DIGITAL FORENSIC ACQUISITION KILL CHAIN – ANALYSIS AND DEMONSTRATION

The increasing complexity and security of consumer products pose major challenges to digital forensics. Gaining access to encrypted user data without user credentials is a very difficult task. Such situations may require law enforcement to leverage offensive techniques – such as vulnerability exploitation – to bypass security measures in order to retrieve data in digital forensic investigations. This chapter proposes a digital forensic acquisition kill chain to assist law enforcement in acquiring forensic data using offensive techniques. The concept is discussed and examples are provided to illustrate the various kill chain phases. The anticipated results of applying the kill chain include improvements in performance and success rates in short-term, case-motivated, digital forensic acquisition scenarios as well as in long-term, case-independent planning and research scenarios focused on identifying vulnerabilities and leveraging them in digital forensic acquisition methods and tools.

Dyrkolbotn, Geir OlavNTNU, Norge (författare)
Axelsson, StefanStockholms universitet,Institutionen för data- och systemvetenskap(Swepub:su)stax4356 (författare)
NTNU, NorgeInstitutionen för data- och systemvetenskap (creator_code:org_t)

Ingår i:Advances in Digital Forensics XVIICham : Springer Nature, s. 3-1997830308838059783030883812

Av författaren/redakt...: Alendal, Gunnar; Dyrkolbotn, Geir ...; Axelsson, Stefan

Om ämnet

NATURVETENSKAP: NATURVETENSKAP; och Data och informa ...; och Annan data och i ...

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.