The Role of Digital Forensic Experts in Cybercrime Investigations in Indonesia Based on The Scopus Research Index

− The development of information technology, besides having a positive impact, has negative impacts, such as an increase in cybercrime. Several parties are involved in handling cybercrimes in Indonesia, including expert witnesses in digital forensics. It is hoped that cybercrimes can be uncovered through a digital forensic approach. Research related to cybercrime and Digital Forensics in Indonesia is experiencing increasing growth from 2010 to 2021. A very rapid increase was shown in 2017. Through bibliometric analysis, you can analyze exp ert witnesses in the field of digital forensics by region in Indonesia, such as Sumatera, Western Java, Central Java, and Eastern Java. An expert witness in digital forensics must have technical skills in operating digital forensic tools and analysis and academic skills in uncovering crimes. The results of this study are very useful for law enforcement officers or lawyers in determining expert witnesses in the field of digital forensics. List of digital forensic experts in Indonesia who have been tested from their scientific studies by conducting various paper publications. So, law enforcement can synergize with digital forensic experts to solve cybercrime. One of the roles of a digital forensic expert is as an expert witness in court. Through research, it is hoped that there will be an increase in awareness of digital forensic experts to conduct scientific publications so that it is easier to be recognized by law enforcement and academics for updating methods and techniques of cybercrime investigation.


INTRODUCTION
In 2016, the existence of electronic and/or digital evidence analyzed increased from year to year [1]. Electronic and/or digital evidence supports the resolution of various incidents or crimes involving technology and computers. Because of this, cybercrime is known as a form of cybercrime due to the development of information technology [2] [3]. Cybercrime is divided into two categories, namely computer crime and computer-related crime. In general, computer crime is when the perpetrator and victim a re entities of information technology products.
Meanwhile, computer-related crime is a conventional crime that utilizes information technology media [4]. In solving crime incidents, knowledge is needed. Digital forensics is a forensic science that extracts electronic and/or digital evidence to solve unusual problems, such as cybercrime, by referring to applicable provisions or laws [5]. According to ISO/IEC 27037:2012, the digital forensic process is divided into several stages, including Identification, Collection, Acquisition, and Preservation. Meanwhile, the next process in ISO/IEC 27042:2015 includes; analysis and interpretation. Based on these two standards, the digital forensic process that is carried out must be accountable to the applicable regulatory enforcement forum or court [6].
This description states that the forms of cybercrime, electronic and/or digital evidence, digital forensic stages, and courts are related. Research [7] states that digital forensic stages are applied to detect data theft at a coffee shop with electronic evidence in the form of a USB flash drive. Based on the digital forensic analysis carried out shows the potential for cybercrime to occur. Various sensitive data is found on the USB flash drive, including; data of username and password, customer credit card data, recipe data, vendor data, wholesale, and pornography content. The threat of crime is not only possible on secondary storage media but also on social media. In Indonesia, a threat that continues to increase in frequency with the growth of the internet from year to year is cyberbullying [8].
Cyberbullying crimes need to be watched out for. One of the potential reasons for increasing cyberbullying is the growth in internet use during the Covid-19 pandemic, which forced everyone to communicate via the internet [9]. Cyberbullying can occur on various platforms, such as social media, instant messaging, online games, and other media. A science-based digital forensic approach can detect communications containing cyberbullying [10] [11]. Research in [12] detects cyberbullying on the social media platform Instagram using the Naive Bayes Classifier. The stages of digital forensics in dealing with types of cybercrime can vary. This is because each incident has a unique pattern and action. Therefore, it is necessary to analyze the role of research on the digital forensic dimension in handling or investigating cybercrime in Indonesia to map digital forensic experts. This digital forensic expert plays a role in scientific studies, investigations, and evidence in court (expert witness).
Previous research analyzed digital forensic research in Indonesia using a bibliometric approach with Ga rba Reference Digital (Garuda), a portal for recording digital research references in Indonesia.

