Digital forensic analysis procedure for mobile devices in Portugal
Article Sidebar
Main Article Content
Abstract
Digital forensic analysis of mobile devices is an emerging and increasingly relevant area in criminal investigation, given the quantity and relevance of the information stored on these devices. This work aims to define a structured and standardized procedure for conducting digital forensic analysis of mobile devices in Portugal, in accordance with the national and European legal framework, namely the Cybercrime Law (Law No. 109/2009, of September 15) and the General Data Protection Regulation (Regulation (EU) 2016/679).
In the development of this work, several technical and legal challenges are identified, including data encryption, biometric authentication mechanisms, and the lack of a standardized methodology applicable to the Portuguese context. The absence of standardized procedures can compromise the integrity of digital evidence and its admissibility in judicial proceedings, making it necessary to define best practices aligned with international standards for digital forensic investigation.
The aim is to contribute to supporting professionals in the legal and forensic field by proposing a structured procedure that ensures the preservation of the chain of custody, the integrity of the data, and compliance with the legal and ethical requirements applicable to the collection and analysis of digital evidence.
Downloads
Article Details
This work is licensed under a Creative Commons Attribution 4.0 International License.
References
Arnes, A. (2018). Digital forensics. Wiley.
Assembleia da República (Portugal). (2009). Lei n.º 109/2009, de 15 de setembro: Aprova a Lei do Cibercrime. Diário da República, Série I(180).
Casey, E. (2001). Handbook of computer crime investigation: Forensic tools and technology. Academic Press.
Casey, E. (2011). Digital evidence and computer crime: Forensic science, computers, and the internet (3.ª ed.). Academic Press.
Cohen, F. (2012). Digital forensics. In H. Tipton & M. Krause (Eds.), Information security management handbook (6.ª ed.). Auerbach Publications. https://doi.org/10.1201/b11819-107
Conselho da União Europeia. (2001). Convenção sobre o cibercrime (Budapeste, 23 de novembro de 2001). Jornal Oficial da União Europeia.
Council of Europe. (2001). Convention on Cybercrime (ETS No. 185).
Cruz-Cunha, M. M., & Mateus-Coelho, N. R. (2020). Handbook of research on cyber crime and information privacy. IGI Global.
Diário da República. (2023). Código Penal português (com as alterações até 2023).
European Union. (2016, April 27). Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation). https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679
Gilliland, A. J. (2016). Setting the stage. In M. Baca (Ed.), Introduction to metadata. Getty Research Institute. https://www.getty.edu/publications/intrometadata/setting-the-stage/
International Organization for Standardization. (2012). ISO/IEC 27037:2012 – Guidelines for identification, collection, acquisition and preservation of digital evidence.
International Organization for Standardization. (2017). ISO 23081-1:2017 – Information and documentation – Records management processes – Metadata for records – Part 1: Principles.
Kiran, S., Sanjana, J., & Reddy, N. J. (2019, March). Mobile phone addiction: Symptoms, impacts and causes—A review. In International Conference on Trends in Industrial Value Engineering and Business and Social Innovation (ICTIVBSI) (pp. 81–86).
Kist, D. J. (2019). Prova digital no processo penal. JH Mizuno.
Lei n.º 32/2008, de 17 de julho. (2008). Diário da República.
Limberger, T., Santanna, G. da S., & Giannakos, D. B. da S. (2023). Internet das coisas (IoT) e os direitos à privacidade e à proteção de dados do cidadão. Revista Brasileira de Políticas Públicas. https://doi.org/10.5102/rbpp.v13i3.8536
National Institute of Justice. (2008). Electronic crime scene investigation: A guide for first responders (2.ª ed.). U.S. Department of Justice.
National Institute of Standards and Technology. (2006). Guide to integrating forensic techniques into incident response (Special Publication 800-86).
Portugal. (2019). Lei n.º 58/2019, de 8 de agosto: Assegura a execução do RGPD na ordem jurídica nacional. https://dre.pt/dre/detalhe/lei/58-2019-123815466
Queirós Colaço, M. F. dos S. (2023). Buscas informáticas e subsequente apreensão de dados informáticos como métodos de obtenção de prova digital em processo penal [Dissertação de mestrado, Universidade Católica Portuguesa].
Ramalho, D. S. (2013). The use of malware as a means of obtaining evidence in criminal proceedings. Journal of Competition and Regulation, 4(16), 195–243.
Ramos, A. D. (2014). A prova digital em processo penal: O correio eletrónico (2.ª ed.). Chiado Books.
República Portuguesa. (1987, fevereiro 17). Código de processo penal (Decreto-Lei n.º 78/87). https://diariodarepublica.pt/dr/legislacao-consolidada/decreto-lei/1987-34570075
Santos, L. F. C. (2024). Dynamic analysis techniques for Android applications [Dissertação de mestrado, Polytechnic Institute of Leiria]. https://iconline.ipleiria.pt/bitstream/10400.8/9768/1/Te%CC%81cnicas%20de%20ana%CC%81lise%20dina%CC%82mica%20a%20aplicac%CC%A7o%CC%83es%20Android_cf.pdf
Stevens, M., Bursztein, E., Karpman, P., Albertini, A., & Markov, Y. (2017). The first collision for full SHA-1. In Advances in Cryptology – CRYPTO 2017.
Venâncio, P. D. (2020). Regime geral dos atos eletrónicos – Um regime esquecido. Revista Electrónica de Direito.
Venâncio, P. D. (2023). Lei do cibercrime: Anotada e comentada. Editora D’Ideias.
Xie, T., Feng, D., & Lai, X. (2013). Fast collision attack on MD5. Journal of Cryptographic Engineering.
Xu, X. (2019). Impacts of mobile usage and experience in contemporary society. IGI Global.