• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2010.10a
• /
• pp.215-218
• /
• 2010

Smart Phone with domestic demand increasing rapidly, the utilization of multimedia services have become diverse. Accordingly, Smart Phone users to hack their Jail Breaking and Rooting and illegal use of the multimedia content is copyrighted. Also relevant to mobile communication terminal as a high crime, create, and the digital evidence increases the utilization of the mobile forensic evidence is required to study. In this paper, Smart Phone Copyright Violation and Forensic Apply Method research. Smart Phone Status and related violations of copyright infringement, broadcasting, film, music, e-book, etc. for each survey item, and how to apply for forensics were studied. This study investigated the development and forensic science will be able to contribute to the development.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2011.10a
• /
• pp.269-272
• /
• 2011

The lawsuit is being made on the smart phone. And recent is getting a lot of evidence for the smart phone data in a court of law. Thus, the evidence of illegal use smartphone for the extraction of data and evidence collection, forensic procedure is a need for research. In this paper, evidence of phone forensic procedure for the extraction of the data suggests. And, by collecting forensic evidence from smartphones ensure the integrity of digital evidence and how to solve the case investigated. With this study, smartphone forensic will be able to contribute to the development.

• Journal of Digital Convergence
• /
• v.13 no.4
• /
• pp.81-87
• /
• 2015

This study will show the digital forensic model which fights against cyber-crimes to prepare various cyber-crimes. The digital forensic model will be more useful about the investigation of cyber-crimes and arresting criminals after researching the uses of the digital forensic model and cyber-crime rates in South Korea. This model conduct the standardized data with various languages by the language support system through the digital forensic analyzer. This model will send the data to law enforcement reviewing whether or not we ought to prove criminal charges. Moreover, law enforcement can access the file system to find out admissibility of evidence. And this model simplifies lawful investigation about additional investigation. The data, which is conducted and saved by the digital forensic system, will be helpful to protect against the future crimes because of the data.

• Journal of Digital Forensics
• /
• v.12 no.3
• /
• pp.39-54
• /
• 2018

Recently, discussions for the eradication of illegal shooting have been carried out in a socially-oriented way. The government has established comprehensive measures to eradicate cyber sexual violence crimes such as illegal shooting. Although the social interest in illegal shooting has increased, the illegal film shooting case is evolving more and more due to the development of information and communication technology. Applications that can hide confused videos are constantly circulating around the market and community sites. As a result, field investigators and professional analysts are experiencing difficulties in collecting and analyzing evidence. In this paper, we propose an evidence collection and analysis framework for illegal shooting cases in order to give practical help to illegal shooting investigation. We also proposed a system that can detect hidden applications, which is one of the main obstacles in evidence collection and analysis. We developed a detection tool to evaluate the effectiveness of the proposed system and confirmed the feasibility and scalability of the system through experiments using commercially available concealed apps.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.1
• /
• pp.103-114
• /
• 2024

In a situation where drone-related crimes continue to rise, research in drone forensics becomes crucial for preventing and responding to incidents involving drones. Conducting forensic analysis on flight record files stored internally is essential for investigating illegal activities. However, analyzing flight record files generated through the exclusive DUML protocol requires a deep understanding of the protocol's structure and characteristics. Additionally, a forensic analysis tool capable of handling cryptographic payloads and analyzing various drone models is imperative. Therefore, this study presents the methods and characteristics of flight record files generated by drones. It also explains the structure of the flight record file and the features of the DUML packet. Ultimately, we conduct forensic analysis based on the presented structure of the DUML packet and propose an extension forensic analysis system that operates more universally than existing tools, performing expanded syntactic analysis.

• Journal of Digital Convergence
• /
• v.10 no.3
• /
• pp.99-104
• /
• 2012

The digital forensics are new kinds of security that investigate and verificate fact relation about activities based on digital data. In this paper, we implemented digital forensic tool that can be used in collecting, analyzing, and reporting evidences. This tool support intuitional GUI that everybody can analyze easily. And a simple operation can collect and analyze active data. Also, we can decrease much time and endeavor by using this forensic tool that support reliable data.

• Convergence Security Journal
• /
• v.5 no.1
• /
• pp.11-18
• /
• 2005

With the develoment of IT(Information Technologies) in Internet, Digital crime are increasing explosive every year. Recently, digital crime is taken advantage of technical and expert skill. It is necessary to investigate a digital crime that Digital forensic process standardization, Specialist training & education, R&D, Government support. So in this paper we proposed device of the grow of digital forensic that make analysis of the present state domestic digital forensic technique.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2014.11a
• /
• pp.466-469
• /
• 2014

기존 Window8 Style 에 대한 디지털 포렌식 연구는 윈도우 기본 애플리케이션에 대해서만 진행되어 있는 상황이고, 다른 3rd party Style App 들에 대해서만 진행되어있는 상황이다. 본 논문에서는 Window8 Style UI 의 Instant Messengers 에 대해 디지털 포렌식 분석하고 이를 통해 범인의 행동 흐름 파악 및 증거확보 매커니즘을 제시하고자 한다. 본 논문은 기존의 Window8 의 접근방법을 토대로 하여, Style App 의 사용흔적이나 내용에 대해 확인하며, 시간정보, 이미지 등 각종 애플리케이션들을 다각적으로 분석한다. 본 논문에서 제안한 접근법은 개별 App 들에 대한 정보를 효율적이고 빠르게 분석하고 사건에 대한 정보를 제공함으로써 범죄수사과정에 도움이 될 것으로 기대된다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.04a
• /
• pp.62-65
• /
• 2012

iOS5 소프트웨어가 업데이트되면서 기존과 비교하여 많은 새로운 기능들이 추가되었다. 이 기능들 중에는 사용자로 하여금 메시지와 계정 정보 등 포렌식 관점에서 중요한 정보들이 저장될 수 있는 애플리케이션들이 존재한다. 포렌식 수사에서 애플리케이션에 저장된 정보들은 사건 해결을 위한 중요한 단서가 되기도 한다. 따라서 본 논문에서는 iOS5에 새롭게 추가된 기능들 중에서 포렌식 정보들이 저장될 수 있는 애플리케이션들을 선별하고 스키마 분석 및 질의를 통하여 그 정보들을 획득 할 수 있음을 증명한다.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2021.07a
• /
• pp.221-222
• /
• 2021

본 논문에서는 HFS+ 파일시스템의 클러스터의 상태를 분석하여 디지털 포렌식에 활용하기 위한 기법을 제안한다. 이 방법은 파일시스템의 클러스터 안에 들어있는 정보를 텍스트 형식과 GUI 형식으로 표시하하여 포렌식을 수행하기 위한 정보를 제공하는 것을 목표로 개발한다. 이 기법에서 적용되는 파일시스템은 macOS에서 사용하는 HFS+ 파일시스템으로 파일/디렉토리에 대한 클러스터의 수, 클러스터의 연속정보, 클러스터에 연관된 파일/디렉토리의 고유정보와 시간정보를 표시한다. 이 기법을 위한 도구는 C/C++와 Python언어로 macOS 환경에서 동작하도록 개발된다. 일반적으로 Windows 환경에 비하여 macOS 환경에서 사용할 수 있는 포렌식 분석을 소프트웨어들이 상대적으로 많지 않아서 이 도구에서 제공하는 디스크 클러스터의 할당상태와 그것과 연관된 포렌식 정보를 얻는데 효과적으로 사용될 수 있는 점이 이 연구가 기여하는 바이다.