text: Cybercrime investigators face numerous challenges when policing online crimes. Firstly, the methods and processes they use when dealing with traditional crimes do not necessarily apply in the cyber-world. Additionally, cyber criminals are usually technologically-aware and constantly adapting and developing new tools that allow them to stay ahead of law enforcement investigations. In order to provide adequate support for cybercrime investigators, there needs to be a better understanding of the challenges they face at both technical and socio-technical levels. In this paper, we investigate this problem through an analysis of current practices and workflows of investigators. We use interviews with experts from government and private sectors who investigate cybercrimes as our main data gathering process. From an analysis of the collected data, we identify several outstanding challenges faced by investigators. These pertain to practical, technical, and social issues such as systems availability, usability, and in computer-supported collaborative work. Importantly, we use our findings to highlight research areas where user-centric workflows and tools are desirable. We also define a set of recommendations that can aid in providing a better foundation for future research in the field and allow more effective combating of cybercrimes.
  @cite_28: Abstract The number of successful cyber attacks continues to increase, threatening financial and personal security worldwide. Cyber digital forensics is undergoing a paradigm shift in which evidence is frequently massive in size, demands live acquisition, and may be insufficient to convict a criminal residing in another legal jurisdiction. This paper presents the findings of the first broad needs analysis survey in cyber forensics in nearly a decade, aimed at obtaining an updated consensus of professional attitudes in order to optimize resource allocation and to prioritize problems and possible solutions more efficiently. Results from the 99 respondents gave compelling testimony that the following will be necessary in the future: (1) better education training certification (opportunities, standardization, and skill-sets); (2) support for cloud and mobile forensics; (3) backing for and improvement of open-source tools (4) research on encryption, malware, and trail obfuscation; (5) revised laws (specific, up-to-date, and which protect user privacy); (6) better communication, especially between with law enforcement (including establishing new frameworks to mitigate problematic communication); (7) more personnel and funding.
  @cite_10: This article discusses the challenges faced by law enforcement agencies when investigating cybercrime. The article presents the technical investigation roles necessary for cybercrime policing in a resource capability matrix. Adopting a standard resource capability framework across the wider law enforcement community will assist in the development of common policies and procedures, and will maximize the efficiency and effectiveness of cybercrime investigation in a shrinking global economy.
  @cite_8: 
summary: In an effort to understand the effects of technology on policing, the HMIC (Her Majesty's Inspectorate of Constabulary) @cite_8 published a report to study the current readiness of police services to effectively deal with cybercrimes and their victims. The main outcomes from the study were related to providing training, awareness, and guidance for all those involved with policing cybercrimes. In addition, they recommended raising the level of capabilities within law enforcement in digital forensics and examining digital devices. Another study by , @cite_10 focused on identifying different technical investigation roles needed for policing cybercrimes. These roles are technical enquirer, network investigator, forensic technician, digital forensic examiner and technical domain expert. They highlight that when complexity and risk of the cybercrime increase, the level of specialist technical skills and knowledge should also increase. Moreover, another study by , @cite_28 focused on identifying the needs of cyber forensic investigators. They conducted a survey of participants from different occupations including cyber forensic students, professors, law enforcement, and practitioners. The results from the survey suggest that participants indicated that the main needs include additional funding, advanced tools, better communication, and revised laws.