• The Journal of the Korea Contents Association
• /
• v.15 no.4
• /
• pp.188-196
• /
• 2015

Areas of forensic have been used as a tool in many fields of police investigation, detective, such as research relating to the criminal investigation. Despite it is failure to obtain a central role and status, forensic is nonetheless necessary. This study recognizes the importance of police and forensic activities, and in reviewing the level of support for actual condition of science and forensic investigations, and it has tried to find the problems. Based on this, this study discusses development plans of the working system to explore whether it can improve the efficiencies of forensic activities from the realistic restrictions. These days, one of the main problems that police forensic activities encounter is lack of labor and human resources on the arrested. Therefore, this study aimed to looking for realistic ways to improve efficiencies of forensic agents First, changing the working system and the restructuring the command system requires a long-term perspective. In other words, a regional forensic system is required. Second, the establishment of a Police Investagation Specialization to ensure the professionalism of the investigation is necessary. Third, the system should improve forensic specialties. Fourth, the R&D organization should established to improve the capability for forensic investigations.

• Journal of the Korea Society of Computer and Information
• /
• v.10 no.3 s.35
• /
• pp.307-318
• /
• 2005

Cyber crimes caused unpredictable damages by influencing targets with means such as hacking and virus in virtual space. In specific, they transcend time and space because of their anonymity and it is difficult to punish the people who are involved in crimes. To manage such cyber crimes, we need an international cooperative systems beyond difference in legal systems between countries and 'Global Governance' was prepared as a reasonable alternative. These days, governance has been presented as an important concept to explain changed social systems or changed roles of government. It was not just a concept to replace traditional government of a single nation, but to overcome new problems on social actions of humans. So it is expected that it can help prepare reasonable measures through cooperation both in individuals and systems, and public and civil sectors. To countermeasure cyber crimes in terms of global governance, we can prepare general investigation systems and professional human resources through civil and public assistance, and provide a base on which international cooperation systems can be established.

• The Journal of the Korea Contents Association
• /
• v.5 no.4
• /
• pp.54-61
• /
• 2005

Sixty years have passed since the police system was established in Korea. So far, there have been consistent discussions on independence of police investigational rights. Political powers have mentioned its independence as one of their public commitments and specifically, it has been a big issue in respect to establishment of the current participation government. The issues involved in investigational rights were derived from the regulations as follows: 'Prosecutors shall manage investigation(No. 195. the Criminal Procedure Act) and 'The police shall be guided by prosecutors in respect to investigation'(No. 195. the Criminal Procedure Act). President No Mu-hyun proposed he would take care of the issues involved in investigational rights at an interview. This study speculates investigational right systems of countries that follow continental law system and English law system and more valid investigational right system based on the guaranty of human rights and the principle of power division to find reasonable suggestions on independence issue.

• Proceedings of the Korean Society of Broadcast Engineers Conference
• /
• 2008.02a
• /
• pp.43-46
• /
• 2008

디지털 증거의 수집은 컴퓨터 포렌식 수사절차에서 매우 중요하다. 디지털 증거는 특히 용의자가 범죄 과정에서 노출한 증거들을 획득한다는 것에 의미가 있으며, 현재 이러한 디지털 증거 수집을 위한 많은 도구들이 활용되고 있다. 그 중 LiveCD는 대상 운영체제의 영향을 받지 않고, CD 자체를 통해 저장된 다양한 포렌식 툴을 사용 할 수가 있다. 또한 여러 종류의 파일 시스템을 지원하기 때문에 초기 대응에 아주 유용하게 사용되며, 위 과정을 통해 수집된 데이터는 무결성 검증을 통해 증거 수사에 활용된다. 현재 여러 가지 LiveCD를 수사에 활용하고 있으나, 각 도구들 마다 지원하는 포렌식 툴이 다르고 지원하는 운영체제도 다양하다. 따라서 상황에 따라 적절한 LiveCD를 활용하는 것은 매우 중요하며, 이를 통해 증거의 수집을 용이하게 할 수 있다. 따라서 본고에서는 국외의 포렌식용 LiveCD 현황에 대한 조사 및 비교 분석하여 국내 수사 환경을 고려한 LiveCD 활용 방안에 대해 제시 한다.

• The Journal of the Korea Contents Association
• /
• v.7 no.1
• /
• pp.176-183
• /
• 2007

Our country is criticized that is gambling republic recently. It is shy, but do not refute through present actual conditions. Gambling had increased and generated much problems in our country. But, gambling permited socially. So, control system that do snow about gambling is insufficient. In the meantime, police's confrontation about gambling crime was not effective. Active confrontation about police's gambling crime must consist now. This research groped police's active confrontation way about gambling crime, police is improving crime information management system of gambling crime and utilize in investigation.

