디지털 증거의 압수수색을 용이하게 하고 압수한 디지털 데이터를 효율적으로 검색하고 분석하여 법원에 적법한 증거로 제출하기 위해 필요한 것이 디지털 증거분석도구이며, 이를 연구하는 분야를 디지털 포렌식이라 한다. 전세계에 약 150여개의 디지털 포렌식 도구가 존재하는데, 디지털 증거의 법적 효력을 확보하기 위해서는 정확성과 신뢰성, 무결성을 보장하는 포렌식 도구을 선택해야 한다. 이를 위해 필요한 것이 디지털 포렌식 도구에 대한 검증이며, 이러한 검증이 디지털 증거가 법정에서 증거로 활용될 수 있게 하는 전제조건이다. 포렌식 도구에 대한 검증은 여러 기관들과 조율이 가능하고, 중립성과 신뢰성이 있는 국가기관에서 실시해야 한다. 또한 재판과정에서 신뢰성 있는 증거로 허용되기 위해서는 증거수집절차 자체가 적정성 내지 적법성을 유지했음을 증명할 수 있는 체계적이고 표준화된 기준이 필요하다.

The purpose of digital forensic is to make digital evidence which can be accepted in court using well-organized technic and according to reasonable process in computer crime investigation. Digital forensic process consist of preparation, acquisition, preservation, examination, analysis and reporting. Digital evidence is difficult to treat, because digital information is easy to forge, alter, delete and modify. So several digital evidence collection tools and forensic tools are developed. However there are many problem of composition which is whole due process from evidence collection to submitting to the court because existing digital evidence collection process and tools have a vulnerability of guaranteeing integrity. Therefore, it is necessary to develop guideline for improvement and design of the digital data acquisition tool for computer forensics and standard procedures on computer forensics.

The purpose of digital forensic is to make digital evidence which can be accepted in court using well-organized technic and according to reasonable process in computer crime investigation. Digital forensic process consist of preparation, acquisition, preservation, examination, analysis and reporting. Digital evidence is difficult to treat, because digital information is easy to forge, alter, delete and modify. So several digital evidence collection tools and forensic tools are developed. However there are many problem of composition which is whole due process from evidence collection to submitting to the court because existing digital evidence collection process and tools have a vulnerability of guaranteeing integrity. Therefore, it is necessary to develop guideline for improvement and design of the digital data acquisition tool for computer forensics and standard procedures on computer forensics.

digital forensic, digital evidence, integrity, Authentication, forensic tool