FORZA – Digital forensics investigation framework that incorporate legal issues

Ieong, Ricci S. C.

doi:10.1016/j.diin.2006.06.004

Cited by 128 publications

(70 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Digital forensics is often defined from a selective perspective of the person involved in an investigation [54]. This section lists and discusses a couple of important definitions generally accepted in the literature.…”

Section: Digital Forensicsmentioning

confidence: 99%

“…The answer here may be as simple as that the picture was found on the computer in the file format of a .jpeg file, therefore the camera is somehow connected to the computer the picture was found on. What evidence is found should not be confused with how the evidence was found [54]. Chapter 4 deals extensively with the question of how evidence was found in an investigation.…”

mentioning

confidence: 99%

“…Ioeng and Cohen emphasise the need to establish factual information as the outcome of an investigation [54,26].…”

mentioning

confidence: 99%

“…A digital forensic investigation is the process to determine and relate extracted information and digital evidence to establish factual information for judicial review [54].…”

mentioning

confidence: 99%

“…what, why, how, who, where and when [54, 9]. The what is determined by the data attributes or metadata; why refers to the motivation; how is the procedure followed to initiate the incident or isolate the necessary evidence; who are the people involved;…”

mentioning

confidence: 99%

See 4 more Smart Citations

Integrated digital forensic process model

Köhn¹,

Eloff²,

Eloff³

2013

Computers & Security

124

View full text Add to dashboard Cite

The Information and Communications Technology (ICT) environment constitutes an integral part of our daily lives. Individual computer users and large corporate companies are increasingly dependent on services provided by ICT. These services range from basic communication to managing large databases with corporate client information. Within these ICT environments something is bound to go wrong for a number of reasons, which include an intentional attack on information services provided by an organisation. These organisations have in turn become interested in tracing the root cause of such an incident with the intent of successfully prosecuting a suspected malicious user.Digital forensics has developed significantly towards prosecuting such criminals. The volumes of information and rapid technological developments have contributed to making simple investigations rather cumbersome. In the digital forensics community a number of digital forensic process models have been proposed encapsulating a complete methodology for an investigation. Software developers have also greatly contributed toward the development of digital forensics tools. These developments have resulted in divergent views on digital forensic investigations. This dissertation presents the IDFPM -Integrated Digital Forensic Process Model.The model is presented after examining digital forensic process models within the current academic and law enforcement literature. An adapted sequential logic notation is used to represent the forensic models. The terminology used in the various models is examined and standardised to suit the IDFPM. Finally, a prototype supports a limited selection of the IDFPM processes, which will aid a digital forensic investigator. There are a great many things about architecture that are hidden from the untrained eye.-Frank Gehry Acknowledgements• Thank you God for giving me the strength, wisdom, endurance and the patience to do this, despite the constant challenges.• I would like to thank my mother and father, Gary and Magsie, for their constant support, love and encouragement. Thank you for always listening and giving much needed advice. I would also like to thank my brothers Jonathan and Alexander, and sister Vanessa for their enthusiasm. None of this would have been possible without your support.• Thank you Prof Jan Eloff who has insisted that I complete this milestone in my life.Thank you for pushing me through the difficult times with your knowledge and experience. Thank you Prof Mariki Eloff for your soft and kind words that inspired me to see this through. You have both become great friends in this journey.• Thank you Prof Kourie, Prof Olivier, Prof Venter and Prof Carsten for listening when I asked questions, guiding me toward possible answers. Your help is highly appreciated.• My friends and colleagues in the ICSA lab over the past number of years. Thank you Emmanuel Adigun, Kamil Reddy, Maciej Rossudowski, Marco Slaviero, NeilCroft, Johann Fourie, Francois Mouton, Pedro de Souza and Waldo Delport. You have all tau...

show abstract

Section: Digital Forensicsmentioning

confidence: 99%

mentioning

confidence: 99%

“…Ioeng and Cohen emphasise the need to establish factual information as the outcome of an investigation [54,26].…”

mentioning

confidence: 99%

“…A digital forensic investigation is the process to determine and relate extracted information and digital evidence to establish factual information for judicial review [54].…”

mentioning

confidence: 99%

mentioning

confidence: 99%

See 3 more Smart Citations

Integrated digital forensic process model

Köhn¹,

Eloff²,

Eloff³

2013

Computers & Security

124

View full text Add to dashboard Cite

show abstract

Advanced Forensic Models

Sharma

Rao

2020

Technology in Forensic Science

View full text Add to dashboard Cite

Hadoop‐based analytic framework for cyber forensics

Chhabra

Singh

2018

Int J Communication

View full text Add to dashboard Cite

With an exponential increase in the data size and complexity of various documents to be investigated, existing methods of network forensics are found not much efficient with respect to accuracy and detection ratio. The existing techniques for network forensic analysis exhibit inherent limitations while processing a huge volume, variety, and velocity of data. It makes network forensic a time-consuming and resource-consuming task. To balance time taken and output delivered, these existing techniques put a limit on the amount of data under analysis, which results in a polynomial time complexity of these solutions. So to mitigate these issues, in this paper, we propose an effective framework to overcome the limitation to handle large volume, variety, and velocity of data. An architectural setup that consists of MapReduce framework on top of Hadoop Distributed File System environment is proposed in this paper. The proposed framework demonstrates its capability to handle issues of storage and processing of big data using cloud computing. Also, in the proposed framework, supervised machine learning (random forest-based decision tree) algorithm has been implemented to demonstrate better sensitivity. To train and validate the model, online available data set from CAIDA is taken and university network traffic samples, with increasing size, has been taken for experiment. Results thus obtained confirm the superiority of the proposed framework in network forensics, with an average accuracy of 99.34% (malicious and nonmalicious traffic).

show abstract

FORZA – Digital forensics investigation framework that incorporate legal issues

Cited by 128 publications

References 3 publications

Integrated digital forensic process model

Integrated digital forensic process model

Advanced Forensic Models

Hadoop‐based analytic framework for cyber forensics

Contact Info

Product

Resources

About