Advances in Digital Forensics XIII

1. Front Matter

   Pages i-xviii

   PDF

2. Themes and Issues

   1. Front Matter

      Pages 1-1

      PDF

   2. Establishing Findings in Digital Forensic Examinations: A Case Study Method

      • Oluwasayo Oyelami, Martin Olivier

      Pages 3-21

   3. A Model for Digital Evidence Admissibility Assessment

      • Albert Antwi-Boasiako, Hein Venter

      Pages 23-38

3. Mobile and Embedded Device Forensics

   1. Front Matter

      Pages 39-39

      PDF

   2. Evaluating the Authenticity of Smartphone Evidence

      • Heloise Pieterse, Martin Olivier, Renier van Heerden

      Pages 41-61

   3. Forensic Evaluation of an Amazon Fire TV Stick

      • Logan Morrison, Huw Read, Konstantinos Xynos, Iain Sutherland

      Pages 63-79

   4. Detecting Anomalous Programmable Logic Controller Events Using Machine Learning

      • Ken Yau, Kam-Pui Chow

      Pages 81-94

4. Network and Cloud Forensics

   1. Front Matter

      Pages 95-95

      PDF

   2. A Forensic Methodology for Software-Defined Network Switches

      • Tommy Chin, Kaiqi Xiong

      Pages 97-110

   3. Identifying Evidence for Cloud Forensic Analysis

      • Changwei Liu, Anoop Singhal, Duminda Wijesekera

      Pages 111-130

5. Threat Detection and Mitigation

   1. Front Matter

      Pages 131-131

      PDF

   2. Digital Forensic Implications of Collusion Attacks on the Lightning Network

      • Dmytro Piatkivskyi, Stefan Axelsson, Mariusz Nowostawski

      Pages 133-147

   3. Insider Threat Detection Using Time-Series-Based Raw Disk Forensic Analysis

      • Nicole Beebe, Lishu Liu, Zi Ye

      Pages 149-167

   4. Anti-Forensic Threat Modeling

      • Bruno Hoelz, Marcelo Maues

      Pages 169-183

6. Malware Forensics

   1. Front Matter

      Pages 185-185

      PDF

   2. A Behavior-Based Approach for Malware Detection

      • Rayan Mosli, Rui Li, Bo Yuan, Yin Pan

      Pages 187-201

   3. Categorizing Mobile Device Malware Based on System Side-Effects

      • Zachary Grimmett, Jason Staggs, Sujeet Shenoi

      Pages 203-219

7. Image Forensics

   1. Front Matter

      Pages 221-221

      PDF

   2. Semantic Video Carving Using Perceptual Hashing and Optical Flow

      • Junbin Fang, Sijin Li, Guikai Xi, Zoe Jiang, Siu-Ming Yiu, Liyang Yu et al.

      Pages 223-244

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence.  Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations.  Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics XIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: Themesand Issues; Mobile and Embedded Device Forensics; Network and Cloud Forensics; Threat Detection and Mitigation; Malware Forensics; Image Forensics; and Forensic Techniques. This book is the thirteenth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of sixteen edited papers from the Thirteenth Annual IFIP WG 11.9 International Conference on Digital Forensics, held in Orlando, Florida, USA in the winter of 2017. Advances in Digital Forensics XIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities.
Gilbert Peterson, Chair, IFIP WG 11.9 on Digital Forensics, is a Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA.
Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.

• applied computing
• cloud computing
• computer crime
• computer networks
• data security
• digital forensic science
• digital forensics
• embedded systems
• image processing
• industrial control systems
• malware
• mobile devices
• network forensics
• privacy
• threat detection

• Department of Electrical and Computer Engineering, Air Force Institute of Technology, Wright-Patterson AFB, USA

  Gilbert Peterson

• Tandy School of Computer Science, University of Tulsa, Tulsa, USA

  Sujeet Shenoi

Policies and ethics