A New Evidence Preservation Forensics Model Using Blockchain and Stenography Techniques

Abstract

The adoption of technology and digital tools across various user groups has brought about a heightened risk of cyber-attacks targeting devices and shared data. These elevated levels of cybercrime necessitate thorough investigations to address victims’ inquiries about the nature, causes, affected data, and impacted resources of the attack. Digital forensics serves as a crucial means to answer these queries. Additionally, it enables the formulation of strategies and delineation of roles essential for fortifying future defenses against such attacks. Within digital forensics, digital evidence holds pivotal importance in the investigative process as it serves as a cornerstone in legal proceedings to identify perpetrators. Numerous research endeavors focus on devising solutions to safeguard evidence, including centralized storage centers or cloud computing. These efforts aim to create frameworks integrating diverse security levels for sharing and preserving evidence effectively. In this paper, a new framework is proposed that seeks to amalgamate novel technologies with forensic practices to address challenges in the preservation phase of digital forensics. Strategies include segmenting evidence into smaller components, leveraging steganography to support preservation, and employing blockchain technology to ensure the integrity of collected evidence.