A process model to enhance the accuracy of digital forensic investigation :

Abstract

The study sought to assess process models and their role in enhancing the accuracy of digital forensic investigation in NIRA-Uganda. The specific objectives were; to examine the process of digital investigation at NIRA-Uganda, acquiring evidence, establish how authentication of evidence has enhanced the accuracy of digital forensic investigations conducted and to determine the strength and weaknesses of exiting models assess evidence analysis process and how it has enhanced the accuracy of digital forensic investigations conducted by NIRA-Uganda. To determine the requirements for developing a process model and to develop and validate a process model for the said purpose. The study used a descriptive research design. The descriptive research design was used to obtain information concerning the status of the process model and also describe what exists with respect to the situations on the ground concerning how it enhances digital forensic investigation. A total of 125 respondents participated in the study out of the earmarked 150, which gave the rate of 83.3%. The study found out that digital forensic investigations are carried out in a systematic way by following procedures set forth. This is through observance of all protocols, deployment of the right tools, allowing the experts to carry out their investigations and corroborate the evidence by logically putting together, the pieces seized from computers and storage devices like CD-ROMS, Flash Disks among others while at the same time studying the psychological state of the person under investigation. In addition, the current system was found to be having strength which happen to be aiding digital forensic investigations and also weaknesses which have significantly affected the accuracy of digital forensic investigations. The study found out that the requirements for developing a model need utmost attention in order to make an informed decision on the best software and the possibility of having one which can be a game changer. Finally, The model for determining the adoptability of digital forensics in organization is a web based application designed using the latest web technologies. The system was evaluated and validated which confirmed that it can perform the intended functions. The multiple correlation analysis indicated that the relationship between the process model used and the accuracy of digital forensic investigations is at (r) = .368**, p<.01). Multiple regression analysis indicated that up to r 2 =0.249 (24.9%), was accounted for by the independent variables included in the study. This prediction is significant as envisaged in the way evidence is acquired, authenticated and analyzed have all combined to determine the accuracy of digital forensic investigations. As per the results, carrying out digital forensic investigation process enhances the accuracy of digital forensic investigations. In conclusion, digital forensic investigation is a systematic process which NIRA happens to be following and drawing on the strengths and weaknesses highlighted in the study, a lot needs to be improved for NIRA to accurately carry out digital forensic investigations The study recommends that government needs to get involved in the fight against cyber-crime, increase NIRA’s funding and other agencies to step up investigations, build the capacity of staff in NIRA and police forensic department, government needs to set up a digital forensic laboratory to help in electronic evidence analysis. Finally, the researcher recommended that SOPs from Scientific Working Group on Digital Evidence (SWGDE) are accepted as guidelines in electronic evidence management for admissibility purposes since they cover both the crime scene and the Forensic laboratory as well.