Forensics for multi-stage cyber incidents : Survey and future directions
Author
Nisioti, Antonia
Loukas, George
Mylonas, Alexios
Panaousis, Emmanouil
Attention
2299/26000
Abstract
The increase in the complexity and sophistication of multi-stage cyber attacks, such as advanced persistent threats, paired with the large volume of data produced by modern systems and networks, have made forensic investigations more demanding in knowledge and resources. Thus, it is essential that cyber forensic investigators are supported to operate more efficiently, in terms of resources and evidence recovery, and cope with a wide range of cyber incidents. This paper presents a comprehensive survey of 49 works that aim to support cyber forensic investigations of modern multi-stage cyber incidents and highlights the need for decision support systems on the field. The works reviewed are compared using 11 criteria, such as their evaluation method, how they optimise the forensic process, or what stage of investigation they study. We also classify the surveyed papers using 8 categories that represent the overall aim of the proposed cyber investigation method or tool. We identify and discuss open issues, arising from this extensive survey, such as the need for realistic evaluation, as well as realistic and representative modelling to increase applicability and performance. Finally, we provide directions for future research on improving the state-of-the-art of cyber forensics.
Publication date
2023-03-01Published in
Forensic Science International: Digital InvestigationPublished version
https://doi.org/10.1016/j.fsidi.2022.301480Other links
http://hdl.handle.net/2299/26000Metadata
Show full item recordRelated items
Showing items related by title, author, creator and subject.
-
Comparing the diagnostic accuracy of post-mortem CT with invasive autopsy in fire-related deaths: a systematic review
Sanderson, Stacey; Lawler, Hollie (2023-01-22)Background The value of post-mortem computed tomography (PMCT) in trauma victims is well established. In this review the diagnostic accuracy and value of PMCT will be investigated specifically for fire related deaths, which ... -
The Misleading Potential of Communicative Hand Gestures in a Forensic Interview
Gurney, D.J. (2011-06-16)A wealth of research has highlighted the susceptibility of eyewitnesses to verbal influence. However, considerably less attention has been paid to the role of nonverbal influence in police questioning. The purpose of this ... -
Transitioning to a Trauma Informed Forensic Unit: Staff Perceptions of a Shift in Organisational Culture
Stamatopoulou, Vasiliki (2019-12-13)Background: Trauma-informed care can be defined as “a system development model that is grounded in and directed by a complete understanding of how trauma exposure affects service user’s neurological, biological, psychological, ...