1.1 Introduction
Computer forensics is the application of investigation and analysis techniques to gather and preserve evidence from a particular computing device in a way that is suitable for presentation in a court of law. The goal of computer forensics is to perform a structured investigation while maintaining a documented chain of evidence to find out exactly what happened on a computer device and who was responsible for it. Computer forensics is the equivalent of surveying a crime scene (Borek, 2001). Computer Digital forensics or digital forensic science concerns evidences from computers that should be convincing and sufficiently reliable to stand up in court. Digital forensics is the science of locating; extracting and analysing types of data from different devices, which are interpreted by specialists in order to be used as legal evidence (Sivaprasad et al., 2012). Forensics investigators typically follow a standard set of procedures; after physically isolating the device in question to make sure it cannot be accidentally contaminated, investigators make a digital copy of the devices storage media.
As a prelude to other parts of this study, this chapter will discuss the background upon which this study was initiated, the statement of problems that led to this study, the Aim and Objectives of the study. Others are Significance of the study, Scope of work, Limitations of the Study and Definition of technical terms.
1.2 Background of Study
Computer Digital forensics or digital forensic science concerns evidences from computers that should be convincing and sufficiently reliable to stand up in court. Digital forensics is the science of locating; extracting and analysing types of data from different devices, which are interpreted by specialists in order to be used as legal evidence (Sivaprasad et al., 2012). Once the original media has been copied, it is locked in a safe of other secure facility to maintain its pristine condition. All the investigation is done on the digital copy. Investigators use a variety of techniques and proprietary software forensic applications to examine the copy, searching hidden folders and unallocated disk space for copies of deleted, encrypted, or damaged files. Any evidence found on the digital copy is carefully documented in a finding report and verified with the original in preparation for legal proceedings that involve discovery, depositions, or actual litigation. The digital evidence can be found in computer (hard disks or RAMs), cell phones, iPods, pen drives, digital cameras, CDs, DVDs, floppies, computer networks, the Internet etc (Vacca, 2005) or it can be hidden in pictures (Steganography), deleted files, formatted hard disks, deleted emails, encrypted files, chat transcripts, password protected files and so on.
The world is becoming a smaller place in which to live and work. A technological revolution in communications and information exchange has taken place within business, industry and homes. Most developed and developing countries are substantially more invested in information processing and Management than manufacturing goods, and this has affected their professional and personal lives. We bank and transfer money electronically and we are much more likely to receive an E-mail than a letter. It is estimated that the worldwide internet population is 349 million (Commerce Net Research Council 2000).
In this information technology age, some traditional crimes especially those concerning finance and commerce, continue to be upgraded technologically. Crimes associated with theft and manipulations of data are detected daily. Crimes of violence also are not immune to the effects of the information age. A serious and costly terrorist act could come from the internet instead of a truck bomb. The diary of a serial killer may be recorded on a floppy disk or hard disk drive rather than on paper in a notebook. Just as the workforce has gradually converted from manufacturing goods to processing information, criminal activity has to large extent also converted from physical dimension.
There calls a need for computer forensic experts and computer based monitoring and security system for easy capture of evidence of intruder who compromises a network or computer. This project dealt with the design and implementation of a Computerized Forensic Security and Monitoring Systems, an ideal way for tracking the activities of an account user and also for recovering digital evidence of crime committed in a computer system.
Therefore, in Nigeria where the research was carried out, the activities that was conducted is to design and implement a Computerized Forensic Security and Monitoring System.
1.3 Statement of Problems
Investigation revealed that the evolution of computer and the internet which has made the world a global village, so has criminals also taken advantage of this technological advancement to engage in different forms of cyber crime ranging from terrorism, internet fraud to the release of sophisticated viruses which is difficult to trace the perpetrators due to lack of sophisticated software that can retrieve information of such activities. This led to the design of a Computerized Forensic Security and Monitoring Systems which will help in tracking the activities of internet users and for recovery of digital evidence of crime committed in a computer system. Manual forensics record keeping has resulted in many set lacks to the expected standard. The bottleneck encountered includes:
- Time wasted and resultants long quarries
- Partial or total loss of file or documents
- Under recording of criminal analysis
- Exposures of confidential matters
- Inefficiency of some members of staff due to laziness in searching of the files.
1.4 Aim and Objectives of Study
The aim of the system is to design and implement a Computerized Forensic Security and Monitoring System. In achieving this aim, the following specific objectives were set out as follows to develop an application software that will:
- Capture, collect, analyze, preserve and present evidence of computer crime in an acceptable manner;
- Create platform for securing and monitoring of forensic activities;
- Replace some extent of human role in cases of unavailability of job; and
- Help forensic expert with substantial evidence to prosecute cyber criminals.
1.5 Significance of Study
This project on computerized Forensics record system is developed to carryout tedious work and activities performed by human beings, in which they end up misplacing and discarding some important files and case records. But if this (computerized crime record) is installed it will render remedy to this case.
This application when implemented will be able to monitor the activities of a computer user by taking screenshots of internet activities, process capture and capture the content of the index file which will help forensic expert with substantial evidence to prosecute cyber criminals.
This application when implemented will be able to monitor the activities of a computer user by taking screenshots of internet activities, process capture and capture the content of the index.dat file which will help forensic expert with substantial evidence to prosecute cyber criminals.
This study will be of immense benefit to other researchers who intend to know more on this study and can also be used by non-researchers to build more on their research work. This study contributes to knowledge and could serve as a guide for other study.
1.6 Scope of Study
The study focuses on the design and implementation of a Computerized Forensic Security and Monitoring System. This project is designed to monitor the activities of computer users to investigate and fish out cyber criminals.
1.7 Limitations of the Study
During the course of this study, many things militated against its completion, some of which are:
- Time Constraint: The time frame given to accomplish this project was very short due to school academic calendar and it was carried out under pressure which made the researcher not to implement some necessary features.
- Research material: availability of research material is a major setback to the scope of the study.
- Frequent power failure: This made the researcher append more money on fuel to ensure sustainable power.
- Financial Constraint: Insufficient fund tends to impede the efficiency of the researcher in sourcing for the relevant materials, literature or information and in the process of data collection (internet).
1.8 Definition of Terms
E-mail − Electronic mail: Electronic mail, most commonly referred to as email or e-mail since approximately 1993, is a method of exchanging digital messages from an author to one or more recipients. Modern email operates across the Internet or other computer networks. CF − Computer
Forensic: Computer forensics is the application of investigation and analysis techniques to gather and preserve evidence from a particular computing device in a way that is suitable for presentation in a court of law.
