경찰의 디지털포렌식 현장지원 조직의 필요성과 운영방안

Abstract

A digital forensic on-site support organization is a digital forensic professional organization that assists the site in the seizure of digital evidence. Currently, digital evidence analysts are in charge of such tasks, but currently analysts alone are unable to meet the demand for digital evidence from analysts. In this paper, the necessity of the establishment of the digital forensic field support organization and the operation plan are suggested by grasping the field support situation when the police seize digital evidence. As a result of the survey, it was found that the number of requests for digital forensic field support was very low compared to the demand in the field. These results are due to the absence of the digital forensic site support organization, the heavy work of the digital evidence analyst, the lack of immediacy, and the fact that the principle of selective seizure at the seizure site is not realized. In order to realize the realization of Article 106 (3) of the Criminal Procedure Law, guaranteeing the human rights and rights of the people to be seized, and securing efficiency of investigation, digital forensic field support organization is needed. It is effective to establish a forensic field support system in each local police office and operate the organization in a distributed regional support system. When a digital forensic site support organization is newly established, the following seven tasks are required. The field support organization is responsible for support for seizure and search warrants, obtaining evidence and screening, creating replicas, automatic analysis, supporting the preparation of analysis request books, managing evidence, and forensic education.