An Analysis of Digital Forensic Laboratory Development among Malaysia’s Law Enforcement Agencies

Authors: Sarah K. Taylor, Miratun M. Saharuddin, Zabri A. Talib

Abstract:

Cybercrime is on the rise, and yet many Law Enforcement Agencies (LEAs) in Malaysia have no Digital Forensics Laboratory (DFL) to assist them in the attrition and analysis of digital evidence. From the estimated number of 30 LEAs in Malaysia, sadly, only eight of them owned a DFL. All of the DFLs are concentrated in the capital of Malaysia and none at the state level. LEAs are still depending on the national DFL (CyberSecurity Malaysia) even for simple and straightforward cases. A survey was conducted among LEAs in Malaysia owning a DFL to understand their history of establishing the DFL, the challenges that they faced and the significance of the DFL to their case investigation. The results showed that the while some LEAs faced no challenge in establishing a DFL, some of them took seven to 10 years to do so. The reason was due to the difficulty in convincing their management because of the high costs involved. The results also revealed that with the establishment of a DFL, LEAs were better able to get faster forensic result and to meet agency’s timeline expectation. It is also found that LEAs were also able to get more meaningful forensic results on cases that require niche expertise, compared to sending off cases to the national DFL. Other than that, cases are getting more complex, and hence, a continuous stream of budget for equipment and training is inevitable. The result derived from the study is hoped to be used by other LEAs in justifying to their management the benefits of establishing an in-house DFL.

Keywords: Digital forensics, digital forensics laboratory, digital evidence, law enforcement agency.

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1317408

References:

[1] Ramendran, Charles. “Half billion ringgit losses due to surge in cyber crime”, The Sun Daily, March 5, 2018. Accessed May, 2018. http://www.thesundaily.my/news/2018/03/06/half-billion-ringgit-losses-due-surge-cyber-crime.
[2] Jay, Jay. “Cybercrime ranks among top three global risks in 2018, says WEF report”, Teiss Cracking Cyber Security, January 17, 2018. Accessed May, 2018. https://teiss.co.uk/news/cyber-crime-top-global-risk-wef/.
[3] Tan, Royce. “Cybercrime a serious threat to nation”, The Star Online, Sept 21, 2017. Accessed April, 2018. https://www.thestar.com.my/news/nation/2017/09/21/cybercrime-a-serious-threat-to-nation-malaysians-lost-rm1793mil-to-financial-crime-last-year-says-mi/.
[4] Latiff, Rozanna & Wagstaff, Jeremy. “Malaysia investigating reported leak of 46 million mobile users' data”, Reuters, November 1, 2017. Accessed May, 2018. https://www.reuters.com/article/us-malaysia-cyber/malaysia-investigating-reported-leak-of-46-million-mobile-users-data-idUSKBN1D13JM.
[5] Saieed, Zunaira. “Cybercrime surge in Malaysia”, The Star Online, May 20, 2017. Accessed April, 2018. https://www.thestar.com.my/business/business-news/2017/05/20/rates-of-cyber-crime-higher-now/.
[6] “More than 2,100 servers in Malaysia have been hacked, says cybersecurity agency”, The Straits Times, June 17, 2016. Accessed April, 2018. https://www.straitstimes.com/asia/se-asia/more-than-2100-servers-in-malaysia-have-been-hacked-says-cybersecurity-agency.
[7] M. B. Mukasey, J. L. Sedgwick and D. W. Hagy, “Electronic Crime Scene Investigation: A Guide for First Responders, Second Edition,” National Institute of Justice(NIJ). April, 2008. Special Report.
[8] S. Rekhis, J. Krichene and N. Boudriga, "Cognitive-Maps Based Investigation of Digital Security Incidents," 2008 Third International Workshop on Systematic Approaches to Digital Forensic Engineering, Oakland, CA, 2008, pp. 25-40. doi: 10.1109/SADFE.2008.20.
[9] W. E. Ringle, J. D. Franklin and S. C. Bell, “Searches and Seizures, Arrests and Confessions,” 2nd ed, C. Boardman Company, 1979, pp 138.
[10] J. Sammons, “The Basics of Digital Forensics The Primer for Getting Started in Digital Forensics” 2nd ed, Ed. Syngress, 2012, pp. 103-115.
[11] B. Carrier and E. Spafford, “Getting Physical with the Digital Investigation Process,” International Journal of Digital Evidence Vol 2, 2, (Electronic version) Fall 2003.
[12] T. McEwen, “The Role and Impact of Forensic Evidence in the Criminal Justice System,” National Institute of Justice, December 13, 2010.
[13] Garris, John, “Tackling the Unique Digital Forensic Challenges for Law Enforcement in the Jurisdiction of the Ninth U.S. Circuit Court,” SANS Institute InfoSec Reading Room, November 17, 2017. https://www.sans.org/reading-room/whitepapers/legal/tackling-unique-digital-forensic-challenges-law-enforcement-jurisdiction-ninth-us-circuit-court-38145.
[14] J. Ashcroft, D. Daniels and S. Hart, “Forensic Examination of Digital Evidence: A Guide for Law Enforcement,” National Institute of Justice(NIJ). April, 2004. Special Report.
[15] T. Wilsdon and J. Slay, “Digital forensics: exploring validation, verification & certification,” First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05), 2005, pp. 48-55, doi: 10.1109/SADFE.2005.11.
[16] Quintiliano, Paulo & Costa, João & Deus, Flavio & de Sousa Junior and Rafael, “Computer Forensic Laboratory: Aims, Functionalities, Hardware and Software,” 2013, doi: 72-75. 10.5769/C2013010.
[17] Malaysian Communications and Multimedia Commission. (2017). Internet Users Survey 2017. ISSN 1823-2523. Available from Malaysian Communications and Multimedia Commission Web site: https://www.mcmc.gov.my/skmmgovmy/media/General/pdf/MCMC-Internet-Users-Survey-2017.pdf.
[18] Department of Statistics Malaysia. (2017). Social Statistics Bulletin, Malaysia, 2017. Available from Department of Statistics Malaysia Web site: https://www.dosm.gov.my/v1/index.php?r=column/pdfPrev&id=aktTTjhhRHd1aHBCZGF1N01aaTl3dz09.
[19] D. Tan, “Establishing A Digital Forensics Laboratory for Law Enforcement Agency: A Proposal for Ministry of Health, Malaysia,” 2018, University College of Dublin, unpublished.
[20] Department of Statistics Malaysia. (2018). ICT Use and Access By Individuals and Households Survey Report, Malaysia, 2017. Available from Department of Statistics Malaysia Web site: https://www.dosm.gov.my/v1/index.php?r=column/cthemeByCat&cat=395&bul_id=bHBzbWxkWElxRDlmaU81Q3R2ckRkZz09&menu_id=amVoWU54UTl0a21NWmdhMjFMMWcyZz09.