Privacy preserving efficient digital forensic investigation framework

Gupta, A.

doi:10.1109/ic3.2013.6612225

Cited by 13 publications

(8 citation statements)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the literature, there are three privacy-aware DF frameworks. First, Gupta [46] proposed a framework called a Privacy Preserving Efficient Digital Forensic Framework Investigation (PPEDFI). The author relied only on the selective imaging concept discussed here early.…”

Section: Privacy-aware Digital Forensics Frameworkmentioning

confidence: 99%

Computer Forensics Framework for Efficient and Lawful Privacy-Preserved Investigation

Halboob¹,

Al‐Muhtadi²

2023

Computer Systems Science and Engineering

View full text Add to dashboard Cite

Privacy preservation (PP) in Digital forensics (DF) is a conflicted and non-trivial issue. Existing solutions use the searchable encryption concept and, as a result, are not efficient and support only a keyword search. Moreover, the collected forensic data cannot be analyzed using existing well-known digital tools. This research paper first investigates the lawful requirements for PP in DF based on the organization for economic co-operation and development OECB) privacy guidelines. To have an efficient investigation process and meet the increased volume of data, the presented framework is designed based on the selective imaging concept and advanced encryption standard (AES). The proposed framework has two main modules, namely Selective Imaging Module (SIM) and Selective Analysis Module (SAM). The SIM and SAM modules are implemented based on advanced forensic format 4 (AFF4) and SleuthKit open source forensics frameworks, respectively, and, accordingly, the proposed framework is evaluated in a forensically sound manner. The evaluation result is compared with other relevant works and, as a result, the proposed solution provides a privacy-preserving, efficient forensic imaging and analysis process while having also sufficient methods. Moreover, the AFF4 forensic image, produced by the SIM module, can be analyzed not only by SAM, but also by other well-known analysis tools available on the market.

show abstract

Section: Privacy-aware Digital Forensics Frameworkmentioning

confidence: 99%

Computer Forensics Framework for Efficient and Lawful Privacy-Preserved Investigation

Halboob¹,

Al‐Muhtadi²

2023

Computer Systems Science and Engineering

View full text Add to dashboard Cite

show abstract

“…Nonetheless, there are very few publications addressing the issue, and each of them targets only a particular subject. 10 Earlier, Gupta 11 has performed research on safeguarding privacy in the process of digital investigation. A research paper published by Law et al 12 addressed the issue of protecting or preserving private data during a forensic investigation.…”

Section: Related Workmentioning

confidence: 99%

Privacy preserving mobile forensic framework using role‐based access control and cryptography

Hyder

Arshad

Arfeen

et al. 2022

Concurrency and Computation

View full text Add to dashboard Cite

Summary The rise of social media‐related crimes has led to the rise of mobile forensics. Since mobile forensics and privacy preservation are conflicting fields, it is important to find a middle ground where forensics can be performed on any device without compromising the confidentiality of an individual. This paper presents a framework called “role‐based mobile forensics framework with cryptography (RBMF2C)” that can be easily implemented and protects users' privacy and does not interfere with the forensic process. A mobile forensic platform called Sher‐locked phones developed using C# is also presented in this paper that is developed following the aforementioned RBMF2C framework. This platform consists of five layers: access control, evidence gathering, data analysis, privacy, and reporting layer. The developed platform implements the RBMF2C framework on the evidence gathering, analysis, and reporting layer to protect the evidential image, evidential findings, and final report from being accessed by unauthorized users. The implementation of privacy preservation techniques as proposed by the proposed framework such as role‐based access control, keyword search, and encryption/ decryption did not hinder the performance of the developed toolkit, and suspects data privacy is also preserved to a substantial extent.

show abstract

“…However, their solution lacked the ability to identify malicious data from non-malicious data [226]. In [227], Gupta presented a a framework called "Privacy Preserving Efficient Digital Forensics" (PPEDF) to ensure an automated investigation through the reduction of the amount of data being analyzed. In fact, PPEDF is compatible with the Encase Version 7.0, with a 100% accuracy when extracting evidence files.…”

Section: Anti-forensics Prevention Techniquesmentioning

confidence: 99%

Digital Forensics vs. Anti-Digital Forensics: Techniques, Limitations and Recommendations

Yaacoub,

Noura,

Salman

et al. 2021

Preprint

View full text Add to dashboard Cite

The number of cyber attacks has increased tremendously in the last few years. This resulted into both human and financial losses at the individual and organization levels. Recently, cyber-criminals are leveraging new skills and capabilities by employing anti-forensics activities, techniques and tools to cover their tracks and evade any possible detection. Consequently, cyber-attacks are becoming more efficient and more sophisticated. Therefore, traditional cryptographic and non-cryptographic solutions and access control systems are no longer enough to prevent such cyber attacks, especially in terms of acquiring evidence for attack investigation. Hence, the need for well-defined, sophisticated, and advanced forensics investigation tools are highly required to track down cyber criminals and to reduce the number of cyber crimes. This paper reviews the different forensics and anti-forensics methods, tools, techniques, types, and challenges, while also discussing the rise of the anti-anti-forensics as a new forensics protection mechanism against anti-forensics activities. This would help forensics investigators to better understand the different anti-forensics tools, methods and techniques that cyber criminals employ while launching their attacks. Moreover, the limitations of the current forensics techniques are discussed, especially in terms of issues and challenges. Finally, this paper presents a holistic view from a literature point of view over the forensics domain and also helps other fellow colleagues in their quest to further understand the digital forensics domain.

show abstract

Privacy preserving efficient digital forensic investigation framework

Cited by 13 publications

References 3 publications

Computer Forensics Framework for Efficient and Lawful Privacy-Preserved Investigation

Computer Forensics Framework for Efficient and Lawful Privacy-Preserved Investigation

Privacy preserving mobile forensic framework using role‐based access control and cryptography

Digital Forensics vs. Anti-Digital Forensics: Techniques, Limitations and Recommendations

Contact Info

Product

Resources

About