Abstract
When encrypted material is discovered during a digital investigation and the investigator cannot decrypt the material then s/he is faced with the problem of how to determine the evidential value of the material. This research is proposing a methodology of extracting probative value from the encrypted file of a hybrid cryptosystem. The methodology also incorporates a technique for locating the original plaintext file. Since child pornography (KP) images and terrorist related information (TI) are transmitted in encrypted format the digital investigator must ask the question Cui Bono? – who benefits or who is the recipient? By doing this the scope of the digital investigation can be extended to reveal the intended recipient.
The original version of this chapter was revised: The copyright line was incorrect. This has been corrected. The Erratum to this chapter is available at DOI: 10.1007/978-3-642-02312-5_25
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Carter, H.: Paedophiles jailed for hatching plot on internet (2007)
Joseh, S.: Hamas Terror Chat Rooms, December 11 (2007)
Siegfried, J., et al.: Examining the Encryption Threat, Computer Forensic Research and Development Center. International Journal of Digital Evidence (2004)
Callas, J., et al.: PGP Corporation OpenPGP Message Format (November 2007)
Bunting, S.: The Official EnCase Certified Examiner Guide. Wiley, Chichester (2008)
Dickson, M.: An Examination into AOL Instant Messenger 5.5. Elsevier Ltd., Amsterdam (2006) (Digital Investigation 3)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2009 ICST Institute for Computer Science, Social Informatics and Telecommunications Engineering
About this paper
Cite this paper
McGrath, N., Gladyshev, P., Kechadi, T., Carthy, J. (2009). Investigating Encrypted Material. In: Sorell, M. (eds) Forensics in Telecommunications, Information and Multimedia. e-Forensics 2009. Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol 8. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-02312-5_4
Download citation
DOI: https://doi.org/10.1007/978-3-642-02312-5_4
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-02311-8
Online ISBN: 978-3-642-02312-5
eBook Packages: Computer ScienceComputer Science (R0)