Contenu connexe
Similaire à File000172 (20)
Plus de Desmond Devendran
Plus de Desmond Devendran (12)
File000172
- 2. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Module Objective
• Computer Forensics Ethics
• Procedure to Implement Ethics
• Challenges in Teaching Computer Forensics Ethics
• Ethics in Preparation of Forensic Equipments
• Ethics of Computer Forensic Investigator
• Ethics in Obtaining the Evidence
• Ethics in Documenting Evidence
• Ethics in Bringing Evidence to Courtroom
This module will familiarize you with:
- 3. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Module Flow
Computer Forensics Ethics
Ethics in preparation of
Forensic Equipments
Challenges in Teaching
Computer Forensics Ethics
Ethics in Bringing Evidence
to Courtroom
Ethics in Documenting
Evidence
Ethics in Obtaining the
Evidence
Ethics of Computer Forensic
Investigator
Procedure to Implement Ethics
- 4. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Computer Forensic Ethics
Ethics refers to the behavior of a person in relation to a
subject
It tells about the norms that distinguishes between the
acceptable and unacceptable behavior
Organizations implement policies to provide guidelines for
ethics
- 5. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Importance of Computer Ethics
Computer ethics help computer professionals how to behave in a
forensic domain
It will teach how to avoid computer abuse, computer failure,
corruption of the evidence
The advance of computing technology will continue to create
temporary policy vacuums
The use of computing permanently transforms certain ethical
issues to the degree that their alterations require independent
study
- 6. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethical Predicaments
Discovery of the confidential data which is non-related to the case
Acknowledgement of errors may create problems to overcome
Removing bias from investigation
Time-consuming nature of the computer investigations
- 7. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
The Ethical Requirements
During Investigation
• Investigator should carry required tasks that he/she has
accepted for the assignment
Thoroughness:
• Examinations and tests within the investigation should be
related to the issues
Relevance:
• The work of the criminalist should be reviewed
Reviewability:
- 8. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics in Preparation of Forensic
Equipments
Equipment must be monitored and documented to ensure that a minimum
performance level is always maintained
Only suitable and fully functional equipments shall be employed
The manufacturer’s operation manual and other relevant documentation for
each piece of equipment should be accessible
Ethics
- 9. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics of Computer Forensic
Investigator
• Refuse any evidence because that may cause failure in
the case
• Expose confidential matters without having any
authorized permission
• Work against the law
• Exceed assignments beyond his/her skills
• Present the training, credentials, or association
membership in a wrong way
• Provide personal or prejudice opinions
• Cross authorization limits in conducting examinations
Computer forensic investigator
should not:
- 10. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Maintaining Professional Conduct
Professional conduct determines the credibility of a forensic
investigator
Always dress professionally – wear a tie and a coat
Investigators must display the highest level of ethics and moral
integrity, as well as confidentiality
Discuss the case at hand only with the person who has the right to
know
Keep the case investigation information confidential
Learn about the latest crime investigation techniques for better
investigation
- 11. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics in Logical Security
• Privacy and confidentiality
• Integrity - Ensuring that data and programs are not
modified without proper authority
• Consistency - Ensuring that the data and behavior of
the computing systems do not change with the time
• Controlling access to resources
Ethics involved in logical security of
computer:
- 12. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics in Obtaining the
Evidence
No outsiders should be allowed in the incident area except the
authorized investigators
Hire a skilled person for searching evidence who can examine the
scene in an efficient and proactive manner
Use the latest technology and devices for capturing the evidence
The evidence captured should be safely placed:
• Physical evidence should be placed in a secured covers
• Digital evidence should be stored in a digital media
- 13. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics while Preserving the
Evidence
Have a secured work station to preserve the evidence
Avoid the access for outsiders to the evidence protected area
Avoid complexity when dealing with evidence that result in evidence loss or
evidence identity loss
Take proper care while labeling the evidence, which is used to identify them
individually
Do not test on the original evidence; it will result in tampering of the
evidence
Computer forensics professional should maintain the secrecy and privacy of
the customer
Maintain integrity, accuracy ,and authenticity of the evidence
- 14. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics in Documenting Evidence
Evidence should be documented properly to make it acceptable in the court
of the law
Do not misdirect the evidence from the original one
Document the evidence in the manner of their occurrence
Document all the evidence exactly in the manner of the evidence acquired
and the case proceedings
- 15. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Ethics in Bringing Evidence to
Courtroom
The original evidence and documents should be submitted to the court
Do not give the evidence to other parties to avoid tampering the
evidence in the last stage
- 16. EC-Council
Copyright © by EC-Council
All Rights Reserved. Reproduction is Strictly Prohibited
Summary
Ethics form a major part in the society and the computer world
It tells about the norms that distinguishes between the acceptable and unacceptable
behavior
Computer ethics help computer professionals on how to behave in a forensic domain
Equipment must be monitored and documented to ensure proper performance is
maintained
Hire a skilled person for searching evidence who can examine the scene in an efficient and
proactive manner
Evidence should be documented efficiently to make it acceptable in the court room