Leveraging CybOX™ to standardize representation and exchange of digital forensic information

Digital Investigation

Volumn 12, Issue S1, 2015, Pages S102-S110

  Casey, Eoghan ^a   Back, Greg ^a   Barnum, Sean ^a  

^a MITRE CORPORATION   (United States)

Author keywords

CybOX; DFAX; DFXML; Digital forensic; Digital forensic ontology; Digital forensics; Standard representation; XML

Indexed keywords

COMPUTER FORENSICS; DIGITAL DEVICES; ELECTRONIC CRIME COUNTERMEASURES; XML;

CYBOX; DFAX; DFXML; DIGITAL FORENSIC; DIGITAL FORENSIC ANALYSIS; DOMAIN-SPECIFIC INFORMATION; FORENSIC INVESTIGATION; LOCATION INFORMATION;

COMPUTER CRIME;

EID: 84924178451     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2015.01.014     Document Type: Article

References (22)

1. W. Alink, R. Bhoedjang, P. Boncz, and A. de Vries XIRAF-XML-based indexing and querying for digital forensics Proceedings of DFRWS2006 Digit Investig 3 Suppl. 2006 S50 S58 Elsevier
2. S. Barnum Structured threat information eXpression 2012 The MITRE Corporation stix.mitre.org/about/documents/STIX-Whitepaper-v1.0.pdf
3. R.A.F. Bhoedjang, A.R. van Ballegooijb, H.M.A. van Beeka, J.C. van Schiea, F.W. Dillemab, and R.B. van Baara Engineering an online computer forensic service Digital Investigation 9 2 2012
4. E. Casey Reinforcing the scientific method in digital investigations using a case-based reasoning (CBR) system [Ph.D. dissertation] 2013 University College Dublin Ireland
5. E. Casey, G. Katz, and J. Lewthwaite Honing digital forensic processes Digit Investig 10 2 2013
6. M. Cohen, B. Schatz, and S. Garfinkel Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow Proceedings of DFRWS2009 Digit Investig 6 Suppl. 2009 S57 S68 Elsevier
7. M. Cohen Hunting in the enterprise: forensic triage and incident response Digit Investig 10 2 2013
8. R. Eaglin, and J.P. Craiger Data sharing and the digital evidence markup language 2005 Presented at 1st annual GJXDM users conference, Atlanta
9. EVIDENCE Project EVIDENCE semantic structure 2013 European Informatics Data Exchange Framework for Courts and Evidence http://s.evidenceproject.eu/p/e/v/evidence-ga-608185-d02-1-final-31072014-136.pdf
10. A.O. Flaglien, A. Mallasvik, M. Mustorp, and A. Arnes Storage and exchange formats for digital evidence Digit Investig 8 2 2011 122 128
11. S.L. Garfinkel Automating disk forensic processing with SleuthKit XML and Python, systematic approaches to digital forensics engineering (IEEE/SADFE 2009), Oakland, California 2009
12. S.L. Garfinkel Digital forensics XML and the DFXML toolset Digit Investig 8 3-4 2012 161 174 Elsevier
13. S.L. Garfinkel Cross-drive analysis Proceedings of DFRWS2006 Digit Investig 3 Suppl. 2012 S71 S81 Elsevier
14. C. Hargreaves, and J. Patterson An automated timeline reconstruction approach for digital forensic investigations Proceedings of DFRWS2012 Digit Investig 9 Suppl. 2012 S69 S79 Elsevier
15. S. Lee, T. Park, S. Shin, S. Un, and D. Hong A new forensic image format for high capacity disk storage Information security and assurance, 2008. ISA 2008. International conference on information security and assurance, 24-26 April 2008 IEEE Computer Society
16. B.N. Levine, and M. Liberatore DEX: digital evidence provenance supporting reproducibility and comparison Digit Investig 6 Suppl. 2009 S48 S56 Elsevier https://github.com/umass-forensics/DEX-forensics
17. J. Levy Leveraging CybOX with volatility 2013 Volatility Labs Blog http://volatility-labs.blogspot.com/2013/09/leveraging-cybox-with-volatility.html [viewed 16.02.14]
18. National Forensic Science Technology Center Forensic information data exchange (FIDEX) final project report 2010
19. B. Schatz Digital evidence: representation and assurance [PhD dissertation] 2007 Queensland University of Technology http://eprints.qut.edu.au/16507/1/Bradley-Schatz-Thesis.pdf
20. P. Turner Unification of digital evidence from disparate sources (digital evidence bags) Proceedings of DFRWS2005 Digit Investig 2 3 2005 223 228 Elsevier
21. P. Turner Digital provenance - interpretation, verification and corroboration Digit Investig 2 1 2005 45 49
22. P. Turner Selective and intelligent imaging using digital evidence bags Proceedings of DFRWS2006 Digit Investig 3 Suppl. 2006 59 64