• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2017.10a
• /
• pp.353-355
• /
• 2017

Recently developed digital devices are being used in cyberspace. Digital device users are engaged in activities such as financial settlement and e-commerce using cyber-connected terminals. With the activation of cyber trading, cyber crimes against users are increasing. Forensic evidence should be obtained from investigations of cybercrime. However, there is a lot of information to analyze digital forensic evidence. In many of these digital information, Scripts are an effective way to secure evidence for cybercrime. In this paper, we study how to secure forensic evidence using scripts. Extract evidence from EnCase and study how to obtain evidence using scripts. This study will be used as the basic data for cyber security for the safe life of the people.

• Proceedings of the Korean Institute of Navigation and Port Research Conference
• /
• 2018.05a
• /
• pp.262-264
• /
• 2018

VTS관련 선박 항적 자료 등의 정보 공개 및 형사 증거 자료 요건에 대한 관련 법률 검토로 업무 개선 방향을 모색하였다.

• Review of KIISC
• /
• v.26 no.5
• /
• pp.44-53
• /
• 2016

본 논문에서는 그동안 축적된 디지털 증거 관련 판례를 분석하여 디지털 증거가 법정에서 유효하게 사용될 수 있는 증거 능력 요건을 검토하였다. 법정에 제출된 디지털 증거가 증거능력을 인정받기 위해서는 다음과 같은 요건을 충족해야 한다. 첫 번째 요건으로서 적법하게 수집된 증거이어야 한다. 영장주의에 위반하거나, 압수수색절차에 피압수자의 참여권을 보장하지 않은 경우에는 증거의 증거능력이 인정되지 않는다. 또한 그동안 논란이 되었던 별건정보도 앞서 살펴본바와 같이 대법원이 제시한 요건을 충족해야 한다. 두 번째 요건으로는 법정에 제출된 디지털 증거의 진정성이 인정되어야 한다. 대법원은 디지털 증거의 진정성이 인정되기 위해서는 무결성과 동일성, 신뢰성이 인정되어야 한다고 판시한바 있다. 세 번째 요건으로 법정에 제출된 증거가 전문증거인 경우에는 당사자의 동의가 없는 한 전문법칙의 예외에 해당되어야 한다. 2016년 5월 형사소송법 제313조가 개정되기 전에는 법정에 제출된 디지털 증거를 진술자가 진정성립을 부인하는 경우, 해당 문서가 업무상 필요로 작성한 통상문서나 기타 특히 신용할 만한 정황에 의하여 작성된 문서에 해당되지 않는 한 증거능력을 인정받을 수 없었다. 그러나 형사소송법 제313조 제2항의 개정으로 인하여 이제는 진술자가 진정성립을 부인하는 경우에도 "과학적 분석결과에 기초한 디지털 포렌식 자료, 감정 등 객관적 방법"에 의해 성립의 진정을 인정받을 수 있다. 과학적 분석결과에 기초한 디지털 포렌식 자료, 감정 등 객관적 방법에 대한 구체적인 내용은 앞으로 판례를 통해 정립해 나아가야 할 것이다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.17 no.2
• /
• pp.323-331
• /
• 2013

There are three ways how to extract forensic evidence from mobile phone, such as SYN, JTAG, Revolving. However, it should be a different way to extract forensic evidence due to the differences of their usage and technology between them(mobile phone and smart phone). Therefore, in this paper, I will come up with extraction method that forensics evidence by search and seizure of a smart phone. This study aims to analyze specifications and O.S., backup analysis, evidence in smart to analyze for search and seizure of a smart phone commonly used google android and windows mobile smart phone. This study also aim to extract forensics evidence related to google android and phone book, SMS, photos, video of window mobile smart phone to make legal evidence and forensics report. It is expected that this study on smart phone forensics technology will contribute to developing mobile forensics technology.

• Proceedings of the Korea Institutes of Information Security and Cryptology Conference
• /
• 2003.12a
• /
• pp.523-532
• /
• 2003

컴퓨터 포렌식스(Computer Forensics)란 컴퓨터 범죄자료가 법적 증거물로써 제출될 수 있도록 증거의 확인, 복사, 분석 등 일련의 행위를 하는 것을 말한다. 컴퓨터에서 각종 증거자료를 추출하기 위해서는 컴퓨터 특성 이해와 고도의 보안기술을 갖추지 않으면 실제로 증거자료가 존재함에도 불구하고 그냥 간과해 버릴 수도 있다. 본 논문에서는 컴퓨터 범죄를 소개하고 컴퓨터 포렌식스의 소요 기술을 분류하며, 컴퓨터 포렌식스 기술에서 중요한 부분을 차지하고 있는 삭제된 파일 복구기술에 대하여 고찰한다.

