An Evaluation of Agreement and Conflict Among Computer Forensics Experts.pdfVIP

Proceedings of the 42nd Hawaii International Conference on System Sciences - 2009 An evaluation of agreement and conflict among computer forensics experts Gregory H. Carlton Reginald Worthley California State Polytechnic University University of Hawaii College of Business Administration Shidler College of Business Computer Information Systems Department Dept. of Information Technology Management ghcarlton@ worthley@ Abstract needed to explain this complex material to the judge The use of computer data as evidence within and jury, who represent members of the general public. litigation is growing rapidly. Additionally, courts Computer forensics methodology is based on the define computer data as a form of scientific evidence. scientific premise that an established, measurable The courts recognize that subject matter of scientific process is followed that is generally accepted within evidence is outside the general knowledge of the the field [3]. Individuals qualified by the courts to public, and it is beneficial for someone with special provide expert testimony in trials are uniquely skills in the subject to explain the scientific evidence to permitted to provide their opinions as evidence when the court; therefore, expert witnesses are permitted to their opinions are derived from their analysis of data enter their opinions into evidence to explain the data. within their area of expertise [1]. This unique ability to However, a recent study identified widespread conflict enter an individual?s opinion as evidence is very among professionals in the field of computer forensics. powerful within the legal process, and it may represent This conflict raises serious questions concerning the the single factor that sways the opinion of a judge or data presented as evidence, the conclusions drawn by jury [1]. Althou