A Proposed Digital Forensics Business Model to Support Cybercrime Investigation in Indonesia

Abstract

Digital forensics will always include at least human as the one who performs activities, digital evidence as the main object, and process as a reference for the activities followed. The existing framework has not provided a description of the interaction between human, interaction between human and digital evidence, as well as interaction between human and the process itself. A business model approach can be done to provide the idea regarding the interaction in question. In this case, what has been generated by the author in the previous study through a business model of the digital chain of custody becomes the first step in constructing a business model of a digital forensics. In principle, the proposed business model already accommodates major components of digital forensics (human, digital evidence, process) and also considers the interactions among the components. The business model suggested has contained several basic principles as described in The Regulation of Chief of Indonesian National Police (Perkap) No 10/2010. This will give support to law enforcement to deal with cybercrime cases that are more frequent and more sophisticated, and can be a reference for each institution and organization to implement digital forensics activities.

Analisa Perkembangan Digital Forensik dalam Penyelidikan Cybercrime di Indonesia (Systematic Review)

“…Menurut data dari PwC dan RSA sebagaimana dikutip oleh [3], cybercrime telah berubah menjadi ancaman serius bahwa nilai kerugian secara global dapat mencapai pendapatan nasional suatu negara. Ini sejalan dengan laporan dari [4] yang mengungkapkan bahwa kejahatan dunia maya adalah industri yang tumbuh dari tahun ke tahun dengan tingkat pengembalian yang tinggi tetapi dengan risiko yang kecil.…”

A Design of Digital Chain Custody for Republic of Iraq

“…Digital evidence has different form so in order to document it and preserve its integrity is very hard using register book or forms unlike the physical evidence. Although they have different characteristic but they have the same information and concept to be documented in chain of custody [7] , [8] . Therefore, for the importance of chain of custody in investigation process, a Digital chain of custody application has been design using SQL and XML approach.…”

“…Chain of custody is very important in digital forensic filed for keeping the integrity of an evidence as well as to document the evidence. But, there are few solutions provided by other researchers the keep the integrity and document the digital evidence such as proposed framework for handling digital chain of custody with the digital cabinet concept [13] , creating the business model of digital evidence handling and cybercrime investigation [7] , build a framework of the to improve a chain of custody of digital evidence investigation [14] , the ontology approach using in managing the information needed in chain of custody [15] , [16] , using an XML document type for digital evidence documentation like the concept of plastic bag of evidence [17] and imply XML approach to document a digital evidence in chain of custody application [18].…”

Peer Review #2 of "Improvement of nuclear facilities DNP3 protocol data transmission security using super encryption BRC4 in SCADA systems (v0.2)"

“…SCADA security systems connected to the internet are closely related to cybersecurity, and thus require special attention in critical industries. The development of cyberinfrastructure can improve the interconnection and security of smart networks [5]; indeed, several designs have sought to increase their investigative abilities [6]. Cyberattacks have damaged critical facilities, including nuclear facilities [7].…”