問99
頻出度★★★
外部からの不正アクセスによるコンピュータに関する犯罪の疑いが生じた。そのとき, 関係する機器やデータ, ログなどの収集及び分析を行い, 法的な証拠性を明らかにするための手段や技術の総称はどれか。
平成31年度 春期 ITパスポート試験 問99
This question's explanation and your answers so far.
解説
問 99
Incorrectア
“Digital signage” is an information-delivery mechanism that electronically displays video or advertisements on screens in places such as train stations and shops; it has nothing to do with collecting or analyzing evidence.
Incorrectイ
“Digital signature” is a technique that uses public-key cryptography to prove the author of electronic data and to detect tampering; although it is a means of guaranteeing the authenticity of data, it is not the collective term for collecting and analyzing evidence of a crime.
Incorrectウ
“Digital divide” is a social term referring to the gap (information gap) that arises between people who can use information and communication technology and those who cannot; it is not a technique for investigating evidence.
- エ
正解 The correct answer is エ, “Digital forensics”. This is the collective term for the whole set of means and techniques used, when a suspicion of a computer crime or unauthorized access arises, to collect and preserve electronic records—devices such as PCs, servers, and smartphones, together with the data, communication logs, and access logs inside them—through proper procedures so that they cannot be tampered with, and then to analyze them and present them as “legal evidence” that holds up in settings such as a court of law. The question statement is itself the definition, and “clarify the evidentiary value” is the decisive clue pointing to forensics (i.e., forensic science, evidence investigation).
ここがポイント
- Digital forensics = the collective term for the means and techniques used, when a crime such as unauthorized access is suspected, to properly collect / preserve / analyze devices, data, and logs and to clarify their legal evidentiary value.
- Distinguish the confusable “digital ○○” terms: do not mix up signage (electronic advertisement display), signature (author proof and tamper detection), and divide (information gap) with forensics (evidence investigation).
用語