Efficiency of network event logs as admissible digital evidence

Al-Mahrouqi, Aadil; Abdalla, Sameh; Kechadi, Tahar

doi:10.1109/sai.2015.7237305

Cited by 5 publications

(8 citation statements)

References 15 publications

(10 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The authors [8] performed an in-depth survey for events admissibility in the Irish court of law. Overall, the legal review is mainly focused on different primary areas: the admissibility and authentication of digital evidence and focuses mainly on Irish law.…”

Section: Previous Workmentioning

confidence: 99%

“…The authors purposed a new network forensics model [8] that can makes network events admissible in the court of law. The present model collects available logs from connected network devices, applies decision tree algorithm in order to filter anomaly intrusion, then re-route the logs to a central repository where events management functions are applied.…”

Section: A Simulating Sql-injection Cyber-attack Using Gns3mentioning

confidence: 99%

See 1 more Smart Citation

Cyberspace Forensics Readiness and Security Awareness Model

Al-Mahrouqi¹,

Abdalla²,

Kechadi³

2015

ijacsa

Self Cite

View full text Add to dashboard Cite

Abstract-The goal of reaching a high level of security in wire-less and wired communication networks is continuously proving difficult to achieve. The speed at which both keepers and violators of secure networks are evolving is relatively close. Nowadays, network infrastructures contain a large number of event logs captured by Firewalls and Domain Controllers (DCs). However, these logs are increasingly becoming an obstacle for network administrators in analyzing networks for malicious activities. Forensic investigators mission to detect malicious activities and reconstruct incident scenarios is extremely complex considering the number, as well as the quality of these event logs. This paper presents the building blocks for a model for automated network readiness and awareness. The idea for this model is to utilize the current network security outputs to construct forensically comprehensive evidence. The proposed model covers the three vital phases of the cybercrime management chain, which are: 1) Forensics Readiness, 2) Active Forensics, and 3) Forensics Awareness.

show abstract

Section: Previous Workmentioning

confidence: 99%

Section: A Simulating Sql-injection Cyber-attack Using Gns3mentioning

confidence: 99%

Cyberspace Forensics Readiness and Security Awareness Model

Al-Mahrouqi¹,

Abdalla²,

Kechadi³

2015

ijacsa

Self Cite

View full text Add to dashboard Cite

show abstract

“…An in-depth survey for events admissibility in the Irish court of law is carried out in [34]. Overall, the legal review is mainly focused on different primary areas: the admissibility and authentication of digital evidence and focuses mainly on Irish law.…”

Section: Decriminalising Anonymous and Pseudonymousmentioning

confidence: 99%

“…The authors also presented an investigation learning methodology based on the proposed case study presented in [34]. The learning methodology consists into stages, stage one is build a network topology of the proposed case study and stage two is to create a network union matrix.…”

Section: Decriminalising Anonymous and Pseudonymousmentioning

confidence: 99%

“…Based on this case study the authors proposed a new network forensics model [34] that can makes network events admissible in the court of law. The proposed model presented used to collect available logs from connected network devices, applies decision tree algorithm in order to filter anomaly intrusion, then re-route the logs to a central repository where events management functions are applied.…”

Section: Decriminalising Anonymous and Pseudonymousmentioning

confidence: 99%

See 1 more Smart Citation

Cyberspace Challenges and Law Limitations

Al-Mahrouqi¹,

Cianain²,

Kechadi³

2015

ijacsa

Self Cite

View full text Add to dashboard Cite

Abstract-Privacy and Data security are heating topic in the modern technologically advanced economy. Technological Innovations have created new forms of electronic data which are more vulnerable to theft or loss when compared to traditional data storage. Moreover, the recent advances in internet technologies have exacerbated the risk of security threats. The Internet brings a whole new set of challenges in terms of data protection. Considering the complexities of modern technological advancements and its impact on data security, this study examines the Irish laws and EU directives for privacy and data security, its effectiveness in managing large scale data breaches and limitations. This paper also simulates attack scenarios that can be done by anonymous users in a complex cyberspace environment and explains how a digital evidence related to the attack scenario can be tracked down.

show abstract

A network attack forensic platform against HTTP evasive behavior

Pan

Liu

et al. 2016

J Supercomput

View full text Add to dashboard Cite

Efficiency of network event logs as admissible digital evidence

Cited by 5 publications

References 15 publications

Cyberspace Forensics Readiness and Security Awareness Model

Cyberspace Forensics Readiness and Security Awareness Model

Cyberspace Challenges and Law Limitations

A network attack forensic platform against HTTP evasive behavior

Contact Info

Product

Resources

About