The Enhanced Digital Investigation Process Model
暂无分享,去创建一个
Computer crimes are on the rise and unfortunately less than two percent of the reported cases result in conviction. The process (methodology and approach) one adopts in conducting a digital forensics investigation is immensely crucial to the outcome of such an investigation. Overlooking one step or interchanging any of the steps may lead to incom- plete or inconclusive results hence wrong interpretations and conclusions. A computer crime culprit may walk Scot-free or an innocent suspect may suer negative consequences (both monetary and otherwise) simply on account of a forensics investigation that was inadequate or improperly conducted. In this paper, we present a brief overview of forensic models and propose a new model based on the Integrated Digital Investigation Model.
[1] Lawrence A. Presley,et al. Recovering and Examining Computer Forensic Evidence , 2000 .
[2] Warren G. Kruse,et al. Computer Forensics: Incident Response Essentials , 2001 .
[3] Joseph Migga Kizza,et al. Ethical and Social Issues in the Information Age , 2013, Texts in Computer Science.
[4] Marilyn T. Miller,et al. Henry Lee's Crime Scene Handbook , 2001 .