| As computers and the Internet, become pervasive elements in our personal and professional lives, the potential for harm caused by computer crime increases. Consequently, there is a lack of awareness regarding the fundamentals of computer crime, and how it can be investigated. Accordingly, computer misuse has become more prevalent and costly to our society. As a result, the need for computer security emerges. Whereas the field of computer security has often emphasized prevention and detection of system security violations, the acquisition, authentication, evaluation, and legal admissibility of evidence stored on media are uniformly important. Computer forensics attempts to manage this problem by providing a thorough, efficient, and secure means of investigating computer crime.;This thesis will define the term computer forensics, address issues fundamental to investigating computer crime, and discuss how potential digital evidence relates to the legal process. It will explore evidence acquisition within the framework of Intrusion Detection. |
