Institutional Repository

Computer seizure as technique in forensic investigation

Show simple item record

dc.contributor.advisor Horne, Juanida
dc.contributor.advisor Van Zyl, M.
dc.contributor.author Ndara, Vuyani
dc.date.accessioned 2014-03-19T10:04:55Z
dc.date.available 2014-03-19T10:04:55Z
dc.date.issued 2014-03-19
dc.identifier.citation Ndara, Vuyani (2014) Computer seizure as technique in forensic investigation, University of South Africa, Pretoria, <http://hdl.handle.net/10500/13277> en
dc.identifier.uri http://hdl.handle.net/10500/13277
dc.description.abstract The problem encountered by the researcher was that the South African Police Service Cyber-Crimes Unit is experiencing problems in seizing computer evidence. The following problems were identified by the researcher in practice: evidence is destroyed or lost because of mishandling by investigators; computer evidence is often not obtained or recognised, due to a lack of knowledge and skills on the part of investigators to properly seize computer evidence; difficulties to establish authenticity and initiate a chain of custody for the seized evidence; current training that is offered is unable to cover critical steps in the performance of seizing computer evidence; computer seizure as a technique requires specialised knowledge and continuous training, because the information technology industry is an ever-changing area. An empirical research design, followed by a qualitative research approach, allowed the researcher to also obtain information from practice. A thorough literature study, complemented by interviews, was done to collect the required data for the research. Members of the South African Police Cyber-crime Unit and prosecutors dealing with cyber-crime cases were interviewed to obtain their input into, and experiences on, the topic. The aim of the study was to explore the role of computers in the forensic investigation process, and to determine how computers can be seized without compromising evidence. The study therefore also aimed at creating an understanding and awareness about the slippery nature of computer evidence, and how it can find its way to the court of law without being compromised. The research has revealed that computer crime is different from common law or traditional crimes. It is complicated, and therefore only skilled and qualified forensic experts should be used to seize computer evidence, to ensure that the evidence is not compromised. Training of cyber-crime technicians has to be priority, in order to be successful in seizing computers. en
dc.format.extent 1 online resource (xix, 100 leaves)
dc.language.iso en en
dc.subject Forensic en
dc.subject Digital forensic en
dc.subject Computer en
dc.subject Digital evidence en
dc.subject Investigators en
dc.subject Technicians en
dc.subject Chain of custody en
dc.subject Seizure en
dc.subject Cyber-crime en
dc.subject Cyber-crime technicians en
dc.subject.ddc 363.25968
dc.subject.lcsh Computer crimes -- Investigation
dc.subject.lcsh Computer security
dc.subject.lcsh Forensic sciences -- Data processing
dc.subject.lcsh Crime scene searches
dc.subject.lcsh Electronic evidence
dc.subject.lcsh Computer networks -- Security measures
dc.title Computer seizure as technique in forensic investigation en
dc.type Dissertation en
dc.description.department Department of Criminology
dc.description.degree M.Tech. (Forensic Investigation)


Files in this item

This item appears in the following Collection(s)

Show simple item record

Search UnisaIR


Browse

My Account

Statistics