EC-Council: Computer Hacking Forensic Investigator(CHFI-V10)
Module 1 : Computer Forensics in Today's World
         
Notes available : 31 You are not logged in.
Please Login for track your learning progress
   
 
Sl.No: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 |
Go to Note No.



Bookmark this Note
Note ID: 110

Daubert standard in digital forensics


If you want to share the link of this note, please click here to "Copy note link" and share that generated link. Link from URL may change in future.
 


The Daubert Standard is a framework for judges to evaluate the relevance and reliability of expert witness testimony. The standard was established in 1993 by the Supreme Court case Daubert v. Merrell Dow Pharmaceuticals, Inc. The Daubert standard applies to any scientific procedure used to prepare or uncover evidence. The standard states that expert testimony must meet specific thresholds of evidence admissibility, including:

  • Whether the theory or technique has been tested
  • Whether it has been subjected to peer review and publication
  • Its known or potential error rate

The Daubert standard for digital forensics is reliable, relevant, and trustworthy evidence:

  • Reliable: Evidence must be repeatable
  • Relevant: Evidence must be material to the prosecuted case

In Daubert, seven members of the court agreed on the following guidelines for admitting scientific expert testimony:

  • Judge is gatekeeper: Under Rule 702 of the Federal Rules of Evidence, the task of "gatekeeping", or assuring that scientific expert testimony truly proceeds from "scientific knowledge", rests on the trial judge.

  • Relevance and reliability: This requires the trial judge to ensure that the expert‘s testimony is "relevant to the task at hand" and that it rests "on a reliable foundation". Daubert v. Merrell Dow Pharms., Inc., 509 U.S. 579, 584-587. Concerns about expert testimony cannot be simply referred to the jury as a question of weight. Furthermore, the admissibility of expert testimony is governed by Rule 104(a), not Rule 104(b); thus, the judge must find it more likely than not that the expert‘s methods are reliable and reliably applied to the facts at hand.

  • Scientific knowledge = scientific method/methodology: A conclusion will qualify as scientific knowledge if the proponent can demonstrate that it is the product of sound "scientific methodology" derived from the scientific method

  • Illustrative factors: The court defined "scientific methodology" as the process of formulating hypotheses and then conducting experiments to prove or falsify the hypothesis, and provided a set of illustrative factors (i.e., not a "test") in determining whether these criteria are met:

1. Whether the theory or technique employed by the expert is generally accepted in the scientific community;

2. Whether it has been subjected to peer review and publication;

3. Whether it can be and has been tested;

4. Whether it has a known error rate; and

5. Whether the research was conducted independent of the particular litigation or dependent on an intention to provide the proposed testimony.

RULE 702. TESTIMONY BY EXPERT WITNESSES (Amended in 2000 and 2011)

A witness who is qualified as an expert by knowledge, skill, experience, training, or education may testify in the form of an opinion or otherwise if:

a) The expert‘s scientific, technical, or other specialized knowledge will help the trier of fact to understand the evidence or to determine a fact in issue;

b) The testimony is based on sufficient facts or data;

c) The testimony is the product of reliable principles and methods; and

d) The expert has reliably applied the principles and methods to the facts of the case.



  Go to notes  






WELCOME TO ONLINE EXAM PREPARATION SYSTEM

Certification Examinations