PRELIMINARY STUDY: DIGITAL FORENSIC PROCESS MODEL FOR DEFENSE AND SECURITY SECTORS

Abstract

Digital forensics has become an important part of legal proceedings by providing digital evidence. As more information could be extracted from a website, the number of criminal activities involving web applications increases and it becomes more crucial for digital investigators to conduct analysis properly. Therefore, a suitable process model is highly needed to ease the operation of investigating web attack incidents. This study proposes a digital forensic process model for web attack investigations in the defense and security sector. A total of twelve (12) existing digital forensic process models have been evaluated to develop a new digital forensic process model, which is applicable to be used in Malaysia's defense and security sector. The research methodology that is being utilized to develop the model is a qualitative method to gather more data to support the new digital forensic process model for the defense and security sector. The new model is expected to benefit the sectors in processing web attack incidents and ensure that the phases taken in the process can be used to find evidence and assist web attack investigation for reference in daily operations.