The Comprehensive Digital Forensic Investigation Process Model (CDFIPM) for Digital Forensic Practice
AffiliationUniversity of Derby
MetadataShow full item record
The following license files are associated with this item:
- Creative Commons
Except where otherwise noted, this item's license is described as http://creativecommons.org/licenses/by-nc-nd/4.0/
Showing items related by title, author, creator and subject.
Behavioural Digital Forensics Model: Embedding Behavioural Evidence Analysis into the Investigation of Digital CrimesAl Mutawa, Noora; Bryce, Joanne; Franqueira, Virginia N.L.; Marrington, Andrew; Read, Janet C.; University of Derby (Elsevier, 2018-12-15)The state-of-the-art and practice show an increased recognition, but limited adoption, of Behavioural Evidence Analysis (BEA) within the Digital Forensics (DF) investigation process. Yet, there is currently no BEA-driven process model and guidelines for DF investigators to follow in order to take advantage of such an approach. This paper proposes the Behavioural Digital Forensics Model to fill this gap. It takes a multidisciplinary approach which incorporates BEA into in-lab investigation of seized devices related to interpersonal cases (i.e., digital crimes involving human interactions between offender(s) and victim(s)). The model was designed based on the application of traditional BEA phases to 35 real cases, and evaluated using 5 real digital crime cases - all from Dubai Police archive. This paper, however, provides details of only one case from this evaluation pool. Compared to the outcome of these cases using a traditional DF investigation process, the new model showed a number of benefits. It allowed a more effective focusing of the investigation, and provided logical directions for identifying the location of further relevant evidence. It also enabled a better understanding and interpretation of victim/offender behaviours (e.g., probable offenders' motivations and modus operandi), which facilitated a more in depth understanding of the dynamics of the specific crime. Finally, in some cases, it enabled the identification of suspect's collaborators, something which was not identified via the traditional investigative process.
Factors influencing digital forensic investigations: Empirical evaluation of 12 years of Dubai police casesAl Awadhi, Ibtesam; Read, Janet C.; Marrington, Andrew; Franqueira, Virginia N. L.; University of Central Lancashire; Zayed University; University of Derby (Association of Digital Forensics, Security and Law (ADFSL), 2015)In Digital Forensics, person-hours spent on investigation is a key factor which needs to be kept to a minimum whilst also paying close attention to the authenticity of the evidence. The literature describes challenges behind increasing person-hours and identifies several factors which contribute to this phenomenon. This paper reviews these factors and demonstrates that they do not wholly account for increases in investigation time. Using real case records from the Dubai Police, an extensive study explains the contribution of other factors to the increase in person-hours. We conclude this work by emphasizing on several factors affecting the person-hours in contrast to what most of the literature in this area proposes.