Digital Forensics and Cyber Crime. 7th International Conference, ICDF2C 2015, Seoul, South Korea, October 6–8, 2015, Revised Selected Papers

Research Article

Development and Initial User Evaluation of a Virtual Crime Scene Simulator Including Digital Evidence

Download
543 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-25512-5_2,
        author={Alleyn Conway and Joshua James and Pavel Gladyshev},
        title={Development and Initial User Evaluation of a Virtual Crime Scene Simulator Including Digital Evidence},
        proceedings={Digital Forensics and Cyber Crime. 7th International Conference, ICDF2C 2015, Seoul, South Korea, October 6--8, 2015, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2015},
        month={10},
        keywords={Virtual crime scene simulator Digital forensic training Unity3D Digital evidence},
        doi={10.1007/978-3-319-25512-5_2}
    }
    
  • Alleyn Conway
    Joshua James
    Pavel Gladyshev
    Year: 2015
    Development and Initial User Evaluation of a Virtual Crime Scene Simulator Including Digital Evidence
    ICDF2C
    Springer
    DOI: 10.1007/978-3-319-25512-5_2
Alleyn Conway1,*, Joshua James2,*, Pavel Gladyshev3,*
  • 1: IT Planning, an Garda Síochána
  • 2: Hallym University
  • 3: University College Dublin
*Contact email: alleyn.conway@ucdconnect.ie, joshua@cybercrimetech.com, pavel.gladyshev@ucd.ie

Abstract

Imagine the following scenario: an inexperienced law enforcement officer enters a crime scene and – on finding a USB key on a potential suspect – inserts it into a nearby Windows desktop computer hoping to find some information which may help an ongoing investigation. The desktop crashes and all data on the USB key and on the Windows desktop has now been potentially compromised. However, the law enforcement officer in question is using a Virtual Crime Scene Simulator and has just learned a valuable lesson. This paper discusses the development and initial user evaluation of a Virtual Crime Scene Simulator that includes the ability to interact with and perform live triage of commonly-found digital devices. Based on our experience of teaching digital evidence handling, we aimed to create a realistic virtual environment that integrates many different aspects of the digital and physical crime scene processing, such as physical search activities, triage of digital devices, note taking and form filling, interaction with suspects at the scene, as well as search team training.