Research Article | OPEN ACCESS
A Review on Mobile Device's Digital Forensic Process Models
Anahita Farjamfar, Mohd Taufik Abdullah, Ramlan Mahmod and Nur Izura Udzir
Security Research Group, Faculty of Computer Science and Information Technology,
University of Putra Malaysia, Serdang, Selangor, 43400, Malaysia
Research Journal of Applied Sciences, Engineering and Technology 2014 3:358-366
Received: February 25, 2014 | Accepted: May 19, 2014 | Published: July 15, 2014
Abstract
The main purpose of this study is to discuss the different comparative studies on digital forensics process models specially in the field of mobile devices. In order to legally pursue digital criminals, investigation should be conducted in a forensically sound manner so that the acquired evidence would be accepted in the court of law. Digital forensic process models define the important steps that should be followed to assure the investigation is performed successfully. There are a number of digital forensic process models developed by various organizations worldwide, but yet, there is no agreement among forensics investigation and legislative delegation which procedures to adhere to; specially in the case of facing mobile devices with latest technologies. This is vital, as mobile phones and other mobile devices such as PDAs or tablets are becoming ever-present as the main technology platform around the world and people are obtaining and using mobile phones more than ever. In this study we will give a review of the proposed digital forensics process models within last 7 years and to discuss the need for a consensus to follow the same underlying approaches while continually updating digital forensics process models to cover new emerging technologies and devices.
Keywords:
Digital evidence , digital forensics, mobile forensic,
References
-
ACPO (The Association of Chief Police Officers), 2007. Good Practice Guide for Computer-based Electronic Evidence Version 4. England, Wales and N. Ireland.
Direct Link
-
Ademu, I.O. and C.O. Imafidon, 2012. Applying security mechanism to digital forensic investigation process. Int. J. Emerg. Trends Eng. Dev., 7(2): 128-133.
-
Ademu, I.O., C.O. Imafidon and D.S. Preston, 2011. A new approach of digital forensic model for digital forensic investigation. Int. J. Adv. Comput. Sci. Appl., 2(12): 175-178.
-
Ali, A., 2014. A review of different comparative studies on mobile operating system. Res. J. Appl. Sci. Eng. Technol., 7(12): 2578-2582.
CrossRef
-
Casey, E., 2009. Handbook of Digital Forensics and Investigation. Access Online via Elsevier, Forensic Analysis.
-
Cohen, F.B., 2010. Fundamental of digital forensic evidence. In: Stavroulakis, P.P. and M. Stamp (Eds.), 1st Edn., Handbook of Information and Communication Security. Springer, pp: 789-808, 10.1007/978-1-84882-684-7.
CrossRef
-
Cohen, F.B., J. Lowrie and C. Preston, 2011. The state of the science of digital evidence examination. Int. Fed. Info. Proc., 7: 3-21.
CrossRef
-
Daubert Rule, 2001. Merrell Dow Pharmaceuticals. Inc., 509 U. S. 579 (1993), Federal Rules of Evidence, as amended, 28 U.S.C., Rule 702.
-
Daware, S., S. Dahake and V.M. Thakare, 2012. Mobile forensics?: Overview of digital forensic, computer forensics vs. mobile forensics and tools. Int. J. Comput. Appl., 2012: 7-8.
-
Freiling, F.C. and B. Schwittay, 2007. A common process model for incident response and computer forensics. Journal = {IMF}, 7: 19-40.
-
Garfinkel, S., P. Farrell, V. Roussev and G. Dinolt, 2009. Bringing science to digital forensics with standardized forensic corpora. Digit. Invest., 6: S2-S11.
CrossRef
-
Ghosh, A., 2004. Guidelines for the management of IT evidence. Incident Response and Forensics Workshop, Document No telwg29/ IRF/04a.
-
Goel, A., A. Tyagi and A. Agarwal, 2012. Smartphone forensic investigation process model. Int. J. Comput. Sci. Secur. (IJCSS), 6(5): 322-341.
