Abstract

The internet and advanced technologies has been used as tools by criminals these days to perpetrate all forms of crime and the digital world is exploited to facilitate crimes which are mostly technology driven. The evidence of such crimes which are technologically driven are in digital form hence the need to employ techniques, procedures, and methodologies that are technology inclined to reconstruct events and uncover evidence that are admissible in court. Digital forensics therefore provides the investigative techniques, scientifically derived and proven methods for preserving, collecting, validating, identifying, analyzing, interpreting and presenting admissible digital evidence derived from digital source(s). Methods use to undertake forensic investigation is paramount since inappropriate model choice may result in incomplete or missing evidence. In this paper, we look at some commonly used models, their strength and weakness to inform investigators where to appropriately use those forensic investigation model(s) as well as a proposed scheme to aid the selection of the appropriate investigative model.

References

• Brian, C. and Eugene, H. S. (2003). Getting Physical with the Digital Investigation Process. International Journal of Digital Evidence, Fall 2003, Volume 2, Issue 2.
• Gary, L. P. (2001). A Road Map for Digital Forensic Research. Technical Report DTR – T0010-01, DFRWS. Report for the First Digital Forensic Science Communications, Vol. 2 No. 4
• Kruse II, W. and Jay, G. H. (2002). Computer Forensics: Incident Response Essentials. Addison – Wesley.
• Lee, H., Palmbach, T., Miller, M. (2001). Henry Lee’s Crime scene Handbook. London: Academic Press
• Marcus, K. R., James, G., Rick, M., Timothy, W. and Steve, D. (2006). Computer Forensics Field Triage Process Model. Journal of Digital Forensics, Security and Law, Vol. 1 No. 2
• Mark, R., Clint, C. and Gregg, G. (2002). An Examination of Digital Forensic Models. International Journal of Digital Evidence, Fall 2002, Volume 1, Issue 3.
• Michael, N., Mark, M. P. and Lawrence, P. (2000). Recovering and Examining Computer Forensic Evidence, Forensics Science Communications, Vol. 2, No. 4
• Technical Working Group Electronic Crime Scene Investigation – A Guide for First Responders, USDOJ, July 2001
• Venansius, B., and Florence, T. (2004). The Enhanced Investigation Process Model, in proceeding of Digital Forensic Research Workshop, Baltimore, MD.
• Yunus, Y., Roslan, I. and Zainuddin, H. (2011). Common Phases of Computer Forensics Investigative Models. International Journal of Computer Science & Information Technology (IJCSIT), Vol 3, No. 3.