International Research Journal of Engineering and Technology (IRJET) Volume: 11 Issue: 03 | Mar 2024
www.irjet.net
e-ISSN: 2395-0056 p-ISSN: 2395-0072
Preserving-Integrity-of-Forensic-Evidence-using-BlockchainTechnology Mrs.Diana.S.Steffi, S.Ramu, G.Harish, R.Saranraj, S.Gughan 1Assistant Professor, Department of Computer Science and Engineering, Christ College of Engineering and
Technology
2,3,4,5,6 Department of Computer Science and Engineering, Christ College of engineering and Technology
------------------------------------------------------------------------***-----------------------------------------------------------------------investigators who are trained to safely preserve and ABSTRACT
examine data on digital devices and networks. Their primary objective is to identify the root causes of incidents and gather evidence essential for legal proceedings. In conducting digital forensic investigations, it is imperative to adhere to established forensic principles, evidence continuity, and rigorous methodologies. This ensures that the integrity and admissibility of the evidence collected are maintained throughout the investigative process. Forensic investigators are well-versed in the legal aspects, best practices, and methodologies prevalent in the contemporary digital forensic intelligence environment. Evidence continuity, a foundational concept in this field, encompasses a comprehensive approach covering the entire lifecycle of digital evidence. This includes the proper seizure of devices, secure exhibit handling, meticulous data collection, and preservation protocols, as well as thorough examination and investigation techniques. By adhering to these principles, forensic investigators not only ensure the reliability of the evidence but also facilitate the establishment of a clear and unbroken chain of custody, which is essential in legal proceedings. Ultimately, their expertise in these areas contributes significantly to the successful resolution of cyber-attacks and digital crimes, while upholding the principles of justice and adherence to legal standards. After the seizure and preservation of evidence, the next crucial step in a digital forensic intelligence investigation is the examination phase. This phase involves the use of specialized forensic software and hardware to create a complete copy of all digital data from the collected devices, a process known as imaging. The imaging serves the dual purpose of preserving the original device as an evidence exhibit while leaving the imaged version available for forensic testing and analysis. This separation is essential to ensure that the original evidence remains untouched and uncontaminated throughout the investigation. Working in collaboration with our clients, the analysis phase of the digital forensic intelligence investigation begins with the thorough interrogation of the collected data. During this stage, forensic experts meticulously examine the imaged data to uncover critical information and insights. This may involve the recovery of deleted files, the identification of malicious software or cyberattack vectors, and the reconstruction of digital activities and timelines. The analysis phase is a pivotal step in the investigative process, as it aims to answer critical
The integration of blockchain technology in forensic investigations not only signifies a major advancement but also addresses several critical challenges faced by the legal and criminal justice system. At the heart of this integration are smart contracts, which automate and secure key aspects of the investigative process. These self-executing agreements operate with predefined rules and conditions, ensuring the utmost integrity and transparency in crucial tasks such as evidence tracking, chain of custody management, and access control. One of the primary benefits of this system is the substantial enhancement of data security. Blockchain's foundation in cryptographic principles and decentralized architecture makes it exceptionally resistant of unauthorized access and tampering. This level of security is particularly vital in forensic investigations, where maintaining the integrity of evidence is paramount. Furthermore, the immutability of blockchain records is a game-changer in ensuring the reliability of information. Once data is recorded on the blockchain, it becomes virtually impossible to alter, offering an unchangeable ledger of events and actions throughout the investigation. In summary, this innovative integration of blockchain and smart contracts delivers heightened efficiency, traceability, and transparency to the forensic investigation process. It not only safeguards the integrity of evidence but also streamlines operations, reducing the potential for errors and disputes. By providing an unforgeable and transparent chain of custody and evidence history, this system significantly strengthens the overall quality and trustworthiness of forensic investigations within the legal and criminal justice framework. KEYWORDS: Blockchain, Chain of Custody, Digital evidence, Blowfish, Image Forensic.
I.INTRODUCTION: Forensic intelligence plays a critical role in modern investigative processes, particularly in the context of cyber-attacks and digital crimes. It encompasses a range of techniques and methodologies to gather and analyze evidence both before and after these incidents occur. A key component of this discipline is the expertise of forensic © 2024, IRJET
|
Impact Factor value: 8.226
|
ISO 9001:2008 Certified Journal
|
Page 354