Digital forensics and measurement science

Digital forensics is normally associated with the detection, and to a lesser extent the prevention, of cybercrime. When a digital forensics investigation takes place it is more complex than turning on a computer, making a directory listing and searching through files. Digital forensics is often associated with computer security and whilst there are synergies it is most appropriate to think of digital forensics and computer security as being opposite complementary disciplines. After obtaining the appropriate legal authorization to seize a digital device the first step in any digital forensics analysis is to carefully preserve the original file or device because this is the forensic information the digital forensics practitioner has to work with. If measurement science is to make use of digital forensics it is important to consider the nature of digital evidence and the amount of data that could potentially contribute to that evidence.