Securing Digital Evidence from Tampering and Falsification using Cryptography and Steganography

Digital evidence is defined as information and data of value to an investigation that is stored on received or transmitted by an electronic device. Investigation takes time to prove against the intruder .The internal and external tampering can happen. Data must be collected and preserved by investigator. By cloning or imaging data can be copied to another drive. Thus Original data can be prevented from the analyzer and intruder. A data base where evidence is analyzed on the device that generates it, can be transmitted from multiple sources to a server using a novel signature scheme which can be easily falsified. Data can be changed into fake or true by working on evidence. Hence data can be preserved by falsification detection. Encrypted data can be recovered and morphed image can be detected by data hiding process. Email is the communication tool which can have much evidence by email header analysis to find the victims contacts and stores as evidence.