A Study of Computer Forensics Standard Operating Procedure in Military System

• Main Authors: Archer Yang, 楊禮峰
• Other Authors: Huei-Chung Chu
• Format: Others
• Language: zh-TW
• Published: 2009
• Online Access: http://ndltd.ncl.edu.tw/handle/35697280996065137811

碩士 === 華梵大學 === 資訊管理學系碩士班 === 97 === Computer forensics is an emerging field of the information security. Many countries currently plan to develop dedicated computer crime units; training professionals and developing computer forensic hardware and software to find out key security breach evidences with high-tech computer equipment. The common goal is of these efforts is to let the Computer Forensic results, e.g., the digital evidences, be valid, convincing evidences in the court. In recent years, many cases of the military information occurred, thus our army has become aware of the importance of computer forensics. The administrative investigation these leakages is the one of major works in the future since there are wide scopes in the computer crime; the relevant laws and regulations, equipment, professional, technical manpower, forensic procedures are too much to be handled by our current forensics technology. Any mistake in the above factors will significantly affect the forensic results. This paper thus proposes a new Taiwan MND computer forensic standard operating process that is suitable for uses in our army. The security goals are achieved by using the Delphi method to revise the key critical success factors of the operating procedures in the standard international forensic formats. The Taiwan MND was proved by the over 10 experts and scholars and front-line staff with the analytic questionnaire. Based on analytic results, the Taiwan MND is a good procedure to improve our current procedures and to apply in our authorities.