Identification of Data Sources
First, previous studies using the index database from the Garuda Portal still have several weaknesses. So, in this article, we use an index database from Scopus aligned with bibliometric analysis-based data management, such as VOSviewer. In addition, in conducting keyword searches, we have used mathematical logic AND-OR [14]. This article uses the mathematical logic of searching with the keywords "digital forensics" OR cybercrime. Meanwhile, in time-limited searches using AND, such as AFFILCOUNTRY,"Indonesia" AND SUBJAREA,"COMP". The search used in this article is the keyword "digital forensics", cybercrime, "forensic investigation", "computer crime", "computer-related crime", with restrictions on the country of Indonesia, research subjects in the field of engineerin g or computers, and a period

Screening -Data Extraction
Search results from the Scopus index database are stored in CSV format files. This is because the information exported to a CSV file has an arrangement of interrelated information , making it easier to perform analysis and visualization using VOSviewer and Bibliometric. In this article, the tools used to perform bibliometric analysis of the role of digital forensics in investigating cybercrime are VOSviewer and Bibliometrics. [15] [16].

Analysis
Analyzing digital forensics' role in handling cybercrimes in Indonesia based on the Scopus database research index requires an analysis of scientific publications on cybercrime and digital forensics. Thus, several variables must be considered when analyzing publications related to cybercrime and digital forensics. The use of bibliometric analysis tools, such as VOSviewer and Bibliometrics, can determine some of the simplest things, namely Annual Scientific Publications in the form of graphs of article growth from year to year to Networking Maps from researchers. The research flow starts from identifying the research topic until the analysis is in Figur 1.

RESULT AND DISCUSSION
The process of identifying research sources, as shown in Fig.1, obtained 281 articles. Based on 281 articles, screening needs to be done to ensure the relevance of cybercrime and digital forensics topics. Based on the screening results, eight articles were found that were irrelevant because they were related to the issue of medical forensics. The next step is to confirm the arrangement of the author's name. In Indonesia, several people have one name arrangement, for example, Sunardi and Fazlurrahman [17]. Therefore, the arrangement of the author's name must be adjusted to the format of the first and last names. So, for authors with one name arrangement for the last name part, it is replaced with a dot (.). Based on the results of the screening, 273 articles were ready to be analyzed, 60 articles in the form of papers, one book chapter, and 212 conference papers. The articles collected are not only written by one author but are more dominant in joint publications. In the composition of article writing, there are 666 authors collaboratively and three independently.

Publication Trends
The trend of publishing papers on cybercrime and digital forensics in the 2010 -2021 period shows an increase from year to year. This means that more and more researchers are evaluating and researching cybercrimes through scientific publications globally, namely by Scopus indexing. The period of 2013 -2016 shows promising growth in scientific publications. Only starting in 2017-2021, scientific publications related to cybercrime and digital forensics experienced a very high increase, with an average of 44 articles. This trend can be regarded as the annual scientific production of cybercrime and digital forensics, see Fig. 2.

Figur 2. Annual Scientific Production
The increase in global research certainly affects other things, such as the citation of article s by other countries. This is because Scopus indexing is a worldwide indexing level that makes it easier for the popularity of articles published by researchers in Indonesia to be known abroad. The country with the highest citation of articles by Indonesia n writers is the United Kingdom, with 68 citations of articles. Meanwhile, Finland's country has the lowest citation of articles by Indonesian researchers, with 7 citations. However, the average citation from Finland is higher than the USA, which is only 5.50, see Table 1. One method to determine the trend of a scientific article can be selected using the frequency of occurrence of words from a keyword and abstract. This article presents the frequency of occurrence of words in keywords or abstracts using wordcloud visualization. Especially for analyzing the occurrence of words from the abstract using bigram weighting, namely processing documents in classification with the results of two -word terms [18]. Keyword analysis and abstract use stopwords as a pre-processing stage in text mining. The stopword form is a dictionary containing words that will not be processed [19].
In this article, stopword is modified by adding search keywords in Scopus such as computer crime, computerrelated crime, digital forensics, cybercrime, forensic investigation, and Indonesia. A keyword analysis is sourced from Keyword Plus, a combination of Author Keywords and Keyword Index. Then the study results with the presentation of wordcloud can be seen in Fig. 3. This shows that cybercrimes analyzed by researchers in Indonesia occur on the side of computer systems and networks. The intrusion detection systems method combines several machine learning and artificial intelligence approaches to carry out digital forensic investigations on the system and com puter network side [20].

