Abstract
With raising the number of cyber crimes, the need of having a proper digital forensic process also increases. Although digital forensics is practiced in recent years, there is still a big gap between previously suggested digital forensics processes and what is really needed to be done in real cases. Some problems with current processes are lack of flexible transition between phases, not having a clear method or a complete scenario for addressing reliable evidence, and not paying enough attention to management aspects and team roles. This paper provides a process model by paying special attention to the team roles and management aspects as well as both exculpatory and inculpatory evidence.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Carrier, B., Spafford, E.: Getting Physical with the Digital Investigation Process. International Journal of Digital Evidence Fall 2003Â 2(2) (2003)
Carrier, B., Spafford, E.: An Event-based Digital Forensic Investigation Framework. In: DFRWS 2004, Baltimore (2004)
Pollitt, M.: Computer Forensics: an Approach to Evidence in Cyberspace. In: Proceedings of the National Information Systems Security Conference, Baltimore, vol. II, pp. 487–491 (1995)
Digital Forensic Research Workshop (DFRWS) Research Road Map, Utica, NY (2001)
Stephenson, P.: Modeling of Post-Incident Root Cause Analysis. International Journal of Digital Evidence Fall 2003Â 2(2) (2003)
Baryamureeba, V., Tushabe, F.: The Enhanced Digital Investigation Process Model. In: DFRWS 2004, Baltimore (2004)
Noblett, M., Pollitt, M., Presley, L.: Recovering and Examining Computer Forensic Evidence. Forensic Science Communications 2(4) (2000), http://www.fbi.gov/hq/lab/fsc/backissu/oct2000/computer.htm
US Department of Justice Report. Searching and Seizing computers and Obtaining Electronic Evidence in Criminal Investigation (2002), http://www.usdoj.gov/criminal/cybercrime/s&smanual2002.pdf
Pollitt, M.: An Ad Hoc Review of Digital Forensic Models. In: Second International Workshop on Systematic Approaches to Digital Forensic Engineering (2007), http://ieeexplore.ieee.org/iel5/4155337/4155338/04155349.pdf?isnumber=4155338&prod=CNF&arnumber=4155349&arSt=43&ared=54&arAuthor=Pollitt
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2008 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Khatir, M., Hejazi, S.M. (2008). How to Find Exculpatory and Inculpatory Evidence Using a Circular Digital Forensics Process Model. In: Jahankhani, H., Revett, K., Palmer-Brown, D. (eds) Global E-Security. ICGeS 2008. Communications in Computer and Information Science, vol 12. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-69403-8_2
Download citation
DOI: https://doi.org/10.1007/978-3-540-69403-8_2
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-69402-1
Online ISBN: 978-3-540-69403-8
eBook Packages: Computer ScienceComputer Science (R0)