12.IND Lecture Notes - Lecture 6: Computer Forensics, Public Key Certificate, Digital Signature
13 Jan 2018
School
Course
Professor
Document Summary
Computer image verification and authentication: special needs of evidential authentication ***** During an investigation, it is decided that evidence may reside on a computer system. It may be possible to seize or impound the computer system, but this risks violating the basic principle of innocent until proven guilty, by depriving an innocent party of the use of his or her system. It should be perfectly possible to copy all the information from the computer system in a manner that leaves the original system untouched and yet makes all contents available for forensic analysis. The courts may rightly insist that the copied evidence is protected from either accidental or deliberate modification and that the investigating authority should prove that this has been done. Thus, it is not the content that needs protection, but its integrity. A secure method of determining that the data has not been altered by even a single bit since the copy was taken.
