Copy the page URI to the clipboard
Pasquale, Liliana; Yu, Yijun; Salehie, Mazeiar; Cavallaro, Luca; Tun, Thein Than and Nuseibeh, Bashar
(2013).
DOI: https://doi.org/10.1109/re.2013.6636745
Abstract
A digital forensics process aims to collect and analyze the evidence essential to demonstrate a potential hypothesis of a crime. We propose the use of forensic requirements to automate a digital forensics process. We augment traditional reactive digital forensics processes - used to perform an investigation - with proactive evidence collection and analysis activities, which provide immediate investigative suggestions before an investigation starts. These activities dynamically adapt depending on suspicious events, which in turn might require the collection and analysis of additional evidence. The reactive activities of a traditional digital forensics process are also adapted depending on the current investigation findings.