当前位置: X-MOL 学术 › Digit. Investig. › 论文详情
Our official English website, www.x-mol.net, welcomes your feedback! (Note: you will need to create a separate account there.)
Developing a ‘router examination at scene’ standard operating procedure for crime scene investigators in the United Kingdom
Digital Investigation ( IF 2.860 ) Pub Date : 2019-01-30 , DOI: 10.1016/j.diin.2019.01.010
Graeme Horsman , Benjamin Findlay , Tim James

As the majority of dwellings now maintain some form of Internet connectivity, the examination of routers at crime scenes is an increasing requirement. Due to cost and resourcing constraints, police forces are looking to transfer responsibility for carrying out this task to front line crime scene investigators, despite such staff typically lacking specialist training for this type of examination. Such strategies are potentially high-risk, as the mishandling of home routers can result in the oversight or destruction of potentially evidential information denoting home network usage, configuration and connected devices. This information can support scene examiners with their searching practices, ensuring all connected devices within the vicinity of a scene are accounted for or seized, whilst also supporting further technical investigations. This work documents the forensic examination of Sky, BT, Virgin, EE and TalkTalk routers and analysis of relevant evidence content including records of attached and currently connected devices, and, network configuration settings. A standard operating procedures has been developed and offered, to support crime scene investigation staff carry out router investigations.



中文翻译:

为英国的犯罪现场调查人员制定“现场路由器检查”标准操作程序

由于现在大多数房屋都保持某种形式的Internet连接,因此在犯罪现场检查路由器的需求日益增加。由于成本和资源的限制,尽管这类人员通常缺乏进行此类检查的专业培训,但警察仍希望将执行此任务的责任转移给前线犯罪现场调查员。这样的策略可能具有很高的风险,因为家用路由器的不当使用可能会导致监督或破坏表示家庭网络使用,配置和连接设备的潜在证据信息。该信息可以为现场检查人员的搜索实践提供支持,确保对现场附近所有连接的设备进行说明或查封,同时还支持进一步的技术调查。这项工作记录了对Sky,BT,Virgin,EE和TalkTalk路由器的取证检查,并分析了相关的证据内容,包括已连接和当前连接的设备的记录以及网络配置设置。已经制定并提供了标准操作程序,以支持犯罪现场调查人员进行路由器调查。

更新日期:2019-01-30
down
wechat
bug