2.1 Definition of Computer Evidence

2.0 WHAT IS COMPUTER EVIDENCE

2.1 DEFINITION OF COMPUTER EVIDENCE

There are no, exact or any specific definition of computer evidence. Besides that, it should be explained that, the word ‘computer evidence’ also referred to the term such as ‘computer forensic’ which also called ‘cyber forensic’. Some used the term of ‘digital forensic’. According to Search.com computer forensic means the application of computer, and analysis techniques to gather evidence suitable for presentation in a court of law. It aims, is to provide a framework of investigation while uphold a documented chain of evidence to discover out accurately and exactly what happened on a computer and the person liable for it.

Search Security.com had described computer evidence as, rather unique and exclusive technique when compared to other forms of more traditional documentary evidence. Different from paper documentation, computer evidence is extremely fragile and it takes place in the form of an identical copy of an exact document that is stored in a computer file. In addition, the legal "best evidence" rules differ for the processing of computer evidence. However, there is the potential for unauthorized copies to be made of important computer files without leaving behind a trace of that copy.Other than that, computer forensic also said as a branch of forensic science, pertaining to legal evidence found in computers and any other storage mediums.

Michael J L Turner, a computer expert, defined, computer evidence is data from computer systems that is used as evidence in legal proceedings.

Dorothy A. Lunn’s, definition of computer forensics is, the employment of a set of predefined procedures to thoroughly examine a computer system using software and tools to extract and preserve evidence in criminal activity.

Judd Robbins, a computer forensics investigator, defines computer forensics as, simply the application of computer investigation and analysis technique in the interest of determining the potential legal evidence.

James Borck, in his article had described computer forensics as the equivalent of surveying a crime scene or performing an autopsy on a victim.

By all the definitions given, it is clear that the elements of computer evidence, so called computer forensics and many other terms, are; the application of computer investigation, technology tools, procedures and also analysis techniques.

POSTED BY; NURUL HIDAYAT BINTI AB RAHMAN