Crime scene is any given place where it committed a criminal offense, in which the investigation should be done to find the causes and mechanisms of occurrence and on these to be investigated, for tracking and apprehe...Crime scene is any given place where it committed a criminal offense, in which the investigation should be done to find the causes and mechanisms of occurrence and on these to be investigated, for tracking and apprehension of perpetrators. Preservation of the scene is a very important action regarding the investigation and prosecution of the event that has happened, where law enforcement agencies or units that conduct surveillance of the scene make it. To preserve a scene means： to preserve the land in that state who has left the presidency. Preservation of the scene of that condition that has left the perpetrator is of particular importance to the inspection teams for tracks and material evidence found there are untouched and proceeding or their expertise will help prosecute perpetrators respectively capture of that work. Tracks and material evidence found in the scene should be retained together with all the space where the event happened because a possible carelessness during the examination as well as during the process of storage and security will bring us to a situation in which we will have our doubts concerning the tracks and material evidence found in that place. Also, preservation of the crime scene needs to be done because of the all action who have to take the searching unit, they need to be sure and security from everything that comes from outside.展开更多
Privacy preservation(PP)in Digital forensics(DF)is a conflicted and non-trivial issue.Existing solutions use the searchable encryption concept and,as a result,are not efficient and support only a keyword search.Moreov...Privacy preservation(PP)in Digital forensics(DF)is a conflicted and non-trivial issue.Existing solutions use the searchable encryption concept and,as a result,are not efficient and support only a keyword search.Moreover,the collected forensic data cannot be analyzed using existing well-known digital tools.This research paper first investigates the lawful requirements for PP in DF based on the organization for economic co-operation and development OECB)privacy guidelines.To have an efficient investigation process and meet the increased volume of data,the presented framework is designed based on the selective imaging concept and advanced encryption standard(AES).The proposed framework has two main modules,namely Selective Imaging Module(SIM)and Selective Analysis Module(SAM).The SIM and SAM modules are implemented based on advanced forensic format 4(AFF4)and SleuthKit open source forensics frameworks,respectively,and,accordingly,the proposed framework is evaluated in a forensically sound manner.The evaluation result is compared with other relevant works and,as a result,the proposed solution provides a privacy-preserving,efficient forensic imaging and analysis process while having also sufficient methods.Moreover,the AFF4 forensic image,produced by the SIM module,can be analyzed not only by SAM,but also by other well-known analysis tools available on the market.展开更多
In the face of the era of big data,how to ensure the authenticity of electronic data has become an important practical issue.Online preservation methods based on hash operation,time stamp,and blockchain technology can...In the face of the era of big data,how to ensure the authenticity of electronic data has become an important practical issue.Online preservation methods based on hash operation,time stamp,and blockchain technology can effectively guarantee the authenticity and security of electronic data.Blockchains are inherently traceable,de‑centralized,and difficult to tamper with,which can be enough served as the basic technology of electronic data certification.Preservation by blockchain mainly includes the following links:platform registration and identity authentication,generation and transmission of electronic data,and storage of electronic data.Preservation by blockchain has higher security than centralized online security because of distributed storage.However,it should be acknowledged that the preservation by blockchain is not without risk.The court should adhere to the principle of individual review of each case and review the electronic data from its generation,transmission,reception,storage,and collection.展开更多
文摘Crime scene is any given place where it committed a criminal offense, in which the investigation should be done to find the causes and mechanisms of occurrence and on these to be investigated, for tracking and apprehension of perpetrators. Preservation of the scene is a very important action regarding the investigation and prosecution of the event that has happened, where law enforcement agencies or units that conduct surveillance of the scene make it. To preserve a scene means： to preserve the land in that state who has left the presidency. Preservation of the scene of that condition that has left the perpetrator is of particular importance to the inspection teams for tracks and material evidence found there are untouched and proceeding or their expertise will help prosecute perpetrators respectively capture of that work. Tracks and material evidence found in the scene should be retained together with all the space where the event happened because a possible carelessness during the examination as well as during the process of storage and security will bring us to a situation in which we will have our doubts concerning the tracks and material evidence found in that place. Also, preservation of the crime scene needs to be done because of the all action who have to take the searching unit, they need to be sure and security from everything that comes from outside.
基金The authors extend their appreciation to the Deanship of Scientific Research at King Saud University for funding this work through research group no(RG-1441-531).
文摘Privacy preservation(PP)in Digital forensics(DF)is a conflicted and non-trivial issue.Existing solutions use the searchable encryption concept and,as a result,are not efficient and support only a keyword search.Moreover,the collected forensic data cannot be analyzed using existing well-known digital tools.This research paper first investigates the lawful requirements for PP in DF based on the organization for economic co-operation and development OECB)privacy guidelines.To have an efficient investigation process and meet the increased volume of data,the presented framework is designed based on the selective imaging concept and advanced encryption standard(AES).The proposed framework has two main modules,namely Selective Imaging Module(SIM)and Selective Analysis Module(SAM).The SIM and SAM modules are implemented based on advanced forensic format 4(AFF4)and SleuthKit open source forensics frameworks,respectively,and,accordingly,the proposed framework is evaluated in a forensically sound manner.The evaluation result is compared with other relevant works and,as a result,the proposed solution provides a privacy-preserving,efficient forensic imaging and analysis process while having also sufficient methods.Moreover,the AFF4 forensic image,produced by the SIM module,can be analyzed not only by SAM,but also by other well-known analysis tools available on the market.
文摘In the face of the era of big data,how to ensure the authenticity of electronic data has become an important practical issue.Online preservation methods based on hash operation,time stamp,and blockchain technology can effectively guarantee the authenticity and security of electronic data.Blockchains are inherently traceable,de‑centralized,and difficult to tamper with,which can be enough served as the basic technology of electronic data certification.Preservation by blockchain mainly includes the following links:platform registration and identity authentication,generation and transmission of electronic data,and storage of electronic data.Preservation by blockchain has higher security than centralized online security because of distributed storage.However,it should be acknowledged that the preservation by blockchain is not without risk.The court should adhere to the principle of individual review of each case and review the electronic data from its generation,transmission,reception,storage,and collection.
