The Open UniversitySkip to content
 

Use of organisational topologies for forensic investigations

Grispos, George; Hanvey, Sorren and Nuseibeh, Bashar (2017). Use of organisational topologies for forensic investigations. In: Proceedings of the 1st ACM SIGSOFT International Workshop on Software Engineering and Digital Forensics - SERF 2017, ACM Press pp. 2–5.

DOI (Digital Object Identifier) Link: https://doi.org/10.1145/3121252.3121253
Google Scholar: Look up in Google Scholar

Abstract

In today's highly regulated business environment, it is becoming increasingly important that organisations implement forensic-ready systems and architectures to aid the investigation of security incidents and data breaches. Previously, different solutions have been proposed for implementing forensic readiness within organisations. One of these solutions is that organisations implement an organisational structure that takes into consideration digital forensics by establishing roles and responsibilities to assist with investigations. However, no previous research has defined how this can actually be accomplished within an organisation. In this paper, we put forth the idea of using the topology of an organisation's structure to define the roles and responsibilities to assist with handling a forensic investigation. In the past, the role of topology has been examined from various perspectives, including software engineering. We draw on this previous research and use the topological properties of containment, proximity and reachability in order to define a representation of the organisational structure that takes into consideration digital forensics. For example, topology can be used to express and provide a context regarding the location of assets that need to be investigated, as well as the individuals, whose assistance is required to investigate such assets. Furthermore, knowing the topology of an organisation's structure can also assist investigators identify stakeholders that could be of interest to an investigation, based on their relationship to the asset(s) under investigation.

Item Type: Conference or Workshop Item
ISBN: 1-4503-5156-5, 978-1-4503-5156-0
Academic Unit/School: Faculty of Science, Technology, Engineering and Mathematics (STEM) > Computing and Communications
Faculty of Science, Technology, Engineering and Mathematics (STEM)
Related URLs:
Item ID: 67229
SWORD Depositor: Jisc Publications-Router
Depositing User: Jisc Publications-Router
Date Deposited: 11 Oct 2019 08:16
Last Modified: 11 Oct 2019 08:31
URI: http://oro.open.ac.uk/id/eprint/67229
Share this page:

Metrics

Altmetrics from Altmetric

Citations from Dimensions

Actions (login may be required)

Policies | Disclaimer

© The Open University   contact the OU