Abstract

The rationale for the proposed research on the Socially Embedded Routine Activity Theory for Digital Forensics (SERAT-DF) is to bridge the gap between traditional criminology, macro-sociology, and information systems. The traditional Routine Activity Theory (RAT) (Cohen and Felson, 1979) provides the baseline for the convergence of crime in time and space; however, it does not address the motivation and environment gaps that are important in digital forensics. In addition, RAT is based on the collision of three constructs; motivated offenders, suitable targets, and absence of capable guardians. This research employs an analytical framework to synthesize a new socio-technical theory that can be tested through empirical investigation of violent crime digital evidence. SERAT-DF expands the constructs to include digital forensics. First, motivated offenders include systemic drivers of motivation like poverty and cultural norms. Furthermore, the motivated offender lives in a neighborhood with high social strain and may be more motivated to commit a crime. The social environment contributes to the motive and provides the digital tools to commit violent crime. Second, suitable targets examine digital footprints and routine online behaviors. The suitable targets are easy to find and leave a digital footprint for offenders to easily locate it. Third, absence of capable guardians against a violation incorporates technical “guardians” encryption, logs, and social media posts. The guardians are the security guards of the digital world. They decide if the crime is stopped or if the evidence is saved. For example, smart home cameras are considered strong guardians, while the absence of smart home devices can be considered a weak guard and a digital desert. SERAT-DF can validate the socio-technical framework for digital evidence gathering and preliminary analysis and extend behavioral IS research into digital forensic operations. Limited research has focused on this aspect of digital forensics. Preliminary observations from collaboration with a local law enforcement agency on a homicide investigation, combined with analysis of limited data and informal interviews of law enforcement personnel suggest a substantial gap in the practical approach to accessing the digital ecosystem with the socio-technical framework. Future research ideas include a comparative analysis of metropolitan and rural violent crime scenes to examine how differences in technical infrastructure, digital accessibility and community environments influence the availability and quality of digital evidence (Carrier and Spafford, 2004).

Download

Share

COinS