Evidentiary Implications of Potential Security Weaknesses in Forensic Software

View Sample PDF

Author(s): Chris K. Ridder (Stanford University, USA)
Copyright: 2011
Pages: 11
Source title: New Technologies for Digital Crime and Forensics: Devices, Applications, and Software
Source Author(s)/Editor(s): Chang-Tsun Li (University of Warwick, UK)and Anthony T. S. Ho (University of Surrey, UK)
DOI: 10.4018/978-1-60960-515-5.ch004

Keywords: Digital Crime & Forensics / Information Science Reference / IT Security and Ethics / Security & Forensics

Purchase

View Evidentiary Implications of Potential Security Weaknesses in Forensic Software on the publisher's website for pricing and purchasing information.

Abstract

Computer forensic software is used by lawyers and law enforcement to collect and preserve data in a “forensic image” so that it can be analyzed without changing the original media, and to preserve the chain of custody of the evidence. To the extent there are vulnerabilities in this software, an attacker may be able to hide or alter the data available to a forensic analyst, causing courts to render judgments based on inaccurate or incomplete evidence. There are a number of legal doctrines designed to ensure that evidence presented to courts is authentic, accurate and reliable, but thus far courts have not applied them with the possibility of security weaknesses in forensic software in mind. This article examines how courts may react to such claims, and recommends strategies that attorneys and courts can use to ensure that electronic evidence presented in court is both admissible and fair to litigants.

The IRMA Community

Research IRM

Evidentiary Implications of Potential Security Weaknesses in Forensic Software

Purchase

Abstract

Related Content

IRMA Sponsors