DEVICE AND METHOD FOR PROVIDING SECURITY IN REMOTE DIGITAL FORENSIC ENVIRONMENT

摘要

The present invention relates to a device and method for collecting digital evidence on a remote site from a system to be analyzed, and providing security in a remote digital forensic environment on the basis of the collected digital evidence. The method for providing security comprises the steps of: a device for providing security in a remote digital forensic environment requesting an evidence collecting agent to collect evidence from a device from which evidence is to be collected; collecting, from the evidence collecting agent, evidence data in response to the request to collect evidence; verifying the evidence data on the basis of the signature value of the evidence data collected from the evidence collecting agent; generating evidence analysis data on the basis of the verified evidence data; verifying the evidence analysis data on the basis of the signature value of the evidence analysis data; and providing security for the device, from which evidence is to be collected, on the basis of the verification result of the evidence analysis data.