Research Area: Digital Forensics
Nowadays, more than ever, digital forensics activities are involved in any criminal, civil or military investigation and represent a fundamental tool to support cyber-security. Investigators use a variety of techniques and proprietary software forensics applications to examine the copy of digital devices, searching hidden, deleted, encrypted, or damaged files or folders. Any evidence found is carefully analysed and documented in a “finding report” in preparation for legal proceedings that involve discovery, depositions, or actual litigation. The aim is to discover and analyse patterns of fraudulent activities. In this work, a new methodology is proposed to support investigators during the analysis process, correlating evidence found through different forensics tools. The methodology was implemented through a system able to add semantic assertion to data generated by forensics tools during extraction processes. These assertions enable more effective access to relevant information and enhanced retrieval and reasoning capabilities.
Keywords:
Author(s) Name: Flora Amato, Aniello Castiglione, Giovanni Cozzolino, Fabio Narducci
Journal name: Journal of Parallel and Distributed Computing
Conferrence name:
Publisher name: ELSEVIER
DOI: https://doi.org/10.1016/j.jpdc.2019.12.017
Volume Information: Volume 138, April 2020, Pages 172-177
