• 대한안전경영과학회:학술대회논문집
• /
• 대한안전경영과학회 2001년도 춘계학술대회
• /
• pp.275-280
• /
• 2001

DESIGNIN AND OPERATION OF DIGITAL EVIDENCE MANAGEMENT SYSTEM APPLYING COMPUTER FORENSICS AND ELECTRONIC CERTIFICATION Digital evidence will be used as a term, which means the electronic form of information which is necessary to confirm or prove the factum of all kinds of behaviors committed through the devices which have data processing ability including computer. It is expected that there will be the increase of legal conflicts surrounding electronic commerce activities as well as the increase of cyber crimes, as the number of Internet users are getting bigger. In order to solve the problems of conflicts derived from electronic commerce, the factum of electronic commerce activities must be confirmed. In order to confirm the factum of electronic commerce activities, the evidence is prerequisite. Almost all evidences relating to the electronic commerce activities exist in digital form. For the reason that the digital evidence can be easily damaged and changed, special management is required to collect, analyze, and preserve the digital evidence. In order to meet this requirement, this study proposes a basic model of digital evidence management system applying computer forensics and electronic authentication.

• Journal of Information Processing Systems
• /
• 제14권2호
• /
• pp.346-376
• /
• 2018

Digital forensics is a vital part of almost every criminal investigation given the amount of information available and the opportunities offered by electronic data to investigate and evidence a crime. However, in criminal justice proceedings, these electronic pieces of evidence are often considered with the utmost suspicion and uncertainty, although, on occasions are justifiable. Presently, the use of scientifically unproven forensic techniques are highly criticized in legal proceedings. Nevertheless, the exceedingly distinct and dynamic characteristics of electronic data, in addition to the current legislation and privacy laws remain as challenging aspects for systematically attesting evidence in a court of law. This article presents a comprehensive study to examine the issues that are considered essential to discuss and resolve, for the proper acceptance of evidence based on scientific grounds. Moreover, the article explains the state of forensics in emerging sub-fields of digital technology such as, cloud computing, social media, and the Internet of Things (IoT), and reviewing the challenges which may complicate the process of systematic validation of electronic evidence. The study further explores various solutions previously proposed, by researchers and academics, regarding their appropriateness based on their experimental evaluation. Additionally, this article suggests open research areas, highlighting many of the issues and problems associated with the empirical evaluation of these solutions for immediate attention by researchers and practitioners. Notably, academics must react to these challenges with appropriate emphasis on methodical verification. Therefore, for this purpose, the issues in the experiential validation of practices currently available are reviewed in this study. The review also discusses the struggle involved in demonstrating the reliability and validity of these approaches with contemporary evaluation methods. Furthermore, the development of best practices, reliable tools and the formulation of formal testing methods for digital forensic techniques are highlighted which could be extremely useful and of immense value to improve the trustworthiness of electronic evidence in legal proceedings.

• 한국중재학회지:중재연구
• /
• 제21권2호
• /
• pp.47-64
• /
• 2011

The China International Economic and Trade Arbitration Commission(CIETAC) released online arbitration rules which apply the resolution of disputes over electronic commerce transactions, as well as other economic and trade disputes in which the parties agree to do. The evidence submitted by the parties may be electronic evidence created, sent, received or stored by electronic, optical or magnetic means. Electronic evidence with a reliable electronic signature shall carry the same effect and probative force as a document with a hand-written signature. Where a case is tried in a tribunal, the arbitration tribunal shall conduct an online trial hearing using internet video conference or other electronic or computer communication means. Unless the parties have another agreement, summary procedure shall apply to cases where the amount in dispute exceeds RMB 100,000 but no more than RMB 1 million, or where the amount in dispute exceeds RMB 1 million and a party submits a written application for summary procedure after obtaining the written consent of the other party. Unless the parties have agreed otherwise, fast-track procedure shall apply to cases where the amount in dispute does not exceed RMB 100,000 or where the amount in dispute exceeds RMB 100,000 and a party submits a written application for fast-track procedure after obtaining the written consent of the other party. Notable features of the Online Rules are as follows; first, there is not detailed consideration for online arbitration. Second, communications between the parties and the tribunal are allowed only through the Secretariat. Third, elaborate provisions regarding the electronic submission and transmission of documents is provided for. Forth, various factors must be considered by the tribunal in deciding the evidence's reliability. Fifth, reasonable endeavours is levied on CIETAC to keep data communications secure and encrypted. Sixth, the tribunal has the right to investigate and collect relevant evidence. And finally different procedures are provided for in consideration of the various types of E-commerce.