• Annual Conference of KIPS
• /
• 2022.05a
• /
• pp.33-36
• /
• 2022

이벤트 로그(Event Log)는 윈도우 운영체제에서 시스템 로그를 기록하는 형식으로 시스템 운영에 대한 정보를 체계적으로 관리한다. 이벤트는 시스템 자체 또는 사용자의 특정 행위로 인해 발생할 수 있고, 그러한 이벤트 로그는 시스템의 시작과 종료뿐만 아니라 기업 보안 감사, 악성코드 탐지 등 행위의 근거로 사용될 수 있다. 본 논문에서는 PC 종료 관련 실험을 통해 이벤트 로그와 ID를 분석하였다. 분석 결과를 통해 PC의 정상 및 비정상 종료 여부를 판단하여, 현장 압수·수색 시 해당 저장매체에 대해 선별압수·매체압수의 해당 여부 식별이 가능하다. 본 연구는 현장수사관이 디지털증거 압수·수색 시 절차적 적법성과 증거능력 확보의 근거 활용에 기여할 수 있다.

• The Journal of the Korea Contents Association
• /
• v.20 no.1
• /
• pp.448-459
• /
• 2020

Recently, the necessities of gathering, producing, and sharing criminal information are critically important as intelligence functions of police agencies to improving public safety and national security. However, the inadequacies and barriers within which police agencies have in regard to intelligence functions impede criminal information gathering, intelligence producing within their agency, and intelligence sharing with other agencies. In this study, we analyzed informal networks constructed from a survey dataset of information and intelligence sharing among officers in police agencies. The results revealed the different structural properties of intelligence networks between police agencies. We did find that officers with high indegree and outdegree in a network played critical role on the dynamics and degree of intelligence gathering and assessment responsibilities. Finally, we could find evidence that the potential role of intermediary triggered relational dynamics for developing and sharing critical information among all police agencies.

• Journal of the Korea Society of Computer and Information
• /
• v.10 no.3 s.35
• /
• pp.287-295
• /
• 2005

A Study on the Countermeasures against International Computer Crime focusing on the Police Investigation Procedure. These days, much more intelligent, varied and advanced techniques for computer crimes have been used than for development of technology. In particular, it has been reported that the damages are enormous. Damages of some computer crimes can not be accurately reported. This study is to speculate specific types of computer crimes and obtain its prevention and countermeasures centering on the Police Investigation Procedure. In particular, it is to speculate international cooperation under the condition that global damages occur frequently due to preparation of advanced network environment.

• Annual Conference of KIPS
• /
• 2011.11a
• /
• pp.846-849
• /
• 2011

최근 iPhone, iPad의 높은 사용율과 더불어 Apple 의 Mac 계열 제품에 대한 관심도 높아지고 있다. 이는 Apple의 운영체제인 Mac OS X의 사용율 증가와 함께 디지털 포렌식 수사 환경에서의 Mac OS X의 중요성이 높아짐을 의미한다. 디지털 포렌식 관점에서 Mac OS X에는 사용자의 사용 정보를 남기는 주요 Artifacts들이 있다. 외부 저장 장치 연결 정보, 어플리케이션 설치 정보, 사용자 인증 정보, 어플리케이션 설정 정보 등이 대표적인 Artifacts들이며, 이러한 정보들은 특정 위치의 로그 파일에 남게 된다. 본 논문은 Mac OS X의 대표적 Artifacts 들을 대상으로 사용 흔적 정보가 남는 파일을 분석하여 디지털 포렌식 수사 시 활용할 수 있도록 한다.

• Electronics and Telecommunications Trends
• /
• v.28 no.3
• /
• pp.1-8
• /
• 2013

최근 들어 스마트폰의 사용이 급격하게 증가하고 있으며, 또한 스마트폰에는 통화기록과 문자 메시지뿐만 아니라 이메일, 아이디, 패스워드, GPS(Global Positioning System) 데이터, 신용카드 등 수많은 개인정보가 저장된다. 이에 따라 디지털 포렌식 수사에서도 스마트폰 포렌식의 비중이 크게 증가하고 있다. 현재 전 세계적으로 많은 종류의 스마트폰 운영체제가 상용화되고 있으나 안드로이드 OS와 iOS가 86%를 차지하고 있으며, 국내에서는 99% 이상을 차지하고 있다. 본고에서는 스마트폰 포렌식의 절차를 비롯해서 안드로이드 OS 및 iOS 디바이스로부터 데이터를 수집 및 분석하는 방법에 대해서 살펴본다.