Pasquale, Liliana; Yu, Yijun; Salehie, Mazeiar; Cavallaro, Luca; Tun, Thein Than and Nuseibeh, Bashar
(2013).
|
PDF (Accepted Manuscript)
- Requires a PDF viewer such as GSview, Xpdf or Adobe Acrobat Reader
Download (980kB) | Preview |
| Google Scholar: | Look up in Google Scholar |
|---|
Abstract
A digital forensics process aims to collect and analyze the evidence essential to demonstrate a potential hypothesis of a crime. We propose the use of forensic requirements to automate a digital forensics process. We augment traditional reactive digital forensics processes - used to perform an investigation - with proactive evidence collection and analysis activities, which provide immediate investigative suggestions before an investigation starts. These activities dynamically adapt depending on suspicious events, which in turn might require the collection and analysis of additional evidence. The reactive activities of a traditional digital forensics process are also adapted depending on the current investigation findings.
| Item Type: | Conference or Workshop Item | ||||||
|---|---|---|---|---|---|---|---|
| Copyright Holders: | 2013 IEEE | ||||||
| Project Funding Details: |
|
||||||
| Academic Unit/School: | Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications Faculty of Science, Technology, Engineering and Mathematics (STEM) |
||||||
| Research Group: | Centre for Research in Computing (CRC) | ||||||
| Related URLs: | |||||||
| Item ID: | 37975 | ||||||
| Depositing User: | Yijun Yu | ||||||
| Date Deposited: | 09 Jul 2013 08:22 | ||||||
| Last Modified: | 21 May 2018 18:24 | ||||||
| URI: | http://oro.open.ac.uk/id/eprint/37975 | ||||||
| Share this page: |     |
Download history for this item
These details should be considered as only a guide to the number of downloads performed manually. Algorithmic methods have been applied in an attempt to remove automated downloads from the displayed statistics but no guarantee can be made as to the accuracy of the figures.
CORE (COnnecting REpositories)
CORE (COnnecting REpositories)