Deriving Priorities of Competences Required for Digital Forensic Experts using AHP

Haejung Yun, Seung Yong Lee, Choong C. Lee Lee


Nowadays, digital forensic experts are not only computer experts who restore and find deleted files, but also general experts who posses various capabilities including knowledge about processes/laws, communication skills, and ethics. However, there have been few studies about qualifications or competencies required for digital forensic experts comparing with their importance. Therefore, in this study, AHP questionnaires were distributed to digital forensic experts and analyzed to derive priorities of competencies; the first-tier

questions which consisted of knowledge, technology, and attitude, and the second-tier ones which have 20 items. Research findings showed that the most important competency was knowledge, followed by technology and attitude but no significant difference was found. Among 20 items of the second-tier competencies, the most important competency was “digital forensics equipment/tool program utilization skill” and it was followed by “data extraction and imaging skill from storage devices.” Attitude such as “judgment,” “morality,” “communication skill,” “concentration” were subsequently followed. The least critical one was “substantial law related to actual cases.” Previous studies on training/education for digital forensics experts focused on law, IT knowledge, and usage of analytic tools while attitude-related competencies have not given proper attention. We hope this study can provide helpful implications to design curriculum and qualifying exam to foster digital forensic experts.

Full Text:



Al Fahdi, M., Clarke, N. L., and Furnell, S. M., “Challenges to Digital Forensics: A Survey of Researchers & Practitioners Attitudes and Opinions,” Information Security for South Africa, pp. 1-8, 2013.

Biswas, S., Yoo, J. H., and Jung, C. Y, “A Study on Priorities of the Components of Big Data Information Security Service by AHP,” The Journal of Society for e-Business Studies, Vol. 18, No. 4, pp. 301-314, 2013.

Garfinkel, S. L., “Digital Forensics Research: The Next 10 Years,” Digital Investigation, Vol. 7, pp. S64-S73, 2010.

Kim, B. W., “AHP Methodology,” Kims Information Strategy Lab, Seoul, Korea, 2015.

Kim, G. B., Chang, K. S., Jang, Y. S., Lee, S. J., and Lim, J. I., “A Study on Developing Certificate Program Model for Digital Forensic Examiner,” Journal of Digital Forensics, Vol. 3, pp. 29-51, 2008.

Kim, J. M., Choi, K. H., and Kim, K. J., “Research about the Development of Education Courses for Nurturing Digital Forensic Experts,” Journal of Information and Security, Vol, 12, No. 5, pp. 79-85, 2012.

Kim, Y. H., and Kook, K. H., “A Study on the Relative Importance of the Administrative and Technical Measures for the Personal Information Protection,” The Journal of Society for e-Business Studies, Vol. 19, No. 4, pp. 135-150, 2014.

Lee K. A., Park, D. W., and Koh, C. S., Digital Forensics for Scientific Investigation, GS Intervision, Seoul, Korea, 2011.

Lee S. J., Introduction to Digital Forensics, Irun Publishing, Seoul, Korea, 2011.

Lee, C. C., Kim, J., and Lee, C. H., “A Comparative Study on the Priorities between Perceived Importance and Investment of the Areas for Information Security Management System,” Journal of the Korea Institute of Information Security & Cryptology, Vol. 24, No. 5, pp. 919-929, 2014.

Lee, H., Na, O., Sung, S., and Chang, H., “A Design on Information Security Core Knowledge for Security Experts by Occupational Classification Framework,” The Journal of Society for e-Business Studies, Vol. 20, No. 3, pp. 113-125, 2015.

McClelland, D. C., “Testing for Competence Rather than for Intelligence,” American Psychologist, Vol. 28, No. 1, pp. 1-14, 1973.

Money Today, “Police cybercrime department is struggling with iPhone,” 2016.

Park, H. I., Yoon, J. S., and Lee, S. J., “A Study on Development of Digital Forensic Capability Evaluation Indices,” Journal of the Korea Institute of Information Security & Cryptology, Vol. 25, No. 5, pp. 1153-1166, 2015.

Park, N. S., “Development of Education/Training System to Strengthen Cybercrime Response Capacity of the Police,” Korean National Police Agency, 2015.

Park, Y. and Park, T., Decision Making Theory for AHP, Ja-Yoo Academy, Seoul, Korea, 2001.

Rha, H. D., Kim, C., and Lee, N., “A Study on Designing an Undergraduate Curriculum in Digital Forensics per Stages for Developing Human Resource,” Journal of Korean Association of Computer Education, Vol. 17, No. 3, pp. 75-84, 2014.

Rogers, M., “The Role of Criminal Profiling in the Computer Forensics Process,” Computers & Security, Vol. 22, No. 4, pp. 292-298, 2003.

Saaty, T. L., The Analytic Hierarchy Process,” McGraw Hill, New York, 1980.

Shin, J. W., “A Study on Digital Forensic Human Training Method,” Journal of the Korea Institute of Information and Communication Engineering, Vol. 18, No. 4, pp. 779-789, 2014.


  • There are currently no refbacks.