Forensic Investigation of Distributed Information

The paper notes the increasing importance of a new form of information–distributed information. The author analyzes legal events that necessitate forensic research of distributed information, as well as the most frequently committed crimes using distributed information services. The basic rules for the functioning of distributed information systems are defined. It is stated that most often in the practice of investigation there is a need to study file-sharing networks and their variety such as torrents. The basics of file-sharing networks are considered. Taking into account the conducted research, the author’s classification of file-sharing networks is proposed. The paper defines the main forensically significant tasks of studying file-sharing networks. These include: restoration of the entire information object from parts; identification of the user and his identifiers; proof of the user’s awareness of the content of the information objects in his possession; proof of intent to distribute; the principles of solving the above problems are considered sequentially. In the course of a comparative study of holding file-sharing network providers accountable, it was found that, unlike many foreign countries, in Russia there is virtually no legal basis for holding a peer-to-peer network provider accountable (but even in the latest generation of networks, the provider has virtually no control over the content of the network). It is noted that most investigators have insufficient knowledge in the area under consideration. It seems urgently necessary to organize periodic advanced training courses that cover new technologies and the principles of their research.

1. Bakirova E. Yu., Svinar A. L. Zashchita avtorskikh prav v seti Internet na primere fayloobmenykh setey // Problemy zakonodatelnogo regulirovaniya resursov i pravovogo razresheniya konfliktov s uchastiem subektov internet-soobshchestva: materialy Mezhdunar. nauch.-prakt. konferentsii v ramkakh proekta «Rossiyskoukrainskie kriminalisticheskie chteniya na Slobozhanshchine», g. Belgorod, 19 aprelya 2013 g. / otv. red. I. M. Komarov. — Belgorod: NIU «BelGU», 2013. — S. 26–29.

2. Voynikanis E. A. Problemy okhrany rezultatov intellektualnoy deyatelnosti v piringovykh setyakh // Sovremennoe pravo. — 2009. — № 3. — S. 106–109.

3. Kolycheva A. N. Fiksatsiya dokazatelstvennoy informatsii, khranyashcheysya na resursakh seti Internet: dis. … kand. yurid. nauk (Ros. gos. un-t pravosudiya). — M., 2018. — 199 s.

4. Kupriyanov A. A. Dokazyvat otsutstvie poddelki IP-adresov obvinyaemykh obyazano sledstvie // Ugolovnyy protsess. — 2017 — № 6. — S. 8.

5. Meshcheryakov V. A. Teoreticheskie osnovy mekhanizma sledoobrazovaniya v tsifrovoy kriminalistike: monografiya. — M.: Prospekt, 2022. — 176 s.

6. Radaykin M. F. Pravovoe polozhenie torrent-trekerov i ikh polzovateley // Intellektualnaya sobstvennost. Avtorskoe pravo i smezhnye prava. — 2013. — № 4. — S. 46–55.

7. Tarasov D. A. Ob effektivnosti sudebnoy kompyuternoy ekspertizy v protsesse dokazyvaniya deyaniy, svyazannykh s «kompyuternym piratstvom» // Vestnik Moskovskogo universiteta MVD Rossii. — 2017. — № 2. — S. 100–101.

8. Fedotov N. N. Forenzika — kompyuternaya kriminalistika — M.: Yuridicheskiy mir, 2007. — 432 s.

9. Hagy D. W. Investigations Involving the Internet and Computer Networks. — Washington, DC: National Institute of Justice, 2007. — 137 p.