Standard for the Electronic Evidence Exchange

Abstract

Within the activities of the Evidence Project, it has been proposed a standard for the representation of the data and metadata involved in the electronic evidence exchange process. The main aim is to consider the widest range of forensic information and processing results including legal requirements. The standard consists of a set of data and metadata for describing all actions (i.e., tasks), actors (e.g., subjects, victims, authorities, examiners, etc.), tools (i.e., digital tools for carrying out different forensic processes), digital and physical objects involved in the investigative case (e.g., hard disk, smartphone, memory dump, etc.) and objects relationships (e.g., contains, extracted from, etc.); formal languages for representing in a standard way all the elements above cited; a platform for implementing the exchange process in terms of functionalities along with a recommendation for an integration with existing platforms already in place and run by European/international public bodies.