-
Hankins, R., T. Uehara and J. Liu, 2009. A comparative study of forensic science and computer forensics. Proceeding of 3rd IEEE International Conference on Secure Software Integration and Reliability Improvement, pp: 230-239.
CrossRef
-
International Organization on Computer Evidence (IOCE), 2002. Guidelines for Best Practice in the Forensic Examination of Digital Technology.
Direct Link
-
Jansen, W. and R. Ayers, 2007. Guidelines on cell phone forensics. NIST Special Publication (SP) 800-101, Gaithersburg, MD.
CrossRef
-
Leigland, R. and A.W. Krings, 2004. A formalization of digital forensics. Int. J. Digit. Evidence, 3(2): 1-32.
-
Lin, I.L., H.C. Chao and S.H. Peng, 2011. Research of digital evidence forensics standard operating procedure with comparison and analysis based on smart phone. Proceeding of International Conference on Broadband and Wireless Computing, Communication and Applications, pp: 386-391.
CrossRef
-
National Research Council, 2009. Strengthening Forensic Science in the United States: A Path Forward. ISBN: 0-309-13131-6, pp: 352.
-
Owen, P. and P. Thomas, 2011. An analysis of digital forensic examinations: Mobile devices versus hard disk drives utilising ACPO and NIST guidelines. Digit. Invest., 8(2): 135-140.
CrossRef
-
Parvez, S., A. Dehghantanha and H.G. Broujerdi, 2011. Framework of digital forensics for the Samsung star series phone. Proceeding of 3rd International Conference on Electronics Computer Technology (ICECT, 2011), 2: 264-267.
CrossRef
-
Perumal, S., 2009. Digital forensic model based on Malaysian investigation process. Int. J. Comput. Sci. Network Secur., 9(8): 38-44.
-
Pollitt, M.M., 2007. An ad hoc review of digital forensic models. Proceeding of 2nd International Workshop on Systematic Approaches to Digital Forensic Engineering, pp: 43-54.
CrossRef
-
Ramabhadran, A., 2007. Forensic investigation process model for windows mobile devices. Tata Elxsi Security Group, pp: 1-16.
-
Selamat, S. and R. Yusof, 2008. Mapping process of digital forensic investigation framework. Int. J. Comput. Sci. Network Secur., 8(10): 163-169.
-
Spalevic, Z., Z. Bjelajac and M. Caric, 2012. The importance and the role of forensics of mobile. FACTA Univ., Ser. Electr. Energ., 25(2): 121-136.
-
SWGDE, 2006. SWGDE and SWGIT Digital and Multimedia Evidence Glossary. [Online].
Direct Link
-
SWGDE, 2009. Scientific Working Group on Digital Evidence (SWGDE). pp: 1-6.
Direct Link
-
Valjarevic, A. and H.S. Venter, 2012. Harmonised digital forensic investigation process model. Proceeding of Information Security for South Africa (ISSA, 2012), pp: 1-10.
-
Yates, M. and H. Chi, 2011. A framework for designing benchmarks of investigating digital forensics tools for mobile devices. Proceedings of the 49th Annual Southeast Regional Conference on ACM-SE '11, pp: 179-184.
CrossRef
-
Yu, X., L.H. Jiang, H. Shu, Q. Yin and T.M. Liu, 2009. A process model for forensic analysis of Symbian smart phones. In: Slezak, D. et al. (Eds.), ASEA 2009. CCIS 59, Springer-Verlag, Berlin, Heidelberg, pp: 86-93.
CrossRef
Competing interests
The authors have no competing interests.
Open Access Policy
This article is distributed under the terms of the Creative Commons Attribution 4.0 International License (http://creativecommons.org/licenses/by/4.0/), which permits unrestricted use, distribution, and reproduction in any medium, provided you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license, and indicate if changes were made.
Copyright
The authors have no competing interests.
|
|
|
ISSN (Online): 2040-7467
ISSN (Print): 2040-7459 |
|
Information |
|
|
|
Sales & Services |
|
|
|