PENERAPAN FRAMEWORK HARMONISED DIGITAL FORENSIC INVESTIGATION PROCESS (HDFIP) UNTUK MENDAPATKAN ARTIFAK BUKTI DIGITAL PADA SMARTPHONE TIZEN

Menurut Tizen Team (2016) smartphone dengan sistem operasi tizen termasuk smartphone yang baru dan memiliki jenis aplikasi Web, Hybrid, Native/asli dengan extensi file berupa file.tpk yang berbeda dengan jenis smartphone lainnya. Dari beberapa review penelitian sebelumnya, dapat diketahui bahwa belum ada penelitian tentang proses penanganan smartphone tizen beserta platform whatsapp yang berada didalamnya. Sebagian besar hasil penelitian hanya meliputi tentang bagaimana ekplorasi bukti digital pada smarphone android dan membahas tizen dari segi keamanan. Berdasarkan review dari penelitian tersebut, terdapat beberapa masalah diantaranya belum adanya metode dan penerapan framework yang cocok untuk proses penanganan smartphone tizen dan platform whatsapp yang berada didalamnya tersebut. Untuk itu, metode live forensics dan model HDFIP dapat dijadikan acuan framework yang cocok untuk mengidentifikasi karakteristik tizen dan platform whatsapp. Dimana metode live forensics akan digunakan untuk melakukan tahapan analisa secara terperinci dan teliti terhadap peangkat barang bukti digital dan dilakukan dalam sebuah perangkat elektronik dalam keadaan power on. Sehingga penelitian ini menghasilkan perbedaan mendasar artifak android dan tizen, mendapatkan karakteristik bukti digital pada Smartphone Tizen, yaitu berbentuk logical dan berupa file dengan ektensi .CSV dan file.db, dimana hasil penelitian ini terfokus pada sistem aplikasi WhatsApp dan SMS.

Download Full-text

Digital Forensic Investigation of Social Media, Acquisition and Analysis of Digital Evidence

International Journal of Strategic Engineering ◽

10.4018/ijose.2019010105 ◽

2019 ◽

Vol 2 (1) ◽

pp. 52-60 ◽

Cited By ~ 3

Author(s):

Reza Montasari ◽

Richard Hill ◽

Victoria Carpenter ◽

Farshad Montaseri

Keyword(s):

Social Media ◽

Social Interaction ◽

Social Networking ◽

Social Networking Sites ◽

Instant Messaging ◽

Digital Evidence ◽

Forensic Investigation ◽

Digital Forensic ◽

Photo Sharing ◽

Investigation Process

Various social networking sites (SNSs), widely referred to as social media, provide services such as email, blogging, instant messaging and photo sharing for social and commercial interactions. SNSs are facilitating new forms of social interaction, dialogue, exchange and collaboration. They allow millions of users and organisations worldwide to exchange ideas, post updates and comments or participate in activities and events, while sharing their wider interests. At the same time, such a phenomenon has led to an upsurge in significant criminal activities by perpetrators who are becoming increasingly sophisticated in their attempts to deploy technology to circumvent detection. Digital forensic Examiners (DFEs) often face serious challenges in relation to data acquisition. Therefore, this article aims to analyse the significance of SNSs in DFIs and challenges that DFEs often encounter when acquiring evidence from SNSs. Furthermore, this article describes the steps of the digital forensic investigation process that must be taken to acquire digital evidence that is both authentic and forensically sound.

Download Full-text

Testing the harmonised digital forensic investigation process model-using an Android mobile phone

2013 Information Security for South Africa ◽

10.1109/issa.2013.6641063 ◽

2013 ◽

Cited By ~ 8

Author(s):

Stacey Omeleze ◽

H. S. Venter

Keyword(s):

Mobile Phone ◽

Process Model ◽

Forensic Investigation ◽

Digital Forensic ◽

Investigation Process

Download Full-text

Conducting Forensic Investigations of Cyber Attacks on Automobile In-Vehicle Networks

Networking and Telecommunications ◽

10.4018/978-1-60566-986-1.ch041 ◽

2010 ◽

pp. 647-660 ◽

Cited By ~ 1

Author(s):

Dennis K. Nilsson ◽

Ulf E. Larson

Keyword(s):

Data Collection ◽

Cyber Attacks ◽

Entry Point ◽

Forensic Investigation ◽

Digital Forensic ◽

Event Reconstruction ◽

Vehicle Networks ◽

Digital Investigation ◽

Investigation Process ◽

Vehicle Network

The introduction of a wireless gateway as an entry point to the automobile in-vehicle network reduces the effort of performing diagnostics and firmware updates considerably. Unfortunately, the same gateway also allows cyber attacks to target the unprotected network which currently lacks proper means for detecting and investigating security-related events. In this article, we discuss how to perform a digital forensic investigation of an in-vehicle network. An analysis of the current features of the network is performed, and an attacker model is developed. Based on the attacker model and a set of generally accepted forensic investigation principles, we derive a list of requirements for detection, data collection, and event reconstruction. We then use the Integrated Digital Investigation Process proposed by Carrier and Spafford (2004) as a template to illustrate how our derived requirements affect an investigation. For each phase of the process, we show the benefits of meeting the requirements and the implications of not complying with them.

Download Full-text