Network Forensics – Integrity of Information, Research Paper Example

Computer forensics entails identification extraction, documentation and preservation of computer evidence. Often this material is valued data vulnerable to corruption. There are multiple facets to computer forensics and the process.  On a core level, computer forensics involves retrieving a particular data process, and assessing who was involved in carryout the process among other details that might resolve any network issue caused by the process. Integrity checking, otherwise known as change detection, is usually performed by reviewing data for hashed signatures and comparing the hash data to that recorded in the databases if these files match than the integrity of the file is sound (NY Computer Science Services, 2012).

There are a wide range of data sets that could require an integrity check during the forensic process, but the for the most part there are only three main one worth initial concern. In some cases, computer forensics is actually a search for evidence before the fact, as opposed to after a major incident has crashed a network. The three main aspects of computer forensics examinations of a network that require integrity checks, are active, archival, and latent data (NY Computer Science Services, 2012).

These three data forms require integrity checks during the computer forensic process. Active data is usable information, and the easiest type to retrieve. Active data consist of programs, data files, used files and operating systems. Archival data is stored through alternative methods, hard drives, USB, CD, or even in the form of tapes. Finally, latent data requires specialized tools for access. This type of data is usually the hardest to retrieve as it has been deleted or overwritten. Checking the integrity of files, specifically those in the mentioned databases is the core focus of computer forensics.

In sum, if a computer network is corrupted the best bet is to act quickly by initiating the forensic process. A certified Forensic Examiner carryout all of the necessary diagnostics and integrity checks needed to re-secure the system.

Work Cited

NY Computer Science Services. (2012). The computer forensic examination process. Retrieved from http://www.newyorkcomputerforensics.com/learn/forensics_process.php