Traceability in digital forensic investigation process

Selamat, Siti Rahayu; Yusof, Robiah; Sahib, Shahrin; Hassan, Nor Hafeizah; Abdollah, Mohd Faizal; Abidin, Zaheera Zainal

doi:10.1109/icos.2011.6079259

Cited by 14 publications

(16 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the area of digital forensics, hundreds of process models have been proposed all over the world. This review will only contain thirteen published papers that represent the Digital Forensics Investigation Framework with their respective processes or activities since 2007, as there are some review papers which already discussed and categorized models proposed from 1995 through 2007; reviews such as Selamat and Yusof (2008) which addressed thirteen digital forensic process models or Pollitt (2007) which presented a brief introduction of fourteen published papers from 1995 to 2006 all on development of digital forensic models.…”

Section: Methodsmentioning

confidence: 99%

A Review on Mobile Device\'s Digital Forensic Process Models

Farjamfar¹,

Abdullah²,

Mahmod³

et al. 2014

RJASET

View full text Add to dashboard Cite

The main purpose of this study is to discuss the different comparative studies on digital forensics process models specially in the field of mobile devices. In order to legally pursue digital criminals, investigation should be conducted in a forensically sound manner so that the acquired evidence would be accepted in the court of law. Digital forensic process models define the important steps that should be followed to assure the investigation is performed successfully. There are a number of digital forensic process models developed by various organizations worldwide, but yet, there is no agreement among forensics investigation and legislative delegation which procedures to adhere to; specially in the case of facing mobile devices with latest technologies. This is vital, as mobile phones and other mobile devices such as PDAs or tablets are becoming ever-present as the main technology platform around the world and people are obtaining and using mobile phones more than ever. In this study we will give a review of the proposed digital forensics process models within last 7 years and to discuss the need for a consensus to follow the same underlying approaches while continually updating digital forensics process models to cover new emerging technologies and devices.

show abstract

Section: Methodsmentioning

confidence: 99%

A Review on Mobile Device\'s Digital Forensic Process Models

Farjamfar¹,

Abdullah²,

Mahmod³

et al. 2014

RJASET

View full text Add to dashboard Cite

show abstract

“…The metamodeling approach is an iteration process used to construct a high-level model to organize and structure the diverse domains (Al-Dhaqm et al, 2017a;2020c). In the first step, authors identify and select the relevant ISP models based on the coverage criteria adapted from (Al-Dhaqm et al, 2017b) and then extract and merge the common concepts and processes from the selected models based on the semantic similarities (Selamat et al, 2008). Table 2 displays the identified and selected ISP models as well as the extracted concepts.…”

Section: Figmentioning

confidence: 99%

Integrated Information Security Policy Model for Saudi Arabia Organizations

Ghaban¹

2023

Journal of Computer Science

View full text Add to dashboard Cite

Information Security Policy (ISP) is an important domain used to preserve the confidentiality, integrity, and availability of sensitive data. However, it is an ambiguous and diverse domain due to the diversity of security policies and the multiplicity nature of organization systems. Numerous specific and generic ISP models have been offered for several purposes. The offered models have numerous redundant procedures, concepts, activities, processes, and tasks that make the ASP domain unorganized, unstructured, and ambiguous among domain experts and users. Thus, the structured and integrated model to simplify sharing, managing, and reusing ISP activities and tasks is still missing. This study applied the design science method to develop a unified model for the ISP domain called the Integrated Information Security Policy Model (IISPM). This aims to identify, recognize, extract, and match different ISP processes, concepts, activities, and tasks from different ISP models in a developed IISPM, thus, allowing domain experts and users to derive/instantiate solution models easily. The developed IISPM consists of six main abstract processes: Information security policy process, information security awareness process, access control process, observing the process, agreement process, and plan process. Each introduced process has specific security practices. The output showed that IISPM assists domain experts and users to create their solution models based on their requirements.

show abstract

“…This situation brings the concept of forward and backward traceability or called as bidirectional traceability approach as discussed by [33,34]. The concept was used and further extend as an enhanced traceability model discussed in [35]. The discussed traceability model consists of definition, production and extraction.…”

Section: The Tracing and Mapping In Digital Forensic Traceabilitymentioning

confidence: 99%

“…The objective of this tagging is to show the traces are already mapped between one trace to another trace either belongs to same log (within log), different logs (between logs), same level (host logs), different level (host and network logs) or same devices (within devices). done and discussed in [35,48]. A prototype version is developed in order to demonstrate the proposed model that called as TraceMap and can benefit the digital forensic investigation research and community.…”

Section:  mentioning

confidence: 99%

“…According to [49], there is a need for security metrics in digital forensic that: 1) meet legal requirements for measureable reliability, authenticity, accuracy and precision, 2) based on a sound scientific methodology properly applied, and 3) have a basis provided for independent testing. Unfortunately, the digital forensic metric is not yet formulated and there is no industry consensus that a judge and jury can rely upon as adequate to support a claim and meet legal requirements for measurable reliability, authenticity, accuracy, and precision.…”

Section: Forensic Traceability Measurementmentioning

confidence: 99%

See 1 more Smart Citation

A Forensic Traceability Index in Digital Forensic Investigation

Selamat¹,

Sahib²,

Hafeizah³

et al. 2013

JIS

Self Cite

View full text Add to dashboard Cite

Digital crime inflicts immense damage to users and systems and now it has reached a level of sophistication that makes it difficult to track its sources or origins especially with the advancements in modern computers, networks and the availability of diverse digital devices. Forensic has an important role to facilitate investigations of illegal activities and inappropriate behaviors using scientific methodologies, techniques and investigation frameworks. Digital forensic is developed to investigate any digital devices in the detection of crime. This paper emphasized on the research of traceability aspects in digital forensic investigation process. This includes discovering of complex and huge volume of evidence and connecting meaningful relationships between them. The aim of this paper is to derive a traceability index as a useful indicator in measuring the accuracy and completeness of discovering the evidence. This index is demonstrated through a model (TraceMap) to facilitate the investigator in tracing and mapping the evidence in order to identify the origin of the crime or incident. In this paper, tracing rate, mapping rate and offender identification rate are used to present the level of tracing ability, mapping ability and identifying the offender ability respectively. This research has a high potential of being expanded into other research areas such as in digital evidence presentation.

show abstract

Traceability in digital forensic investigation process

Cited by 14 publications

References 8 publications

A Review on Mobile Device\'s Digital Forensic Process Models

A Review on Mobile Device\'s Digital Forensic Process Models

Integrated Information Security Policy Model for Saudi Arabia Organizations

A Forensic Traceability Index in Digital Forensic Investigation

Contact Info

Product

Resources

About