Integrity Assurance for Small Scale Digital Devices Based Evidence for Cyber Crime Investigation

Abstract

The recent rapid development in the field of information and communication technology industry have made the concept of acquisition and analysis of digital evidence an increasingly important tool for uncovering digitally related crimes and preparing them as a reliable evidence for legal acceptability. In this paper, a new generalized framework for the acquisition of digital evidence was applied on multiple forensics tools. The forensic tools used were EndCase, AccessData FTK Imager, Mount Image Pro and Autopsy 4.0 and their individual features was compared in order to provide reasonable level of assurance to compare various level of integrity assurance to make them admissible as viable digital evidence in the law court during cyber related litigation.