Network Forensics : Chiang, Chiyun Kwei

Computer forensics are used in many fields, from legalities involving trade secrets to prevention of computer-related fraud; however, more and more computer forensics are being used to help solve crimes of all kinds. Computer forensics have both obvious and less obvious implications in a criminal court and are a helpful new tool for prosecutors and police alike.

Digital crime has been on the increase due to the increasing use of computer and internet. This has led the investigators with another method of fighting this crime. This is Computer Forensics, a process of going into computer hard drive and capturing basic information the user believed it has been erased.

Data is crucial to the success of any company and they are now increasing their efforts in soliciting and retrieving customer data to learn more about their client's preferences, likes, and dislikes. This, among other factors has attributed to a growing field of data science where data scientists learn to collect crucial data. While there are many types of data, this paper will primarily focus on digital data and how digital scientists can retrieve these data to support provide information for the crown or for the defense. This area has received more attention because criminals such as terrorists have realized the effectiveness of using digital devices to aid in their criminal endeavors (Reith, Carr & Gunsch, 2002, p.2). To combat this, law enforcement agencies are now relying on digital scientists to preserve, collect, analysis and interpret "digital evidence derived from digital sources" (Vincze, 2016, p.184) to help prevent cybercrime and prosecute (or exonerate) suspects. The purpose of this paper is then to illustrate why digital forensic is crucial to addressing the new dangers presented in our society by analyzing the strengths and demonstrating why the weaknesses of the field

The research for this paper revealed several articles containing proposed frameworks that combine the approaches outlined above in the effort of offering the greatest analysis efficiency alongside data privacy protection. This section focuses on outlining the proposed frameworks, the positive aspects, and any known challenges. Gupta (2013) approaches privacy protection during the forensic investigation process by proposing a framework based on the logic that criminal behavior and evidence remains similar from case to case. The framework consists of three modular stages of an Expert System, Evidence Extraction, and Ranking. The Expert System is a database comprised of historical digital crime cases, case profiles, and stored images of the

Supportive investigation procedures and protocols should be in place in order to show that the incriminating evidence was on the electronic media. Crime has changed since the dawning of the computer age and the need for digital forensics is growing rapidly. Digital forensics has various areas based on different standards and media types, each with experts. There have been major breakthroughs in digital forensics

Investigating a cyberstalking case presents a unique set of challenges. Evidence can be found in digital form, so it can be protected from being lost or damaged, or the complete opposite can be true and it can be easily lost, damaged, corrupted, or rendered inadmissible in court due to flawed forensic gathering practices. It is important, with cases involving digital media that the same procedures be followed when it comes to collecting evidence. Chain of custody documentation must still be kept. The right software must be used to directly copy any hardware seized or searched for investigative purposes.

Abstract- The contemporary Smartphone has built-in Instant Messaging (IM) applications like Whatsapp, Line, etc, which facilitates users to send and receive chat messages, video, audio and images via Smartphone in real time. Apart from benefits offered by Instant Messaging (IM), it also suffers from few vulnerabilities which provide ground for attackers to launch attacks such as Man-in-the-middle attack (MITM). These applications leave traces and Evidences in phone. In order to identify crimes, it is essentially required to retrieve these traces and evidences by using appropriate forensic technique. The works carried out in this field deals with forensic analysis of Whatsapp, viber, ChatOn etc but not with forensic analysis of Line messenger, even though number of users of Line messenger is more than 500 million. In this work, evidence subjected to Line messenger has been extracted from iPhone running ios 6. This paper presents evidence gathering of Line IM application which proves beneficial for forensic analysts and practitioners as it assists them in course of mapping and locating digital evidences of Line messenger on iPhone.

An extremely important computer forensic service is the preservation of evidence. In this step a forensic image is made of all pertinent data. This image is actually what is being analyzed and the original source where the data was extracted is put in a safe and confidential environment. The security and authenticity of this information is analyzed very carefully and handled only by a digital forensics expert.

Over the last few years law enforcement has shown some major development and growth when it comes to forensic technology. The use of things such as cell phones, computers, gps devices has drastically increased. As a result, these devices regularly contain vital evidence, including user data, call logs, position, text messages, email, imageries and audio and video recordings. When it comes to cyber forensics, law enforcement has a substantial challenge in keeping current with technology changes. New technology is released onto the marked very quickly, both hardware and software. It is imperative that these agents know when these things will hit the market and how to use them. The enormous capacity of information contained on digital devices

Digital forensics is almost like observing someone’s complete psyche, you see that person likes and dislike. You are viewing their hates and love; you are finding things they don’t want to share with anyone else in the entire world. Using digital forensics is extremely perplexing with the obligation of interpreting the digital forensics that are located in an investigation.

Computer forensics is the process that applies computer science and technology to collect and analyze evidence which is crucial and admissible to cyber investigations (Sindhu & Meshram, 2012). Adding the ability to practice sound computer forensics will help ensure the overall integrity and survivability of an organization’s network infrastructure (U.S. Cert, 2008). In this paper, we review a number of scenarios where computer forensics is necessary. We determine good sources of data for each scenario, and determine which would be optimal.

Digital forensics is an ever changing field and the number of examinations being performed by digital forensic laboratories is constantly growing. Because investigations often rely on the results of these examinations, particularly those cases built on the digital evidence, investigators need to be able to provide results as soon as it is possible. To meet the growing demand and customer needs, ongoing research and development is needed in the creation of tools that will increase efficiency of digital forensic examinations. To improve efficiency and effectiveness in forensic processes, investigators should concentrate on specific areas including preparation and preservation, extraction and storage, examination and reporting, sharing, correlating

Criminalization is a social phenomenon, which has haphazardly increased in last few years as Information and Communications Technology (ICT) has become an internal part of our daily lives. Atomic computer users and large corporate companies are increasingly dependent on services provided by ICT. ICT provides wide range of services that are utilized by individual systems as well as enormous database handling companies. For numerous reasons, something is bound to go wrong within the ICT environments which may include an intentional attack on different services provided by an organization. Digital forensics has evolved significantly in the direction of prosecuting such criminals. Making use of freely available information on internet and rapid technological advancements in ICT has contributed to performing easy investigations rather cumbersome.

on the system. This makes it hard to identify, and consequently it is a hazardous kind of assault.

In a world where technology is increasingly becoming the way of life, it was only a matter of time before crime was no longer just in the streets but happening online as well. Criminals now get a new approach to carry out their crimes with the use of computers. Since technology is more like a murder mystery than catching the bad guy in the act, a new discipline of forensics needed to be put into place. This is known as computer forensics. Forensic science is any science used for the purpose of law. In the case of computer forensics it is “the discipline that combines elements of law and computer science to collect and analyze data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law” (U.S. Cert, 2008). Meaning if you do something illegal on the Internet it can be found.