Technical challenges and directions for digital forensics

• Published in: First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05) pp. 155 - 161
• Main Author: Mohay, G.
• Format: Conference Proceeding
• Language: English
• Published: IEEE 2005
• Subjects: Computer crime; Computer industry; Digital forensics; Embedded computing; Face detection; Information security; Internet; Law enforcement; Legal factors; Mobile handsets
• DOI: 10.1109/SADFE.2005.24
• ISBN: 9780769524788; 0769524788

Digital forensics is concerned with the investigation of any suspected crime or misbehaviour that may be manifested by digital evidence. The digital evidence may be manifest in various forms. It may be manifest on digital electronic devices or computers that are simply passive repositories of evidence that documents the activity, or it may consist of information or meta-information resident on the devices or computers that have been used to actually facilitate the activity, or that have been targeted by the activity. In each of these three cases, we have recorded digital evidence of the activity. This paper examines some recent advances in digital forensics and some important emerging challenges. It considers the following topics: tools and their evolution; the implications of large volumes of data; the impact of embedded and special-purpose computer systems; corporate governance and its implications for 'forensic readiness'; and the role of forensics in securing the Internet.