{"id":4160,"date":"2015-08-11T05:44:34","date_gmt":"2015-08-11T05:44:34","guid":{"rendered":"http:\/\/www.lifeandnews.com\/articles\/?p=4160"},"modified":"2015-08-11T05:44:34","modified_gmt":"2015-08-11T05:44:34","slug":"theres-no-code-of-ethics-to-govern-digital-forensics-and-we-need-one","status":"publish","type":"post","link":"https:\/\/www.lifeandnews.com\/articles\/theres-no-code-of-ethics-to-govern-digital-forensics-and-we-need-one\/","title":{"rendered":"There’s no code of ethics to govern digital forensics \u2013 and we need one"},"content":{"rendered":"

John J Sloan, III<\/a>, The University of Alabama at Birmingham<\/a><\/em><\/span><\/p>\n

Let me begin with a disclaimer: I am neither a digital forensics practitioner nor do I play one on television.<\/p>\n

I am, however, a professor in, and former chair of, an academic department<\/a> at a research university that houses a graduate program in computer (digital) forensics I helped design. In 2011, I cofounded a computer forensics research center<\/a> at my university. Finally, for more than 10 years, I have taught undergraduate and graduate courses on professional ethics for criminal justice and digital forensics students.<\/p>\n

These experiences helped me to identify a glaring issue in the field of digital forensics: a lack of professional and ethical standards governing practitioners. And as digital forensics gains prominence in the legal landscape, the lack of agreed-upon standards is a big problem.<\/p>\n

\n \"\"<\/a>
\n This way please.<\/span>
\n irina slutsky<\/a>, CC BY<\/a><\/span>
\n <\/figcaption><\/figure>\n<\/p>\n

What is<\/em> digital forensics?<\/h2>\n

Digital or computer forensics involves the identification, recovery, analysis and presentation in court of relevant information taken from electronic devices such as computers and cellphones.<\/p>\n

That information becomes digital evidence<\/a> presented in court and designed to tie together people and events in time and space to establish causality for crimes or civil wrongs.<\/p>\n

For example, imagine the police arrested a suspect on charges she murdered her husband by poisoning him. The police will seize and examine the suspect\u2019s computer to uncover incriminating evidence such as the suspect\u2019s history of visiting web pages that deal with poisons. Once retrieved, the prosecutor will likely introduce that evidence to gain a conviction.<\/p>\n

Digital evidence is not trivial. If it leads to a conviction on criminal charges, the defendant may face prison time. In a civil case, it can lead to a defendant having to pay monetary damages. And the police officers, technicians and private contractors who testify in court about digital evidence can be the difference between justice served and justice denied.<\/p>\n

\n \"\"<\/a>
\n It\u2019s less obvious how to properly collect evidence from within the phone.<\/span>
\n West Midlands Police<\/a>, CC BY-SA<\/a><\/span>
\n <\/figcaption><\/figure>\n<\/p>\n

The \u201cWild West\u201d of digital forensics<\/h2>\n

In some ways, the digital forensics landscape<\/a> resembles the \u201cWild West.\u201d At least part of the reason for this is that digital forensics is not science-driven; instead, it is driven by its practitioners.<\/p>\n

Those involved with determining the relevance of digital evidence are sometimes ill-equipped<\/a> to make such assessments.<\/p>\n

Problems<\/a>, including inadequate training, use of outdated equipment, limited resources, few personnel and lack of a standardized protocol for analyzing digital evidence have all been documented. These shortcomings have led to evidentiary issues, improper conclusions by juries about digital evidence and doubtful outcomes. A good example would be the Casey Anthony<\/a> trial, where improper analysis of her visits to websites dealing with murder was admitted as evidence.<\/p>\n

Unlike DNA analysis<\/a>, there\u2019s no standardized protocol for identifying, recovering, or processing digital evidence. As a result, two different technicians at different crime labs might reach different conclusions<\/a> about a particular piece of evidence because they used different equipment or had divergent training.<\/p>\n

These problems have implications for justice being served.<\/p>\n

First steps toward standards<\/h2>\n

Thankfully, the situation is changing as the National Institute of Standards and Technology (NIST<\/a>) works to develop specific standards<\/a> for analyzing digital evidence.<\/p>\n

