디지털 증거의 정보 유출 실태 및 방지방안

Abstract

In accordance with the amended Personal Information Protection Act and Article 106 of the Criminal Procedure Act, investigative agencies can only confiscate data related to the case. However, due to the low awareness of digital evidence collection procedures and analysis tools by frontline investigators, the originals themselves are confiscated or information unrelated to the investigation is stored in general storage media (USB, etc.) and analyzed on the investigator's work computer. If the storage medium used at the time of seizure is lost or the data stored on the investigator's computer without encryption is read by someone or leaked to the outside, the privacy of the seized person is concerned. In this paper, in order to prevent information leakage, from the stage of collecting digital evidence files, the data confiscated in the storage media (USB, etc.) managed by the digital storage media system is encrypted and transmitted to the digital evidence management server, and the evidence files are stored in the virtual desktop environment. We propose a system for analysis.