Digital Forensics Investigation Models: Current State and Analysis

A digital forensics investigation (DFI) is characterized with activities related to search, identification, collection, analysis of digital evidences as all activities should be documented in a given format. Different models and methodologies are proposed to facilitate DFI, trying to describe procedures and activities performed by the investigator. Continuous technological development leads to the emergence of new sophisticated attacks, which also requires new approaches to be taken to crime scene investigation. In this paper a summary and analysis of contemporary achievements in DFI is performed to outline the current state of DFI development and to draw challenging issues and trending research topics. A conceptual model generalizing current state in DFI models is also presented.