Digital forensic acquisition kill chain – analysis and demonstration - Advances in Digital Forensics XVII
Conference Papers Year : 2021

Digital forensic acquisition kill chain – analysis and demonstration

Abstract

The increasing complexity and security of consumer products pose major challenges to digital forensics. Gaining access to encrypted user data without user credentials is a very difficult task. Such situations may require law enforcement to leverage offensive techniques – such as vulnerability exploitation – to bypass security measures in order to retrieve data in digital forensic investigations.This chapter proposes a digital forensic acquisition kill chain to assist law enforcement in acquiring forensic data using offensive techniques. The concept is discussed and examples are provided to illustrate the various kill chain phases. The anticipated results of applying the kill chain include improvements in performance and success rates in short-term, case-motivated, digital forensic acquisition scenarios as well as in long-term, case-independent planning and research scenarios focused on identifying vulnerabilities and leveraging them in digital forensic acquisition methods and tools.
Fichier principal
Vignette du fichier
522103_1_En_1_Reference.pdf (995.16 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03764382 , version 1 (30-08-2022)

Licence

Identifiers

Cite

Gunnar Alendal, Geir Olav Dyrkolbotn, Stefan Axelsson. Digital forensic acquisition kill chain – analysis and demonstration. 17th IFIP International Conference on Digital Forensics (DigitalForensics), Feb 2021, Virtual, China. pp.3-19, ⟨10.1007/978-3-030-88381-2_1⟩. ⟨hal-03764382⟩
77 View
28 Download

Altmetric

Share

More