On the Creation of Reliable Digital Evidence

Kuntze, Nicolai; Rudolph, Carsten; Alva, Aaron; Endicott-Popovsky, Barbara; Christiansen, John R.; Kemmerich, Thomas

doi:10.1007/978-3-642-33962-2_1

Cited by 9 publications

(3 citation statements)

References 10 publications

(11 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…More efforts by Kuntze et al [16] explores the legal requirements that digital evidence must meet as the basis for developing technical requirements for the design of digital systems. They propose an approach that could be used to develop digital devices and establish processes crafted for the purpose of creating digital evidence.…”

Section: Introductionmentioning

confidence: 99%

Towards a framework for enhancing potential digital evidence presentation

Karie

Venter

2013

2013 Information Security for South Africa

View full text Add to dashboard Cite

In the case of digital forensic investigations, the potential digital evidence captured, the analysis, interpretation, and attribution must ultimately be presented in the form of expert reports, depositions, and testimony in any legal proceedings. If the presentation and interpretation of the potential digital evidence is conducted correctly, it is much easier and useful in apprehending the attacker and stands a much greater chance of being admissible in the event of a prosecution. Wrongly presented and interpreted potential digital evidence data might create loopholes for perpetrators to exploit, thus, making it hard to convict and prosecute them.Existing digital forensic investigation process models have provided guidelines for identifying and preserving potential digital evidence captured from a crime scene. However, the extent to which such potential digital evidence may be admissible in a court of law remains a challenge to investigators. This is backed up by the fact that there are currently no standardised guidelines for even presenting the most common representations of digital forensic evidence. Therefore, in the authors' opinion, methodologies and specifications need to be developed in the field of digital forensics with the ability to effectively enhance the potential digital evidence presentation and interpretation in any legal proceedings.In this paper, therefore, we present a step-by-step framework in an attempt to propose high-level guidelines for enhancing the potential digital evidence presentation in any legal proceedings. Such a framework will be helpful to digital forensic experts, for example, in structuring investigation findings as well as in identifying relevant patterns of events to be incorporated during the presentation of potential digital evidence. The framework will also assist law enforcement agencies, for example, to determine, with less effort, the validity, weight and admissibility of any potential digital evidence presented. However, it should be noted that the purpose of this paper is not to replace any of the extensive and known evidence presentation principles, but serves as a survey of the state of the art of the research area while proposing harmonised and high-level guidelines for enhancing the presentation of potential digital evidence in legal proceedings.

show abstract

Section: Introductionmentioning

confidence: 99%

Towards a framework for enhancing potential digital evidence presentation

Karie

Venter

2013

2013 Information Security for South Africa

View full text Add to dashboard Cite

show abstract

“…In England, for instance, digital records have been admitted "as evidence that speaks for itself" (Pattenden 2009). Equally important, securing the authenticity and reliability of digital records is technologically feasible as the research in this field illustrates (Kuntze et al 2012).…”

Section: Digital Evidence Challengesmentioning

confidence: 99%

STOP, You’re on Camera: The Evidentiary Admissibility and Probative Value of Digital Records in Europe

Al-Sharieh

Bonnici²

2019

Synergy of Community Policing and Technology

View full text Add to dashboard Cite

show abstract

“…I.e. investigation of cloud applications on mobile phones (45,(47)(48)(49), malwares on smartphones (50)(51)(52), and investigating mobile phones as part of botnets (53) and SCADA (54) systems are all challenging forensics research areas. In view of the evolving nature of mobile device forensics, it is suggested that forensic practitioners who rely primarily on general-purpose mobile forensic toolkits might find that no single forensic tool could recover all relevant evidence data from a device (6).…”

Section: Related Workmentioning

confidence: 99%

Performance of Android Forensics Data Recovery Tools

Ogazi-Onyemaechi

Dehghantanha

Choo

2017

Contemporary Digital Forensic Investigations of Cloud and Mobile Applications

View full text Add to dashboard Cite

Abstract-Recovering deleted or hidden data is among most important duties of forensics investigators. Extensive utilisation of smartphones as subject, objects or tools of crime made them an important part of residual forensics. This chapter investigates the effectiveness of mobile forensic data recovery tools in recovering evidences from a Samsung Galaxy S2 i9100 Android phone. We seek to determine the amount of data that could be recovered using Phone image carver, Access data FTK, Foremost, Diskdigger, and Recover My File forensic tools. The findings reflected the difference between recovery capacities of studied tools showing their suitability in their specialised contexts only.

show abstract

On the Creation of Reliable Digital Evidence

Cited by 9 publications

References 10 publications

Towards a framework for enhancing potential digital evidence presentation

Towards a framework for enhancing potential digital evidence presentation

STOP, You’re on Camera: The Evidentiary Admissibility and Probative Value of Digital Records in Europe

Performance of Android Forensics Data Recovery Tools

Contact Info

Product

Resources

About