Digital Investigation as a distinct discipline: A pedagogic perspective

Irons, Alastair; Stephens, Paul; Ferguson, Ian

doi:10.1016/j.diin.2009.05.002

Cited by 25 publications

(11 citation statements)

References 12 publications

(10 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…According to Irons, digital investigation is a generic term used to describe any activity that involves computer or digital technology to produce forensically robust evidence [55].…”

mentioning

confidence: 99%

Integrated digital forensic process model

Köhn¹,

Eloff²,

Eloff³

2013

Computers & Security

124

View full text Add to dashboard Cite

The Information and Communications Technology (ICT) environment constitutes an integral part of our daily lives. Individual computer users and large corporate companies are increasingly dependent on services provided by ICT. These services range from basic communication to managing large databases with corporate client information. Within these ICT environments something is bound to go wrong for a number of reasons, which include an intentional attack on information services provided by an organisation. These organisations have in turn become interested in tracing the root cause of such an incident with the intent of successfully prosecuting a suspected malicious user.Digital forensics has developed significantly towards prosecuting such criminals. The volumes of information and rapid technological developments have contributed to making simple investigations rather cumbersome. In the digital forensics community a number of digital forensic process models have been proposed encapsulating a complete methodology for an investigation. Software developers have also greatly contributed toward the development of digital forensics tools. These developments have resulted in divergent views on digital forensic investigations. This dissertation presents the IDFPM -Integrated Digital Forensic Process Model.The model is presented after examining digital forensic process models within the current academic and law enforcement literature. An adapted sequential logic notation is used to represent the forensic models. The terminology used in the various models is examined and standardised to suit the IDFPM. Finally, a prototype supports a limited selection of the IDFPM processes, which will aid a digital forensic investigator. There are a great many things about architecture that are hidden from the untrained eye.-Frank Gehry Acknowledgements• Thank you God for giving me the strength, wisdom, endurance and the patience to do this, despite the constant challenges.• I would like to thank my mother and father, Gary and Magsie, for their constant support, love and encouragement. Thank you for always listening and giving much needed advice. I would also like to thank my brothers Jonathan and Alexander, and sister Vanessa for their enthusiasm. None of this would have been possible without your support.• Thank you Prof Jan Eloff who has insisted that I complete this milestone in my life.Thank you for pushing me through the difficult times with your knowledge and experience. Thank you Prof Mariki Eloff for your soft and kind words that inspired me to see this through. You have both become great friends in this journey.• Thank you Prof Kourie, Prof Olivier, Prof Venter and Prof Carsten for listening when I asked questions, guiding me toward possible answers. Your help is highly appreciated.• My friends and colleagues in the ICSA lab over the past number of years. Thank you Emmanuel Adigun, Kamil Reddy, Maciej Rossudowski, Marco Slaviero, NeilCroft, Johann Fourie, Francois Mouton, Pedro de Souza and Waldo Delport. You have all tau...

show abstract

“…According to Irons, digital investigation is a generic term used to describe any activity that involves computer or digital technology to produce forensically robust evidence [55].…”

mentioning

confidence: 99%

Integrated digital forensic process model

Köhn¹,

Eloff²,

Eloff³

2013

Computers & Security

124

View full text Add to dashboard Cite

show abstract

“…A computer forensics program should have a balance of theoretical and practical learning. In the UK context Irons et al (2009) suggest that the following topics should be include (but not be limited to):…”

Section: Developing Digital Forensics Skills and Capabilities In Soutmentioning

confidence: 99%

Aspects of Digital Forensics in South Africa

Irons

Ophoff

2016

IJIKM

View full text Add to dashboard Cite

This paper explores the issues facing digital forensics in South Africa. It examines particular cyber threats and cyber threat levels for South Africa and the challenges in addressing the cybercrimes in the country through digital forensics. The paper paints a picture of the cybercrime threats facing South Africa and argues for the need to develop a skill base in digital forensics in order to counter the threats through detection of cybercrime, by analyzing cybercrime reports, consideration of current legislation, and an analysis of computer forensics course provision in South African universities. The paper argues that there is a need to develop digital forensics skills in South Africa through university programs, in addition to associated training courses. The intention in this paper is to promote debate and discussion in order to identify the cyber threats to South Africa and to encourage the development of a framework to counter the threats -through legislation, high tech law enforcement structures and protocols, digital forensics education, digital forensics skills development, and a public and business awareness of cybercrime threats.

show abstract

“…his knowledge is required for the efective analysis of digital media which is the focus of most undergraduate computer forensics courses in the UK (Irons, Stephens, & Ferguson, 2009), and certainly is central to the computer forensics curriculum in both institutions in this study. Students gain experience of using a range of tools, both open source and proprietary, that are essential to the forensic analysis process.…”

Section: Background To Situationmentioning

confidence: 99%