Analysis of Institutions
273 articles have been screened including 84 institutions contributing to cybercrime investigations and digital forensic analysis. Of the 84 institutions, 27 institutions come from abroad. This is because when conducting research, several researchers from Indonesia collaborated with researchers from other countries. The 57 institutions in Indonesia that are most productive in conducting scientific publications related to digital forensics in investigating cybercrime are the University of Indonesia and the Sepuluh Nopember Institute of Technology, with a total of 19 articles published. The results are shown in Table 2.

Analysis of Authorship Patterns
Based on 273 articles, 468 authors contributed to cybercrime investigations with a digital forensics approach. In the Author Local Impact analysis, 5 authors are productive in conducting research with an H -Index indicator > 5; see T.
Based on the 5 productive writers of researchers there are researchers from Malaysia, Abdul Hanan Abdullah. Institution from Abdul Hanan Abdullah from Universiti Teknologi Malaysia. Abdul Hanan Abdullah's involvement in research in Indonesia was due to his collaboration with Deris Stiawan from Sriwijaya University. Based on Table  3, the distribution of experts who researched cybercrime investigations and/or digital forensics in Java Island is fairly even; Kalamullah Ramli can represent the western part from the University of Ind onesia and Imam Riadi from Ahmad Dahlan University can represent Central Java. In contrast, Tohari Ahmad from the Sepuluh Nopember Institute of Technology represents the eastern part of Java. Especially for the Sumatra region, Deris Stiawan from Sriwijaya University can be represented. Imam Riadi dominates the network in conducting research with a Total Link Strength of 22 from the emergence of 1 article document and links with other researchers. Imam Riadi's research network is vital due to the collaboration in writing articles related to cybercrime and digital forensics, see Fig. 5. Although listed as a lecturer at Ahmad Dahlan University, Imam Riadi also teaches and conducts research with master's students at the Islamic University of Cybercrime still needs to be watched out for. Therefore, we need experts who can uncover it with a digital forensics approach. Although it is still a new branch of forensic science, based on the Scopus research index, digital forensics has a role in uncovering cybercrimes that are increasing yearly. Cybercrime is growing because the impact of technological developments needs to be considered from several angles before, during, and after the incident. The bibliometric analysis approach in analyzing the role of digital forensics in handling cybercrime is beneficial for law enforcement officials in collaboration with digital forensic experts in Indonesia.
In the 2010-2021 period, many articles written by digital forensics experts were cited by researchers from abroad. This shows that theoretically and practically, the development of forensic science in Indonesia has become a global concern. The distribution of digital forensic experts in Indonesia is quite good based on institutions and researchers. Even though researchers in Yogyakarta have yet to look productive, every institution still has much potential for networking and collaboration. This is shown by the research network conducted by Imam Riadi from Ahmad Dahlan University.

CONCLUSION
Expert Witnesses can be digital forensic practitioners with competency certification, an academic whose scientific focus is proven by publications, or even both. Mapping of experts in the field of digital forensics in Indonesia in handling cybercrimes using a bibliometric analysis approach. Based on this rese arch, we obtained a list of digital forensic experts in Indonesia who have been tested from their scientific studies by conducting many paper publications. Law enforcers can work with digital forensic experts to solve various cybercrime crimes. These digit al forensic experts are spread across various institutions and regions, including; Universitas Sriwijaya (Sumatra), Universitas Indonesia (western part of Java), Universitas Ahmad Dahlan (central part of Java), Institut Teknologi Sepuluh Nopember (eastern part of Java). Central Java region has great potential because it has a fairly strong network of researchers. Meanwhile, there are still limited digital forensic experts in Kalimantan, Sulawesi, Bali -Nusa Tenggara, Maluku -Ambon, and Papua. Through this research, there will be an increase in the awareness of digital forensic experts to carry out scientific publications so that they are more easily recognized by law enforcement and academics. Become a trigger for other digital forensic experts, so there is an even distribution of digital forensic experts in various regions in Indonesia. The existence of publications from digital forensic experts is also expected to have a positive impact on updating cybercrime investigation methods and techniques.