A Proposed Framework For Network Forensics Inquisition And Relative Substantiation With Other Frameworks

Digital forensics is a branch that is over the recovery and investigation of materials found in digital devices, it gives a better understanding of the situation. Back before the computers, researchers used to investigate the situation through eyewitnesses, evidences, and trying to recreate what happened in that area. Digital devices are everywhere this day and age. “Computers and networks have become so ubiquitous in our society, such an integral part of our daily lives, that any investigation or legal dispute will likely involve some form of digital evidence.” Casey, 2009 Introduction. Through electronics, it can store the needed evidence to be used in the future.

The aim of this report is to examine Computer Forensics and Anti Forensics in details, investigation and Analysis techniques, and standard set of procedures which Forensics investigators must follow

Although computer forensics is a relatively young field of crime investigation, it has become a useful area of knowledge. Organizations and companies are finding it necessary to recruit computer and network forensics investigators. These experts can detect and report various computer crimes. The reports of their findings can be used to provide useful evidence in court. This paper discusses various aspects of computer forensics. It is based on a scenario involving a computer, which is suspected to contain evidence on child pornography.

Moving onto the weaknesses, the following test will examine the acquisition of information, discovery of information, education, procedure and significance of the evidence. One of the main concerns in this field is still acquiring the information in a way that does not jeopardize the integrity of the information despite having the appropriate tools. This is because digital forensic scientists created the tools for security and other computer related purposes and not for forensic purposes (Casey, 2004, p.29). This poses specific issues when the investigators are trying to collect information in a manner that is acceptable by law, and while it is true that it is possible to create tools specifically for forensic purposes

Supportive investigation procedures and protocols should be in place in order to show that the incriminating evidence was on the electronic media. Crime has changed since the dawning of the computer age and the need for digital forensics is growing rapidly. Digital forensics has various areas based on different standards and media types, each with experts. There have been major breakthroughs in digital forensics

Investigating a cyberstalking case presents a unique set of challenges. Evidence can be found in digital form, so it can be protected from being lost or damaged, or the complete opposite can be true and it can be easily lost, damaged, corrupted, or rendered inadmissible in court due to flawed forensic gathering practices. It is important, with cases involving digital media that the same procedures be followed when it comes to collecting evidence. Chain of custody documentation must still be kept. The right software must be used to directly copy any hardware seized or searched for investigative purposes.

Digital forensics has been responsible for putting away thousands and thousands of criminals. Ranging from simple crime computer crimes to child pornography. To get quality evidence that can be admissible in court there are steps that are needed in preparing a computer investigation. There are also requirements for data recovery, as well as procedures for corporate investigations. “Digital forensics has become prevalent because law enforcement recognizes that modern day life includes a variety of digital devices that can be exploited for criminal activity, not just computer systems. While computer forensics tends to focus on specific methods for extracting evidence from a particular platform, digital forensics must be modeled such that it can encompass all types of digital devices, including future digital technologies” (Reith, Carr, and Gunsch, 2002).

In this essay I will be talking about the key guidelines when it comes to investigating computer related crimes, such as what kind of the sections and sub-sections the offence falls under when regarding the ‘law’. I will also analyse the principle that will apply when dealing with the collection data using the digital forensic unit to analyse the data, more so how this is used to make accurate judgment on why the data was in this location and what its purpose or intended use was. Furthermore I will address what kind the authority the ACPO are granted, and further dissect the responsibilities the chief commissioner has. Lastly I will be addressing one the biggest computer related crimes which Cyber Crime and how ACPO created a method for dealing with such crimes, such as dividing the crime into two different categories of Cyber Crime, and how they differ from one another.

Computer forensics is the process that applies computer science and technology to collect and analyze evidence which is crucial and admissible to cyber investigations (Sindhu & Meshram, 2012). Adding the ability to practice sound computer forensics will help ensure the overall integrity and survivability of an organization’s network infrastructure (U.S. Cert, 2008). In this paper, we review a number of scenarios where computer forensics is necessary. We determine good sources of data for each scenario, and determine which would be optimal.

This paper will help explain the basic understanding of computer forensics. I will also identify five areas in computers and computer application a forensic investigator can look for digital evidence. I will identify three types of criminal investigations that can utilize the services of computer forensic investigators. This paper will help with the understanding of computer forensics.

The next phase of the investigation is extraction and storage of the data. Most network forensic analysis tools cannot handle the large amount of information efficiently. PCAPFAST was developed to create an “index” of network traffic that could be used to search for information in an efficient manner with more flexibility (Casey, E.). PCAPFAST stores header info in a SQLite database. Forensic examiners can query the database using syntax similar to tcpdump and

In a world where technology is increasingly becoming the way of life, it was only a matter of time before crime was no longer just in the streets but happening online as well. Criminals now get a new approach to carry out their crimes with the use of computers. Since technology is more like a murder mystery than catching the bad guy in the act, a new discipline of forensics needed to be put into place. This is known as computer forensics. Forensic science is any science used for the purpose of law. In the case of computer forensics it is “the discipline that combines elements of law and computer science to collect and analyze data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law” (U.S. Cert, 2008). Meaning if you do something illegal on the Internet it can be found.

Therefore, the Golden Age created an important history of digital forensics – yet this vaunted past has been difficult for the present to keep up with, and Garfinkel is not certain that the future of digital forensics will match its past: “Without a clear strategy for enabling research efforts that build upon one another, forensic research will fall behind the market, tools will become increasingly obsolete, and law enforcement, military and other users of computer forensics products will be unable to rely on the results of forensic analysis” (Garfinkel, 2010, p. S64). Thus, it is clear that digital forensics is undergoing or must undergo a dramatic shift. Is this the case? The following literature review, which is subdivided into two main sections (i.e., statistical tools and processes and the future of digital forensics), seeks to evaluate the literature on this topic with an eye towards Garfinkel’s claims.

In this study, a criminal case involving the use of anti-forensics will be introduced that sheds light on the purpose for the need of digital forensics to proactively face the challenges that are presented through the use of these techniques, and establish a basis for the convictions of cyber-criminals, or

Computer access and information storage has drastically evolved with the increase of computer usage and internet access across a wide range of areas including homes, businesses, schools and government departments. These changes make requirements for more specific laws to regulate the use of computers and storage of data as well as new forensic techniques and tools to investigate such offences.