Criminal defense challenges in computer forensics

Abstract

Computer forensic techniques may be unfairly applied in order to tip the scales of justice in the direction of prosecution. Particular areas that are known to be problematic for defense experts include: erroneous allegations of knowledgeable possession; misuse of time stamps and metadata; control and observation of the discovery process; authentication issues; deficiencies and the lack of verification for proprietary software tools; deliberate omission or obfuscation of exculpatory evidence; and inadvertent risks resulting from the use of legitimate services. Examples in the author's caseload are used to illustrate these inequities in an effort to encourage reform. © Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering 2010.