Requirements-driven adaptive digital forensics

Pasquale, Liliana; Yu, Yijun; Salehie, Mazeiar; Cavallaro, Luca; Tun, Thein Than and Nuseibeh, Bashar (2013). Requirements-driven adaptive digital forensics. In: 21st IEEE Requirements Engineering Conference, 15-19 Jul 2013, Rio de Janeiro, Brazil.


A digital forensics process aims to collect and analyze the evidence essential to demonstrate a potential hypothesis of a crime. We propose the use of forensic requirements to automate a digital forensics process. We augment traditional reactive digital forensics processes - used to perform an investigation - with proactive evidence collection and analysis activities, which provide immediate investigative suggestions before an investigation starts. These activities dynamically adapt depending on suspicious events, which in turn might require the collection and analysis of additional evidence. The reactive activities of a traditional digital forensics process are also adapted depending on the current investigation findings.

Viewing alternatives

Download history

Item Actions