LOCARD

The project focused on the collection, processing, and exchange of digital evidence. One of the core outcomes is the delivery of a blockchain-based platform for the chain of custody of digital evidence. The platform modelled all the interactions with stakeholders in the ecosystem, from the collection of digital evidence to the delivery of them in the form of a report in a court of law so that there is transparency and immutability. Moreover, this process allows the selective sharing of digital evidence, correlation of evidence across cases, and collaboration of digital forensics experts. Finally, the project delivered a set of tools for streaming, mobile and network forensics to address specific challenges in the field.

Reason for applying to HSbooster.eu services

Currently, we have made LOCARD a liaison of ISO JTC1/SC 27/WG 4 and submitted a working document (it has been assigned ID 17618). However, we are new to this kind of process, it is slow, often requires attendance to meetings (some of which might be face to face) and, most importantly, some guidance and insight on the process to guide us in managing to have this from a working document to an actual ISO standard. Based on the scope and experience of the people in HSBooster, we expect to find the needed support.

Main Standardisation Interests

We want to standardise and, as a result, harmonise the process of sharing digital evidence. As we have shown in collaboration with Eurojust (https://arxiv.org/abs/2205.12911 accepted in https://academic.oup.com/cybersecurity) the process of exchanging digital evidence among LEAs and the judicial system is complex, and interaction with private organisations introduces more problems. By streamlining the process and adding blockchains or any other verifiable and trustable technology to selectively share information (the latter was a request from the ISO group), we may significantly limit the time needed to exchange digital evidence and effectively limit the bureaucracy without compromising the security, privacy but having the evidence acceptable in a court of law.