Research has suggested that more work is needed to show that digital forensic methods are robust enough to stand-up to interrogation in a court of law. the research was carried out at the University of York.
Digital forensics is the recovery and investigation of digital devices and digital materials, often related to serious crimes, such as terrorism and murder, but also more localized issues within the workplace such as employee misconduct and cyberbullying.
Digital forensic labs
New research at the University of York examining digital forensic laboratories in England and Wales has shown that evidence of the accuracy of digital forensic methods may be missing from the regulatory framework.
International standards on digital forensic methods were initially created for calibration and testing laboratories, which use proven scientific techniques to test metals, chemical compounds and other industrial and manufacturing products. These are based on tried and tested methods and published industry standards.
The same framework is being applied to digital forensic labs within the criminal justice system. To understand how the structure was being met across the industry, the researchers compared the way the composition is applied to digital forensic labs with the way it works for calibration and testing laboratories.
Angus Marshall, an expert in digital forensics at the University of York's Department of Computer Science, said: "As digital forensic scientists we are pretty confident that the methods we use to recover data and interpret it are sound, but that's not good enough to meet the standard. The challenge is to find a way to provide evidence that backs up that confidence.
"How do we show that our tools and methods are correct when we are trying to recover data from something which we have not seen before and where the manufacturer would not tell us exactly how it works?" said Marshall.
"There is a solution to this through accreditation and use of proven tools, much like we have in DNA analysis evidence, but this requires a unified approach from the industry and exploring the possibility of sharing the cost of it rather than individual labs having to pay more than £10,000."
Digital forensic laboratories are accredited by the same body that accredits DNA analysis labs, and for DNA evidence there is a standard certification that proves the validity of the methods used. The accreditation is evidence that regulatory frameworks have been met and that information can be trusted by a judge, jury, or employer for example.