• Journal of the Korean earth science society
• /
• v.42 no.1
• /
• pp.118-131
• /
• 2021

The purpose of this study was to investigate the characteristics of evidence-based reasoning practiced by middle school gifted students. Data were collected through an online task in which middle school students in gifted education institutes of a university located in the metropolitan area, Korea, performed inquiry about the shape of a planet's orbit. The students were given data of Mercury's greatest elongations and asked to draw the planet's orbit with the data. Each of the students was also asked to provide his or her hypothesis of Mercury's orbit before the drawing and to reason about the orbit again using his or her own drawing as evidence. The content analysis of the students' reports revealed 5 different types of judgement about the shape of Mercury's orbit, 4 types of reasoning about the hypothesis and evidence, and the characteristics of evidence-based reasoning within the judgement types. Based upon the analysis results, the importance of proper interpretations of evidence in evidence-based reasoning, the core role of the theory-evidence coordination, and the usefulness of working with multiple hypotheses were discussed. In addition, implications for earth science education were suggested.

• KSCI Review
• /
• v.14 no.2
• /
• pp.225-234
• /
• 2006

Computer Forensics functions by defending the effects and extracting the evidence of the side effects for production at the court. Has the faultlessness of the digital evidence been compromised during the investigation, a critical evidence may be denied or not even be presented at the trial. The presented monograph will deliberate the faultlessness-establishing chain procedures in disk forensics. system forensics, network forensics, mobile forensics and database forensics. Once the faultlessness is established by the methods proposed, the products of investigation will be adopted as a leading evidence. Moreover, the issues and alternatives in the reality of digital investigation are presented along with the actual computer forensics cases, hopefully contributing to the advances in computer digital forensics and the field research of information security.

• Journal of The Korean Association For Science Education
• /
• v.23 no.6
• /
• pp.634-649
• /
• 2003

The aim of this paper was to diagnose Korean sixth graders' understanding for scientific evidence and explanation. The instrument constructed by Jeong, Songer, and Lee (2002) was used to assess students' understanding for priority of scientific evidence, objectivity of data, relevance of evidence, data interpretation, coordination of theory and evidence, and repeated observation. Results showed that although many students recognized certain features of scientific inquiry such as objectivity of data, few of them understood why such features are valued and how to collect and use such data. In particular, students experienced difficulty in formulating explanation from evidence, not knowing, for example, that repeated observations are needed before making a general statement. The results of this study suggest that efforts to foster students' inquiry abilities need to be based on careful analyses of students existing inquiry skills and understanding.

• KSCI Review
• /
• v.15 no.1
• /
• pp.209-217
• /
• 2007

Korea's seas have the potentials of dispute against China or Japan due to the overlap of the territorial waters and EEZ. In case of marine accidents, the nature of the sea tends to eliminate much of the track, making it another hardship in evidence adoption in case of an international dispute along with the false entries of fishing vessels' journals. Marine Digital Forensics protects the functions of computers and IT appliance on vessels and extracts evidence of voyage and accidents to resolve international dispute. The digital evidence, if tampered with its integrity, may lead to the rejection to a critical claim or may even fail to make a case. As a solution, this thesis suggests Marine Digital Forensics as a way to extract evidence and prove a claim. This may be utilized as means of scientific investigation on sea as overseas exchange increases and the vessels digitalize, leading to a solution in international disputes that may occur in the future.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2011.06a
• /
• pp.149-153
• /
• 2011

2010년에는 국내에 Smart Phone이 확산되면서, Smart Phone은 단순한 음성통신정보 전달 이외에 기존의 인터넷 PC가 정보를 전달 할 수 있는 전자책, 영화, 음악, 콘텐츠 영역으로 확장되고 있다. 하지만 Smart Phone 사용자들은 멀티미디어 저작권 콘텐츠를 불법으로 이용하고 있다. 또한 이동통신 단말로서 Smart Phone관련 범죄 증거의 생성, 저장된 디지털 증거는 증거의 활용도가 높아 모바일 포렌식 연구가 필요하다. 본 논문에서 Smart Phone에서 저작권 위반 내용들을 전자책, 영화, 음악, 콘텐츠 영역으로 조사한다. 저작권 위반 Smart Phone 증거자료를 추출하고 분석하기 위한 SYN 방식과 JTAG 방식을 연구한다. Smart Phone SYN 방식과 JTAG 방식으로 Smart Phone의 저작권 위반 자료를 추출하여 복원하고, 자료를 분석하였다. 본 연구 결과는 저작권위반 단속 기술 향상과 포렌식 수사 기술 발전에 기여 할 수 있을 것이다.