Modelo para la toma de decisiones multicriterio como soporte para el análisis forense en dispositivos de almacenamiento digital.

Abstract

In legal processes where informatics incidents are pretended to be clarified, therecollected digital evidence should be trustworthy and managed under policies based onstandards in order to be considered as valid in a trial.Currently it does not exist aforensic analysis model containing detailed updated protocols with examples that canguide the informatics forensics to make decisions, for this reason a model base on theUNE 71506:2013 Spanish legislation has been proposed which pretends to be a supportin the forensic analysis of digital storage devices. This model was implemented in aprototype web application based on HTML, CSS and developed through DreamWeaver, the application shows how to perform the acquisition and analysis of evidencefollowing a decision-making diagram.It has actions to be performed depending on thescenarios that can be found by the forensic investigator, also an action protocol with itsexample was detailed to show the correct way of collecting evidence and indicates arecommended tool for this task. To probe the easiness of the decision-making,acquisition and information analysis through the application of the model with the useof theweb interface, the chi square was used and it was concluded that the acquisitionand analysis of collected information was eased in an 80% with the application of themodel. It is recommended to use flexible methodologies and tools that can be adapted tothe continuous change of forensic informatics.