Information security and digital forensics in the world of cyber physical systems

Jones, Andrew; Vidalis, Stilianos; Abouzakhar, Nasser

doi:10.1109/icdim.2016.7829795

Cited by 8 publications

(5 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…CPS applications are being and will be implemented and deployed in many areas in our lives. Current CPS forensic techniques are mostly still in the research and evaluation stages (e.g., the overview in [96]), while most forensics work is being done using tools and techniques created for other types of distributed systems, such as cloud computing and enterprise systems. Furthermore, tools and techniques addressing both the cyber and physical parts of the CPS have not been introduced, although discussed on some occasions.…”

Section: Future Cps Forensics Directionsmentioning

confidence: 99%

Cyber–Physical Systems Forensics: Today and Tomorrow

Mohamed

Al-Jaroodi

Jawhar

2020

JSAN

View full text Add to dashboard Cite

Cyber–Physical Systems (CPS) connect the physical world (systems, environments, and humans) with the cyber world (software, data, etc.) to intelligently enhance the operational environment they serve. CPS are distributed software and hardware components embedded in the physical world and possibly attached to humans. They offer smart features, such as enhancing and optimizing the reliability, quality, safety, health, security, efficiency, operational costs, sustainability, and maintainability of physical systems. CPS are also very vulnerable to security attacks and criminal activities. In addition, they are very complex and have a direct impact on their environment. Therefore, it is hard to detect and investigate security attacks, while such attacks may have a catastrophic impact on the physical world. As a result, CPS must incorporate security measures in addition to suitable and effective forensics capabilities. When the security measures fail and an attack occurs, it becomes imperative to perform thorough forensics analysis. Adding effective forensics tools and capabilities will support the investigations of incidents. This paper defines the field of CPS forensics and its dimensions: Technical, Organizational, and Legal. Then, it reviews examples of current research efforts in the field and the types of tools and methods they propose for CPS forensics. In addition, it discusses the issues and challenges in the field that need to be addressed by researchers and developers of CPS. The paper then uses the review outcomes to discuss future research directions to address challenges and create a more effective, efficient, and safe forensics tools and for CPS. This discussion aims to create a starting point for researchers where they can identify the gaps and challenges and create suitable solutions through their research in CPS forensics.

show abstract

Section: Future Cps Forensics Directionsmentioning

confidence: 99%

Cyber–Physical Systems Forensics: Today and Tomorrow

Mohamed

Al-Jaroodi

Jawhar

2020

JSAN

View full text Add to dashboard Cite

show abstract

“…This is where a final report (document) from previous stages is now taken to relevant officials to determine if it admissible to be used in court. It is actually a summary of all findings in each stages from different parties involved in an investigation [6][10] [11].…”

Section: Investigation Steps In Forensicsmentioning

confidence: 99%

“…Also to ensure the collected evidence information is made admissible to be used in court. The paper will generalize on the world of forensics and how it all works [4][5] [6].…”

Section: Introductionmentioning

confidence: 99%

A Study on Cyber and Network Forensic in Computer Security Management

Phuthologo¹,

Doss²

2017

International Journal of Innovative Research in Applied Sciences and Engineering

View full text Add to dashboard Cite

Cybercrime has become more popular in the World of internet. The paper here will outline more on cyber and network forensics. There is lot of crime related cases nowadays that needs digital or electronic proof as a form of evidence. For evidence to be presented, certain procedures need to be followed from the collection of data to keeping it safe for the evidence time in a particular case. This paper shall try summarizes information relevant to security and cyber Forensics in general and how those cases are solved.

show abstract

“…Whether or not the collection of forensic data supports criminal investigation or enables protecting exposed vulnerabilities, many cyber incidents and crimes are not reported because, among other reasons beyond the difficulty, there is a belief that there is little chance of successful prosecution and even fear of negative publicity (Quick & Choo, 2016). Despite these factors, most consumer-level computing technology has increasingly asked its users to trust that technology will "function correctly and that information that [consumers] provide, or that is collected about them, will be adequately protected" (Centre & Jones, 2016) for a variety of daily uses (e.g., IoT devices, Google, Facebook, Instagram, Etc.). Unfortunately, this trust benefits the criminals given that a "majority of the people in modern societies are not particularly concerned about their data as long as they can happily and securely use technologies and commercial products to [enhance] their social lives" (Centre & Jones, 2016) and this mind-set shows no sign of changing any time soon.…”

Section: Introductionmentioning

confidence: 99%

“…Despite these factors, most consumer-level computing technology has increasingly asked its users to trust that technology will "function correctly and that information that [consumers] provide, or that is collected about them, will be adequately protected" (Centre & Jones, 2016) for a variety of daily uses (e.g., IoT devices, Google, Facebook, Instagram, Etc.). Unfortunately, this trust benefits the criminals given that a "majority of the people in modern societies are not particularly concerned about their data as long as they can happily and securely use technologies and commercial products to [enhance] their social lives" (Centre & Jones, 2016) and this mind-set shows no sign of changing any time soon.…”

Section: Introductionmentioning

confidence: 99%

Industrial IoT cross‐layer forensic investigation

Rondeau

Temple

López

2018

WIREs Forensic Science

View full text Add to dashboard Cite

Cross-layer forensic investigation is addressed for Industrial Internet of Things (IIoT) device attacks in Critical Infrastructure (CI) applications. The operational motivation for cross-layer investigation is provided by the desire to directly correlate bit-level network anomaly detection with physical layer (PHY) device connectivity and/or status (normal, defective, attacked, etc.) at the time of attack. The technical motivation for developing cross-layer techniques is motivated by (a) having considerable capability in place for Higher-Layer Digital Forensic Information exploitation-real-time network cyberattack and postattack analysis, (b) having considerably less capability in place for Lowest-Layer PHY Forensic Information exploitation-the PHY domain remains largely under exploited, and (c) considering cyber-physical integration as a means to jointly exploit higher-layer digital and lowest-layer PHY forensic information to maximize investigative benefit in IIoT cyber forensics. A delineation of higher-layer digital and lowest-layer PHY elements is provided for the standard network Open Systems Interconnection model and the specific Perdue Enterprise Reference Architecture commonly used in IIoT Industrial Control System/Supervisory Control and Data Acquisition applications. A forensics work summary is provided for each delineated area based on selected representative publications and provides the basis for presenting the envisioned cross-layer forensic investigation.

show abstract

Information security and digital forensics in the world of cyber physical systems

Cited by 8 publications

References 6 publications

Cyber–Physical Systems Forensics: Today and Tomorrow

Cyber–Physical Systems Forensics: Today and Tomorrow

A Study on Cyber and Network Forensic in Computer Security Management

Industrial IoT cross‐layer forensic investigation

Contact Info

Product

Resources

About