case study : computer forensics

소개

The scene of someone are using portable equipment on the street is not strange any more as the various high technologies are developing. These Digital gadgets usually transfer the data on the Internet. However, those data is very easy to copy, manipulate, create, transfer and eliminate generally. Furthermore, it is hard to distinguish original copy from copy one, too. It is getting difficult to check each of data when computer used crime happened because the quantities of data are becoming voluminous as the disk size is getting bigger. Hence, we need to follow the special procedure and method in order to have legal effect in the court

목차

Computer Forensics
1. The concept of Computer Forensics
2. Scope of Computer Forensics
3. The basic principle of Computer Forensics
4. The handling procedure of Computer Forensics

본문내용

The Computer forensics is used for an investigation about using computer crime such as spying, technology drain, threat, trickery, forgery, hacking, cyber terror and so on as well as a field of civil suit such as professional negligence or disaster, defamation of character, whistle-blowing. Furthermore, it is used in the field of prevention and corresponding for infringement incident. Its main purpose is to find the crime and criminal within minimum time and to get a significant evidence for submitting the court. This crime and evidence have unique features so that standard steps and ways should be used for collecting and preserving evidence. It is hard to be confidence in the court if each investigator has their own way when they collect the evidence and the evidence is different every time.
Computer forensics is classified based on type:

- Disk Forensics
It is described the method and procedure to make a report about the data, which is used for crime in data storage.

- Network Forensics
It is described the method and procedure to analyze transferring data on network before the log analysis

- E-mail Forensics
It is described the method and procedure to recognize both contents of mail and sender/receiver by using log data of email

- Internet Forensics
It is described the method and procedure to grasp haughty performance such as reprobating statement on bulletin, illegal access to web server

- Source code Forensics
It is described the method and procedure to find out illegal copied software, create and spread of virus

- Mobile Device Forensics
It is described the method and procedure to analyze the useful information from mobile device such as Lap-top, PDA, MP3 player, cell phone and so on.

3. The basic principle of Computer Forensics
The digital evidence, which was stored in computer, should have five basic principles to become legal evidence in the court.

- Principle of Justice
The evidence for investigation should be obtained through legal procedures. The admissibility of evidence which is not collected in legal procedure is denied as evidence according to exclusionary rule regarding illegally seized evidence. It cannot be authorized the admissibility of evidence if we get a file in state of non-licensed. In other words, it should not be legal evidences if we get a decoded file by using a password or a key value through illegal hacking.

참고자료

· security, computer operating systems