Definitions of Computer Crime and Computer Forensics

---

While law and order may be catching up and the Wild West days of hacking may now lie behind us, further virus outbreaks can be expected in the coming years, as well as plenty more innovative ways for computers to be used with criminal intent. So what exactly is computer crime? Computer crime can best be defined as a criminal act in which a computer is essential to carrying out the crime; however, the definition is widening to include criminal acts where computers act as repositories of information about the crimes, although they may not be directly involved in perpetrating these acts. Forensics, in general usage, is the application of the tools of science, as well as specific scientific facts, to help solve legal problems. Television shows such as CSI and the Sherlock Holmes stories are all about forensics. What, though, does forensics have to do with computers? Computer forensics is the examination and analysis of data held on computer storage media such as disks, tapes, and other drives. It is basically the application of scientific, criminal investigation, and computer techniques to locate any data stored on or retrieved from media that can be used as evidence in a court of law.

As a result, computer forensics procedures have to follow prescribed procedures, rules of evidence, and legal processes. Just as you see detectives dusting an area slowly for fingerprints, computer forensics tends to move along at a plodding pace to preserve the accuracy of information without sacrificing the integrity of the evidence. This means that data must be carefully recovered and securely stored. It also means that investigators must become skilled at finding key pieces of data amid a massive volume of information. Make an error, and potentially successful prosecutions can fail based on technicalities such as unsatisfactory equipment, procedures not being followed properly, or inadequate presentation of evidence in court.

---