• 정보보호학회논문지
• /
• 제23권2호
• /
• pp.273-277
• /
• 2013

디지털 방식으로 생산 저장되는 기록들이 급증함에 따라 이러한 디지털 기록들을 수집 보존 관리하는데 있어 신뢰성 및 무결성을 유지하고 이를 통해 법적 증거로써의 가치를 보장하는 것이 중요한 이슈가 되었다. 본 논문에서는 국내 형사 소송법 및 기록관리 법령을 토대로 현재 국가기록원에서 관리하고 있는 전자기록물의 사법적 증거능력에 대해 고찰하고 이에 대한 문제점을 도출하였다. 또한 본 논문에서 도출된 문제점을 해결하기 위해 디지털 포렌식(Digital Forensics) 절차 적용 및 해시값 활용 방안을 제시한다.

• 한국IT서비스학회지
• /
• 제19권3호
• /
• pp.57-73
• /
• 2020

The proportion of digital evidence in criminal cases has increased, while at the same time, the spread of the Internet has made it easy to delete information that is stored in another place and thus, the Internet is being used to delete online criminal evidence. To respond quickly and effectively to cybercrime, 29 countries signed the Convention on Cybercrime in 2001 through the Council of Europe. Article 16 of the Convention relates to the expedited preservation of stored computer data and requires signatories to adopt legislative measures to enable its competent authorities to order expeditious preservation of specified computer data where there are grounds to believe that the data is particularly vulnerable to loss or modification. More than 60 countries have joined the Convention since 2001 and have made efforts to improve their legal system in line with it. The United States legislated 18 U.S.C. § 2703(f) to preserve electronic evidence pending the issuance of a court order. The German Code of Criminal Procedure §§ 94~95 allows prosecution authorities to seize evidence or issue production orders without court control in urgent circumstances. A custodian shall be obliged to surrender evidence upon a request that evidence be preserved, and non-compliance results in punishment. Japan legislated the Criminal Procedure Act § 197(3) and (4) to establish a legal base for requesting that electronic records that are stored by an ISP not be deleted. The Korean Criminal Procedure Act § 184 outlines procedures for the preservation of evidence but does not adequately address the expeditious preservation of digital evidence that may be vulnerable to deletion. This paper analyzes nine considerations, including request subjects, requirements, and cost reimbursement to establish directions to improve the legal system for the expedited preservation of digital evidence. A new method to preserve online digital evidence in urgent cases is necessary.

• 정보관리학회지
• /
• 제38권2호
• /
• pp.201-226
• /
• 2021

근래까지 증거개시의 대상은 본래 종이 문서로 제한되어 왔으나, 디지털 시대로의 전환에 발맞추어 증거개시의 대상도 확대됨에 따라 현 시점에서는 전자적으로 생성된 정보에 관한 쟁점을 해결하는 것이 소송에서 중요해졌다. 따라서 본 연구에서는 전자기록이 증거로서 인정받기 위한 각 영역의 요건을 분석하고 기록관리 관점에서 고려해야 하는 요소를 설명하였다. 특히, 증거로서 전자기록을 활용되기 위한 선진 사례로, 미국의 전자증거개시제도인 eDiscovery를 선정하여 전자적 정보가 어떻게 수집, 보존되어 최종적으로 법원에 제출되는지를 살펴보았다. 특히 증거 보존 조치 지침을 조사하여 기록이 증거로서 보존되기 위해 고려되어야 하는 요건이 무엇인지 파악하였으며, 증거력이 있는 전자기록을 제출할 수 있도록 도와주는 도구인 eDiscovery 솔루션의 기능을 분석하였다. 본 연구결과를 통해 전자증거개시를 지원하는 시스템 구현 시 실질적인 도움이 될 수 있는 필수 기능요건을 도출하였다.

