Examination of customized questioned digital documents.

Abstract

With the increasing trend of digitization of business processes and personal communication across the globe, digital documents of intrinsic value continue to be created. Whereas the questioned document examination (QDE) field of forensic science deals with the examination of "physical" documents potentially disputed in a court of law, there are no developed approaches for handling questioned digital documents (QDDs). Although techniques that address related problems such as identifying document types and image forensics exist, concrete strategies for analyzing questioned "digital" documents still need to be developed. This paper focuses on developing methods to examine QDDs that are customized from a database, due to the versatile use of customized documents in many areas. As a basis for our approach, we make the case for the need to develop analysis techniques for a digital counterpart of QDE which we term Questioned Digital Document Examination (QDDE). We posit that there is a benefit in considering digital aspects of forensic science disciplines where the questions answered by the discipline are clear, from a digital perspective. The paper describes some of the aspects that can be considered in the domain of question digital document examination. In designing methods for QDDE, we discuss the process of document recreation and describe the feasibility of our recreation process in different scenarios. Our experiments show that an alternative approach of considering digital aspects from a well-defined physical domain is worthwhile. It also supports the practical application of our approach in examining documents customized from a database.