use technology to evade detection. In Indonesia, the trend of cyber crime is increasing with various types of crime. Many people take irresponsible actions through social media and can avoid punishment because these actions are carried out in cyberspace, while people are affected by direct material and moral losses. This is certainly unfair, so it is necessary to educate the public on healthy behavior using social media and acting wisely. If a crime is committed, an investigation of digital evidence can be carried out so that it can be sued in accordance with the applicable ITE law By promoting healthy behavior on social media and explaining the steps of digital investigations to the public, it is hoped that it can suppress crime in cyberspace and obtain optimal benefits from social media. The planned activities include (1) preparation of the required resources in the PKM. (2) Implementing a program with a training model between the PKM team from UNLA and the community (3). In the training on healthy behavior on social media, the last one is (4) evaluation and reporting of activities.

Digital Evidence Object Model for Situation Awareness and Decision Making in Digital Forensics Investigation

The aim of a forensic investigation is to provide situation awareness in terms of identification and preservation of digital evidence, extraction of information, and analysis of extracted information to facilitate time-critical decision making. Digital forensic investigation is a process of collecting, examining, and analyzing digital data from various places such as digital devices, networks, and big data in the cloud. Here we propose a novel digital evidence object (DEO) model for the reduction of forensics data in digital forensic investigation and describe its application. The proposed DEO model is based on the synergy of category theory and integration of 5Ws (Who, What, When, Where, and Why) of digital investigation analysis techniques for digital evidence acquisition. We present a real-life case study to demonstrate its suitability for assisting computer forensics experts in the digital evidence investigation. Our results demonstrate that the application of the DEO model can noticeably decrease the number of false positive evidence objects submitted to a forensics expert, thus reducing his/her workload and improving decision making performance in a time-critical setting.

DeepUAge: Improving Underage Age Estimation Accuracy to Aid CSEM Investigation

Age is a soft biometric trait that can aid law enforcement in the identification of victims of Child Sexual Exploitation Material (CSEM) creation/distribution. Accurate age estimation of subjects can classify explicit content possession as illegal during an investigation. Automation of this age classification has the potential to expedite content discovery and focus the investigation of digital evidence through the prioritisation of evidence containing CSEM. In recent years, artificial intelligence based approaches for automated age estimation have been created, and many public cloud service providers offer this service on their platforms. The accuracy of these algorithms have been improving over recent years. These existing approaches perform satisfactorily for adult subjects, but perform wholly inadequately for underage subjects.To this end, the largest underage facial age dataset, VisAGe, has been used in this work to train a ResNet50 based deep learning model, DeepUAge, that achieved state-of-the-art beating performance for age estimation of minors. This paper describes the design and implementation of this model. An evaluation, validation and comparison of the proposed model is performed against existing facial age classifiers resulting in the best overall performance for underage subjects.

An Ontology-Based Transformation Model for the Digital Forensics Domain

The creation of an ontology makes it possible to form common information structures, to reuse knowledge, to make assumptions within a domain and to analyse every piece of knowledge. In this paper, we aim to create an ontology-based transformation model and a framework to develop an ontology-based transformation system in the digital forensics domain. We describe the architecture of the ontology-based transformation system and its components for assisting computer forensics experts in the appropriate selection of tools for digital evidence investigation. We consider the use of the attributes of Extensible Markup Language document transformation to map the computer forensics ontology and we use the representations in the National Institute of Standards and Technology’s “Computer Forensics Tool Catalog” for aligning one form with the other.DOI: http://dx.doi.org/10.5755/j01.eie.23.3.18337

Judgment in the case of K.U. v Finland: the European Court of Human Rights requires access to communications data to identify the sender to enable effective criminal prosecution in serious violations of private life

Tuomas Poysti examines an important decision by the European Court of Human Rights that must include the investigation of digital evidence.

Legislative study about investigation of Digital evidence in Criminal Procedure - Especially compared with the case of a civil lawsuit -

Legislative study about investigation of Digital evidence in Criminal Procedure - Especially compared with the case of a civil lawsuit -

An integrated open forensic environment for digital evidence investigation

Nowadays, the capability of traditional digital forensic tools fails to meet the demand of ever increasing of criminal or civil cases. One of the challenges is that digital devices and applications are multifarious and changing quickly. Here, we propose a new mode for digital forensic tools utilization via integrating open-source single tools into a platform and setting up into Live DVD/USB. The platform, an Integrated Open Forensic Environment (named IOFE), takes full advantage of these tools and, at the same time, elevates its power and interoperability via standardized input/output data. The IOFE features conducting live and dead investigation and covers three consecutive major phases of digital forensics: acquisition, analysis, and presentation. Our experiments prove that IOFE can carry out manifold acquisition, interpretation, analysis, and presentation task of evidentiary data in an efficient and effective manner.

Digital Evidence Investigation Practice and its Regulatory Principles

Digital Evidence Investigation Practice and its Regulatory Principles

우리나라 디지털 증거수사의 효율성 증진방안

Recently investigation institutions have found the clue leading to solution of the problem by digital evidence. Digital medium is used extensively in real life. Accordingly, offender is leaving from traces of crime to digital form. But, Korea`s digital evidence investigation is low level yet. Definite legislation about digital evidence is not readied in present our country. And professional investigation manpower about digital evidence is insufficient. These problem may have to be supplemented urgently. Systematic, technological supporting is required. Specialize and discussed digital evidence investigation`s controversial point and capacity reinforcement way for efficient confrontation in cyber crime who is diversified gradually in text.