文章基本信息

标题：Protecting Digital Evidence Integrity and Preserving Chain of Custody
本地全文：下载
作者：Shah, Makhdoom Syed Muhammad Baqir ; Salim, Shahzad ; Zulqarnain, Roha 等
期刊名称：Journal of Digital Forensics, Security and Law
印刷版ISSN：1558-7215
电子版ISSN：1558-7223
出版年度：2017
卷号：12
期号：2
页码：12
出版社：Association of Digital Forensics, Security and Law
摘要：Evidence is the key to solve any crime. Evidence integrity needs to be protected in order to make it admissible in the court of law. Digital evidence is more revealing, but it is fragile; it can easily be tampered with or modified. There are different techniques available to protect the integrity of digital evidence. Different automated digital evidence acquisition tools are available in the market. In this paper, we have analyzed two automated tools (EnCase and FTK Imager) that are used for disk imaging. These tools claim to protect the integrity of digital evidence. The techniques used by these tools are analyzed in this paper. Problems with their approaches are discussed and a solution is proposed to address the problems. A prototype of an automated tool is developed with an implementation of the proposed solution.
关键词：Digital evidence; integrity; chain of custody; digital hash; digital signature; disk imaging