DOI Number : 10.5614/itbj.ict.res.appl.2014.8.2.5
Hits : 6

Two-Step Injection Method for Collecting Digital Evidence in Digital Forensics

Nana Rachmana Syambas & Naufal El Farisi

Telematics Laboratory, School of Electrical and Informatics Engineering,
Institut Teknologi Bandung, Jl. Ganesha No. 10, Bandung 40132, Indonesia
Email: nana@stei.itb.ac.id 


Abstract. In digital forensic investigations, the investigators take digital evidence from computers, laptops or other electronic goods. There are many complications when a suspect or related person does not want to cooperate or has removed digital evidence. A lot of research has been done with the goal of retrieving data from flash memory or other digital storage media from which the content has been deleted. Unfortunately, such methods cannot guarantee that all data will be recovered. Most data can only be recovered partially and sometimes not perfectly, so that some or all files cannot be opened. This paper proposes the development of a new method for the retrieval of digital evidence called the Two-Step Injection method (TSI). It focuses on the prevention of the loss of digital evidence through the deletion of data by suspects or other parties. The advantage of this method is that the system works in secret and can be combined with other digital evidence applications that already exist, so that the accuracy and completeness of the resulting digital evidence can be improved. An experiment to test the effectiveness of the method was set up. The developed TSI system worked properly and had a 100% success rate.

Keywords: digital evidence; digital forensics; hidden application; keyloggers; TSI.

Download Article
 
Bahasa Indonesia | English
 
 
 

Notification:

Begin on 10 October 2014 this website is no longer activated for article process in Journal of Mathematical and Fundamental Sciences, Journal of Engineering and Technological Sciences, Journal of ICT Research and Applications and Journal of Visual Art and Design. The next process will be proceeded under new website at http://journals.itb.ac.id.

For detail information please contact us to: journal@lppm.itb.ac.id.

 
       
       
       ITB Journal Visitor Number #9628376       
       Jl. Tamansari 64, Bandung 40116, Indonesia Visitor IP Address #       
       Tel : +62-22-250 1759 ext. 121 2011 Institut Teknologi Bandung       
       Fax : +62-22-250 4010, +62-22-251 1215 XHTML + CSS + RSS       
       E-mail : journal@lppm.itb.ac.id or proceedings@lppm.itb.ac.id Developed by AVE