The courts have also begun paying attention to some of the legal issues involving digital evidence. For example, in Riley v California<\/a>, the US Supreme Court ruled in 2014 that police must obtain a search warrant before they can seize electronic devices suspected of containing digital evidence. This ruling makes it somewhat harder for police to seize and analyze personal devices involved in crimes.<\/p>\n

Lack of a code of ethics for practitioners<\/h2>\n

Because the people who recover, analyze, process and testify about digital evidence are influential in court proceedings, they must be ethical in their dealings with the legal system.<\/p>\n

However, the reality is this: not only is digital forensics the \u201cWild West\u201d when it comes to protocols for processing evidence, there isn\u2019t a code of ethics that governs the professional behavior of digital forensics practitioners.<\/p>\n

Instead, various professional associations<\/a> have created a hodgepodge of codes of ethics for members. Some of them are very detailed<\/a>; others, not so much<\/a>.<\/p>\n

Unlike medicine<\/a> or law<\/a>, each of which has a single, overarching code of professional ethics enforced by the states, there is no comparable code that describes how a digital forensics practitioner should (or must) behave in his or her professional life.<\/p>\n

\n \"\"<\/a>
\n Looking for uniform, ethical standards for digital evidence.<\/span>
\n jon crel<\/a>, CC BY<\/a><\/span>
\n <\/figcaption><\/figure>\n<\/p>\n

The challenge of creating a code of ethics<\/h2>\n

Last May, I co-organized a two-day workshop on professional ethics and digital forensics that was funded by, and held at, the National Science Foundation (NSF<\/a>). Academics, researchers and practitioners attended.<\/p>\n

The workshop explored the need for a code of ethics and the contours of what such a code might include. We also examined hurdles to establishing a code, and existing codes from other professions<\/a> that could serve as models.<\/p>\n

The consensus among participants was that the need is great<\/a> for a code of professional ethics that governs digital forensics practitioners. Participants shared examples of ethical issues that cloud the profession. Conflicts of interest. Vendors producing research on their own products and using that to influence agencies to adopt their product(s). Some practitioners’ lack of understanding of the mechanics of the software they use to process evidence (the \u201cblack box\u201d problem).<\/p>\n

However, just because participants agree a code of ethics is needed doesn\u2019t mean there aren\u2019t significant hurdles to overcome with creating one. What specific behavior would be covered? What themes would the code address (for instance, \u201cfairness,\u201d \u201ctrust,\u201d \u201cjustice\u201d)? What agency or organization would enforce the code? (Suggestions included NIST or the American Academy of Forensic Sciences (AAFS<\/a>).) To whom would the code apply? All practitioners involved with digital evidence or just those processing it?<\/p>\n

Moving forward<\/h2>\n

To raise awareness and continue working to create a code of ethics, this academic year we plan to replicate the workshop at various professional meetings including those of the Southern Criminal Justice Association<\/a>, AAFS and the Academy of Criminal Justice Sciences<\/a>.<\/p>\n

We will also reach out to leaders in the AAFS and the American Bar Association<\/a> for help with developing the code.<\/p>\n

As digital evidence becomes more common in legal proceedings, ensuring that practitioners have the strongest professional ethics is not only sensible, it is imperative.<\/p>\n

\"The<\/p>\n

John J Sloan, III<\/a> is Professor of Criminal Justice and Sociology at The University of Alabama at Birmingham<\/a>.<\/p>\n

This article was originally published on The Conversation<\/a>. Read the original article<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

John J Sloan, III, The University of Alabama at Birmingham Let me begin with a disclaimer: I am neither a digital forensics practitioner nor do I play one on television. I am, however, a professor in, and former chair of, an academic department at a research university that houses a graduate program in computer (digital) […]<\/p>\n","protected":false},"author":40,"featured_media":4161,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[30,8],"tags":[198,199,196,195,197],"_links":{"self":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/4160"}],"collection":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/users\/40"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/comments?post=4160"}],"version-history":[{"count":1,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/4160\/revisions"}],"predecessor-version":[{"id":4162,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/posts\/4160\/revisions\/4162"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media\/4161"}],"wp:attachment":[{"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/media?parent=4160"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/categories?post=4160"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lifeandnews.com\/articles\/wp-json\/wp\/v2\/tags?post=4160"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}