Title
Data Warehousing Based Computer Forensics Investigation Framework
Abstract
In this paper, we have proposed the design of an efficient computer forensics investigation framework. The proposed framework improves the investigation efficiency using Data Warehouse (DW) concept, which provides a selective evidence identification, collection and analysis. So, only relevant data is investigated instead of investigating the entire user data. The proposed framework consists of a Data Warehouse Engine (DWE) to selectively identify, collect and analyze digital evidences from multiple digital resources. A Digital Evidence Preservation (DEP) mechanism is also introduced for preservation of the collected digital evidences whose authenticity is ensured using cryptographic techniques. An access control mechanism is implemented to allow only authorized investigator to access the preserved digital evidences. The DEP mechanism provides court of law with a Secure Forensic Audit Trial (SFAT) that helps in tracking happened activities on the collected evidences for ensuring the authenticity and reliability of the presented digital evidence.
Year
DOI
Venue
2015
10.1109/ITNG.2015.31
Information Technology - New Generations
Keywords
DocType
ISBN
cryptography,data warehouses,digital forensics,dep mechanism,dwe,sfat,access control mechanism,computer forensics investigation framework,cryptographic technique,data warehouse engine,data warehousing,digital evidence preservation mechanism,secure forensic audit trial,selective evidence identification,access control,authenticity,computer forensics,data warehouse,digital evidence,efficiency,and reliability,data mining,authorization
Conference
978-1-4799-8827-3
Citations 
PageRank 
References 
3
0.45
16
Authors
5
Name
Order
Citations
PageRank
waleed halboob130.45
ramlan mahmod230.45
Muhammad Abulaish3131.36
Haider Abbas4881.79
Kashif Saleem521421.58