Standard Representation for Digital Forensic Processing

Abstract

This paper discusses the lack of reliability and reproducibility validation in digital forensics for a criminal trial. It is argued that this challenge can be addressed with standard data-representation for digital evidence. The representation must include reproducibility documentation on processing operations including automation, human interaction, and investigation steps. Analyzed are two blueprint articlesthe CASE specification language for cyber-investigations [1] and the WANDA data standard for the documenting semi-automated hand-writing examination [2]. These two generic frameworks are studied for their granularity to support reproducibility testing by representing: (i) artefact characteristics, forensictool parameters and input -output logic; (ii) human and tool data interpretation; and (iii) parallel-running forensic tasks or chains of processes. Proposed is the integration of WANDA-based schema as CASE expression. The utility of such integration is demonstrated as a new module in CASE designed to meet the high standard of proof and scientific validation typically required in criminal investigations and trials. The expression ensures compliance without overburdening digital forensic practitioners.

The Presumption of Innocence as a Source for Universal Rules on Digital Evidence — The guiding principle for digital forensics in producing digital evidence for criminal investigations

“…The lack of legal reliability standard in combination with data volumes and complexity, 57 lack of resources and formal validation procedures are often used as an argument for not implementing quality standards. 58 Reliability validation crisis in digital forensics was discussed by scholars 59 and governmental bodies worldwide. 60 Several legal scholars called for DF expert accreditation 61 and discussed the absence of clear legal rules for evidence reliability assessment as a disadvantage for suspects and defendants.…”