Research on Collection and Preservation of Digital Evidence With Mobile Device on Cloud Platform-An Empirical Case of Facebook messenger

• Main Authors: Yao-Tsung Chen, 陳耀宗
• Other Authors: I-Long Lin
• Format: Others
• Language: zh-TW
• Published: 2016
• Online Access: http://ndltd.ncl.edu.tw/handle/4xmxcm

碩士 === 國立宜蘭大學 === 多媒體網路通訊數位學習碩士在職專班 === 105 === Information technology leap era of ICT equipment such as springing ㄧ flourish, to bring people a lot of convenience, but also increases the risk of capital placement, and The Social Network (station) is also quietly staged, but also bring use those who can not imagine a crisis. The study on the Facebook Messenger for the study to investigate the event of cyber crime when (phishing, a resource theft, etc. ...), digital evidence is highly occult, perishable and difficult to collect evidence and other characteristics, is a new form of network topics crime. The proposed of this study reference scholars Professor Lin Yilong digital evidence forensic standard operating procedures (DEFSOP), proposes Facebook Messenger Cloud platform digital evidence collection and preservation of standard operating procedures (Facebook Messenger-DEPSOP), analyzed through the relevant digital forensics tools and practical examples; but also because the source of digital evidence is very pluralistic, collect the evidence necessary to have a reliable authenticity, integrity, hard work if investigators gathering, data analysis because it did not follow the standard operating procedures that make them unable to reach a key to enter the court evidence, then all efforts will be in vain. Therefore, this study will to ISO 27037: Comparative Analysis 2012, the Ministry of Justice information security incident preservation of evidence standard operating procedures as well as domestic scholars Professor Lin Yilong proposed digital evidence forensic standard operating procedures (DEFSOP), and in accordance with CIAC: C (Compliance) Appropriateness of , I (integrity) integrity, a (Accuracy) correctness and C (consistency) consistency principle, as the collection and preservation of digital evidence handling follow, and to ensure that evidence obtained in the original without changing or destroying evidence in the case, Thinking the future direction of hope to further provide justice practitioners and all areas of the art in this issue.