Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 10

Investigate the Different types of Computer-Based Legal Evidence

1. Research the different kinds of legal evidence used in computer crime investigations.

2. What are the difference between admissible and inadmissible evidence?

3. Who should be responsible for maintaining the chain-of-custody for computer crimes evidences

Step 1 of 3

Investigate the different types of computer-based legal evidence

1. The problem speculates on the Computer Forensic Evidence. Some different kinds of legal evidence from computer crimes are given below:

• Access History – such as browser history and network access history.

• Computer Address – computer addresses such as IP address, domain address, and MAC address.

• Identifying Details – such as digital signatures on virus programs.

• Copies of Data – such as mail from phishing and identity thieves.

• Transaction History – such as account transfer details in bank fraud.