Title

The Growing Need for On-Scene Triage of Mobile Devices.

Document Type

Journal Article

Publisher

Elsevier Advanced Technology

Faculty

Computing, Health and Science

School

Computer & Security Science/Security Research Centre (secAU)

RAS ID

10253

Comments

This article was originally published as: Mislan, R., Casey, E., & Kessler, G. (2010). The Growing Need for On-Scene Triage of Mobile Devices. Digital Investigation, 6(3-4), 112-124. Original article available here

Abstract

The increasing number of mobile devices being submitted to Digital Forensic Laboratories (DFLs) is creating a backlog that can hinder investigations and negatively impact public safety and the criminal justice system. In a military context, delays in extracting intelligence from mobile devices can negatively impact troop and civilian safety as well as the overall mission. To address this problem, there is a need for more effective on-scene triage methods and tools to provide investigators with information in a timely manner, and to reduce the number of devices that are submitted to DFLs for analysis. Existing tools that are promoted for on-scene triage actually attempt to fulfill the needs of both on-scene triage and in-lab forensic examination in a single solution. On-scene triage has unique requirements because it is a precursor to and distinct from the forensic examination process, and may be performed by mobile device technicians rather than forensic analysts. This paper formalizes the on-scene triage process, placing it firmly in the overall forensic handling process and providing guidelines for standardization of on-scene triage. In addition, this paper outlines basic requirements for automated triage tools.

DOI

10.1016/j.diin.2010.03.001

 

Link to publisher version (DOI)

10.1016/j.diin.2010.03.001