소프트웨어를 이용한 이동식 저장매체 이미지 수집 절차 = Process of Collection for a Removable Storage Device Image Using a Software

다국어 초록 (Multilingual Abstract)

As the prevalence of removable device, critical intelligences are often stored in the removable device. For that reason, in seizure and search, the removable device became a important evidence of while it could be has a salient key for prove a crime. When we acquired a removable device for proof, we image it by a imaging device or software with a write protection. However, these are high-priced exclusive equipments and sometimes it could be out of order. In addition, we found that some secure USB and inbuilt vaccine USB are failed to connect to the imaging device. Therefore, in this paper, we provide a suitable digital evidence collection procedure for real.

참고문헌 (Reference)

1 김민호, "소프트웨어 기반 보안 USB에 대한 취약성 분석 방법론" 한국정보보호학회 22 (22): 1345-1354, 2012

2 Keun-Gi Lee, "USBPassOn:Secure USB Thumb Drive Forensic Toolkit" IEEE 2 : 2008

3 이선호, "USB 메모리를 위한 보안 솔루션에 관한 연구" 한국멀티미디어학회 13 (13): 93-101, 2010

4 "TurboVaccine"

5 "Study on the procedures and facilities for maintaining the integrity of digital evidence" Supreme Prosecutor’s Office 2006

6 Hye-Won Lee, "Secure USB Analysis in Forensic perspective" 63-65, 2008

7 "SecuDrive"

8 "SaferZone"

9 "Rules relating to the collection and processing of digital evidence" National Police Agency 2015

10 "Removable Storage Device Security Manage ment Guidelines"

11 C. Hargreaves, "Recovery of Encryption Keys from Memory Using a Linear Scan" 1369-1376, 2008

12 장성민, "Full Disk Encryption 환경에서 디지털 증거 수집 절차에 관한 연구" 한국정보보호학회 25 (25): 39-48, 2015

13 "Digital Forensics: How to configure Windows Investigative Workstations"

14 "Computer Forensics Guideline"