Skip to main content

Tipp

Weitere Kapitel dieses Buchs durch Wischen aufrufen

2013 | OriginalPaper | Buchkapitel

Digital Forensics as a Big Data Challenge

verfasst von : Alessandro Guarino

Erschienen in: ISSE 2013 Securing Electronic Business Processes

Verlag: Springer Fachmedien Wiesbaden

share
TEILEN

Abstract

Digital Forensics, as a science and part of the forensic sciences, is facing new challenges that may well render established models and practices obsolete. The dimensions of potential digital evidence supports has grown exponentially, be it hard disks in desktop and laptops or solid state memories in mobile devices like smartphones and tablets, even while latency times lag behind. Cloud services are now sources of potential evidence in a vast range of investigations and network traffic also follows a growing trend and in cyber security the necessity of sifting through vast amount of data quickly is now paramount. On a higher level investigations - and intelligence analysis - can profit from sophisticated analysis of such datasets as social network structures, corpora of text to be analysed for authorship and attribution. All of the above highlights the convergence between so-called data science and digital forensics, to tack the fundamental challenge of analyse vast amount of data ("big data") in actionable time while at the same time preserving forensic principles in order for the results to be presented in a court of law. The paper, after introducing digital forensics and data science, explores the challenges above and proceed to propose how techniques and algorithms used in big data analysis can be adapted to the unique context of digital forensics, ranging from the managing of evidence via Map-Reduce to machine learning techniques for triage and analysis of big forensic disk images and network traffic dumps. In the conclusion the paper proposes a model to integrate this new paradigm into established forensic standards and best practices and tries to foresee future trends.
Literatur
[BBC+08]
Zurück zum Zitat Barreno, M. et al.: “Open Problems in the Security of Learning”. In: D. Balfanz and J. Staddon, eds., AISec, ACM, 2008, p.19-26 Barreno, M. et al.: “Open Problems in the Security of Learning”. In: D. Balfanz and J. Staddon, eds., AISec, ACM, 2008, p.19-26
[FBI08]
Zurück zum Zitat FBI: “RCFL Program Annual Report for Fiscal Year 2008”, FBI 2008. http://​www.​fbi.​gov/​news/​stories/​2009/​august/​rcfls_​081809 FBI: “RCFL Program Annual Report for Fiscal Year 2008”, FBI 2008. http://​www.​fbi.​gov/​news/​stories/​2009/​august/​rcfls_​081809
[FBI10]
Zurück zum Zitat FBI: “RCFL Program Annual Report for Fiscal Year 2010”, FBI 2010. FBI: “RCFL Program Annual Report for Fiscal Year 2010”, FBI 2010.
[ISAC13]
Zurück zum Zitat ISACA: “What Is Big Data and What Does It Have to Do with IT Audit?”, ISACA Journal, 2013, p.23-25 ISACA: “What Is Big Data and What Does It Have to Do with IT Audit?”, ISACA Journal, 2013, p.23-25
[ISO12]
[KhCY07]
Zurück zum Zitat Khan, M. and Chatwin, C. and Young, R.: “A framework for post-event timeline reconstruction using neural networks” Digital Investigation 4, 2007 Khan, M. and Chatwin, C. and Young, R.: “A framework for post-event timeline reconstruction using neural networks” Digital Investigation 4, 2007
[Pear01]
Zurück zum Zitat Pearson, G.: “A Road Map for Digital Forensic Research”. In: Report from DFRWS 2001, First Digital Forensic Research Workshop, 2001. Pearson, G.: “A Road Map for Digital Forensic Research”. In: Report from DFRWS 2001, First Digital Forensic Research Workshop, 2001.
[Vari09]
Zurück zum Zitat Varian, Hal in: The McKinsey Quarterly, Jan 2009 Varian, Hal in: The McKinsey Quarterly, Jan 2009
Metadaten
Titel
Digital Forensics as a Big Data Challenge
verfasst von
Alessandro Guarino
Copyright-Jahr
2013
Verlag
Springer Fachmedien Wiesbaden
DOI
https://doi.org/10.1007/978-3-658-03371-2_17

Premium Partner