Applying Forensic Principles to Computer-Based Assessment

Laubscher, Rabe, Olivier, Eloff, and Venter

2005

Citation information

Abstract

A computer forensic investigator investigates computer crime. Currently only a few academic institutions have a computer forensic department, and therefore the investigative responsibility (in case of contravention of assessment regulations for computer-based assessments) rests upon the lecturers.

The purpose of our project is to apply forensic principles to a computer-based assessment environment to facilitate the identification and prosecution of any party that contravenes assessment regulations. This paper is the first step in that project; its purpose is to consider the nature of such an environment. This nature is derived from the established computer forensic principles. In particular we will focus on the forensic process to determine the policies, procedures and types of tools that should be present in such an environment. The intention of the paper is not to consider any of the issues raised in detail, but to consider the process from a high level.

The utilization of different tools namely a key logger, CCTV camera, audit log and a report of logins, will facilitate identification of any party that contravenes assessment regulations. The proposed process consists of four phases, namely the preparation of the environment, the collection of evidence, the analysis of the evidence and the reporting of findings.

Full text

Definitive version

BibTeX reference