The Standardised Digital Forensic Investigation Process Model (SDFIPM)

Amin Hosseinian-Far, Reza Montasari, Richard Hill, Victoria Carpenter

Research output: Chapter in Book/Report/Conference proceedingChapter


The field of digital forensics still lacks formal process models that courts can employ to determine the reliability of the process followed in a digital investigation. The existing models have often been developed by digital forensic practitioners, based on their own personal experience and on an ad-hoc basis, without attention to the establishment of standardisation within the field. This has prevented the institution of the formal processes that are urgently required. Moreover, as digital forensic investigators often operate within different fields of law enforcement, commerce and incident response, the existing models have often tended to focus on one particular field and have failed to consider all the environments. This has hindered the development of a generic model that can be applied in all the three stated fields of digital forensics. To address these shortcomings, this paper makes a novel contribution by proposing the Advanced Investigative Process Model (the SDFIPM) for Conducting Digital Forensic Investigations, encompassing the ‘middle part’ of the digital investigative process, which is formal in that it synthesizes, harmonises and extends the existing models, and which is generic in that it can be applied in the three fields of law enforcement, commerce and incident response.
Original languageEnglish
Title of host publicationBlockchain and Clinical Trial
EditorsHamid Jahankhani, Stefan Kendzierskyj, Arshad Jamal, Gregory Epiphaniou, Haidar Al-Khateeb
PublisherSpringer Nature
Number of pages41
ISBN (Print)978-3-030-11288-2
Publication statusPublished - 6 May 2019

Publication series

NameAdvanced Sciences and Technologies for Security Application


Dive into the research topics of 'The Standardised Digital Forensic Investigation Process Model (SDFIPM)'. Together they form a unique fingerprint.

Cite this