What Is the Definition of Digital Forensics?
Digital forensics is a branch of computer science that focuses on developing evidence pertaining to digital files for use in civil or criminal court proceedings. Digital forensic evidence would relate to a computer document, email, text, digital photograph, software program, or other digital record which may be at issue in a legal case.
Other People Are Reading
-
Definition
-
Forensic science is the study of any field as it pertains to legal matters. Forensic evidence refers more specifically to evidence which meets stringent standards of reliability and scientific integrity for admissibility in court. Digital forensics is the forensic science related to computer operations, software, and files, as well as the digital or electronic files contained on other technology-based appliances or storage devices, such as a digital camera. There is a broad array of applications of digital forensics to civil and criminal cases.
Computer Crimes
-
Computer-based crimes include downloading or transmitting illegal digital files, from illegal weapons plans to child pornography to unauthorized music downloads. Computer crimes also include theft or fraud related to valuable software or proprietary computer hardware, applications, or other intellectual property interests. Digital forensics experts investigate the suspect's computer files to determine whether, how, and from what source the unlawful or pirated files or software originated.
-
Recover Destroyed Files
-
Digital forensics experts attempt to recover computer files which have been lost due to destruction of the computer hardware through a crime such as arson. Digital forensic science is also applied to recover digital files which a crime suspect has deliberately attempted to erase or eliminate. Recovery experts can often retrieve at least some data from a digital device even if it has been badly burned or smashed.
Altered Photographs
-
Photographic fraud was an evidentiary issue in court cases long before there were digital cameras. However, a fairly high level of artistic sophistication was required to believably alter a film-and-paper, darkroom-generated photograph. Digital photographs can be easily altered by anyone with some free photographic software on a personal computer, and relatively inexpensive photo editing programs can generate highly sophisticated effects. Digital forensic scientists assess minute differences in light angles, use algorithms to evaluate whether an area of the picture has been copied in from another area, and magnify microscopic reflections to determine whether the image as a whole is genuine or altered.
Hacking
-
Digital forensic science techniques are used to detect computer security breaches---hacking---and trace them to their source. Network hacking may be a crime, or may give rise to civil liability, depending on the nature of the files accessed or the damage done by the hacker.
Cell Phone Data
-
Cell phones contain a vast array of personal data. Digital forensic technologists can access significant information regarding a person's whereabouts, contacts, and communications by analyzing that person's digital cell phone records in conjunction with his telephone billing records as well as other digital data collections such as credit card and ATM records.
-
