Storage Area Network Architecture to support the Flexibility of Digital Evidence Storage

Abstract

Cybercrime is a criminal activity that utilizes computers and the internet as a media in committing its crimes. In solving the case of cybercrime, it is useful with the help of digital forensics. The critical component in digital forensics is electronic evidence that has a physical form and digital evidence that has form in the binary file. Both types of evidence require handling in the storage process with different treatments. In this case, physical evidence of physical nature will be stored in the evidence room while digital evidence will be stored in evidence storage. The solution that has existed so far is through the mechanism of storing digital evidence stored in evidence storage based on internal storage with limited accessibility to one device. It causes inflexibility and effectiveness to support collaborative efforts between officers and law enforcement in the process of investigating and handling digital evidence. This research is to develop previous research on digital evidence storage and handling systems. This paper presents a solution for centralized and networkbased digital evidence storage architecture to address the weaknesses of previously available solutions. Flexibility repositories based on SAN (Storage Area Network) and webbased technology are used as network-based centralized storage architectures. The system is expected to help between law enforcement in terms of chain of custody management for digital evidence.

Unified Access Management for Digital Evidence Storage: Integrating Attribute-based and Role-based Access Control with XACML

“…Efforts to uncover cybercrime are carried out through a digital investigation process [3] Collecting, storing, and processing digital evidence is part of the investigation and law enforcement process. Existing digital evidence (in the form of text messages, emails, and video recordings) is stored in a storage called digital evidence storage (DES) [4] [5] [6]. One special security measure is to make settings in the access rights section [7].…”