• 한국전자통신학회논문지
• /
• 제13권1호
• /
• pp.163-168
• /
• 2018

4차 산업혁명 시대의 도래와 함께 드론(Drone)의 활용이 다양한 분야에서 급속도로 진보하며 진행되고 있다. 이제 수사(搜査)의 영역에서도 드론이 광범위하게 활용될 것이다. 그동안의 형사사진이 2차원적 디지털 영상에 머물렀다면 드론을 활용할 경우 3차원 영상의 촬영뿐 아니라 그러한 영상물을 3D 프린터로 인쇄할 경우 사건현장의 재현이 가능하게 될 것이다. 일차적으로 수사기관이 드론을 이용하여 촬영하는 영상물은 디지털 영상증거로써 증거능력 확보를 위한 요건은 디지털 증거의 증거능력을 갖추기 위한 조건과 다르지 않다. 다만 드론이 과학수사의 새로운 영역으로 자리하게 될 때 드론으로 촬영한 영상물의 진정성을 확보하고 증거로써 활용할 수 있도록 시스템화 하는 것이 긴요한 바 본 논문에서는 드론으로 촬영한 디지털 영상물의 증거능력 확보방안을 제시하고자 한다.

• International Journal of Fuzzy Logic and Intelligent Systems
• /
• 제16권4호
• /
• pp.308-317
• /
• 2016

Multiple evidences based decision making is an important functionality for computers and robots. To combine multiple evidences, mathematical theory of evidence has been developed, and it involves the most vital part called Dempster's rule of combination. The rule is used for combining multiple evidences. However, the combined result gives a counterintuitive conclusion when highly conflicting evidences exist. In particular, when we obtain two different sources of evidence for a single hypothesis, only one of the sources may contain evidence. In this paper, we introduce a modified combination rule based on the partial conflict measurement by using an absolute difference between two evidences' basic probability numbers. The basic probability number is described in details in Section 2 "Mathematical Theory of Evidence". As a result, the proposed combination rule outperforms Dempster's rule of combination. More precisely, the modified combination rule provides a reasonable conclusion when combining highly conflicting evidences and shows similar results with Dempster's rule of combination in the case of the both sources of evidence are not conflicting. In addition, when obtained evidences contain multiple hypotheses, our proposed combination rule shows more logically acceptable results in compared with the results of Dempster's rule.

• ETRI Journal
• /
• 제42권5호
• /
• pp.799-804
• /
• 2020

Network security situation prediction is difficult due to its strong uncertainty, but DS evidence theory performs well in solving the problem of uncertainty. Based on DS evidence theory, this study analyzed the prediction of the network security situation, designed a prediction model based on the improved DS evidence theory, and carried out a simulation experiment. The experimental results showed that the improved method could predict accurately in the case of a large conflict, and had strong anti-jamming abilities as compared with the original method. The experimental results prove the effectiveness of the improved method in the prediction of the network security situation and provide some theoretical basis for the further application of DS evidence theory.

• 한국경영정보학회:학술대회논문집
• /
• 한국경영정보학회 2007년도 추계학술대회
• /
• pp.284-293
• /
• 2007

In the present competitive organizational environment more organizations are implementing knowledge management initiatives to gain strategic advantage. One such initiative is that of implementing electronic knowledge repositories (EKR) which often leads to a rapid increase in the quantity of information employees have to process daily; raising concerns of employees being overloaded. This is especially true for current EKRs using distributive technology, enabling customizable individual workspaces which can result in loose knowledge structures. This paper identifies a new type of information overload (IO), extending the concept as occurring in both knowledge seekers and contributors and uses cognitive dissonance theory to provide evidence that IO can change employees' perception of EKR usage. This research paper provides the first empirical evidence that overload has no sufficient affect on EKR continuance intention directly, but has significant negative affect on the two main success measures; perceived usefulness and satisfaction of the system.