An investigative framework for incident analysis

IFIP Advances in Information and Communication Technology

Volumn 361, Issue , 2011, Pages 23-34

  Blackwell, Clive ^a  

^a OXFORD BROOKES UNIVERSITY   (United Kingdom)

Author keywords

Incident framework; Investigative questions; Security architecture

Indexed keywords

ELECTRONIC CRIME COUNTERMEASURES;

INCIDENT ANALYSIS; INCIDENT FRAMEWORK; INSIDER THREAT; INVESTIGATIVE QUESTIONS; PHYSICAL FACTORS; PHYSICAL LEVEL; SECURITY ARCHITECTURE;

DIGITAL FORENSICS;

EID: 84958762439     PISSN: 18684238     EISSN: 1868422X     Source Type: Book Series    
DOI: 10.1007/978-3-642-24212-0_2     Document Type: Conference Paper

References (16)

1. N. Beebe and J. Clark, A hierarchical, objectives-based framework for the digital investigations process, Digital Investigation, vol. 2(2), pp. 147–167, 2005.
2. D. Cappelli, A. Moore, R. Trzeciak and T. Shimeall, Common Sense Guide to Prevention and Detection of Insider Threats, Version 3.1, CERT, Software Engineering Institute, Carnegie-Mellon University, Pittsburgh, Pennsylvania, 2009.
3. B. Carrier and E. Spafford, Getting physical with the digital investigation process, International Journal of Digital Evidence, vol. 2(2), 2003.
4. B. Carrier and E. Spafford, An event-based digital forensic investigation framework, Proceedings of the Fourth Digital Forensics Research Workshop, 2004.
5. J. Howard and T. Longstaff, A Common Language for Computer Security Incidents, Sandia Report SAND98-8667, Sandia National Laboratories, Albuquerque, New Mexico and Livermore, California, 1998.
6. R. Ieong, FORZA: Digital forensics investigation framework that incorporates legal issues, Digital Investigation, vol. 3(S1), pp. 29–36, 2006.
7. W. McComas, The principal elements of the nature of science: Dispelling the myths in the nature of science, in The Nature of Science in Science Education, W. McComas (Ed.), Kluwer, Dordrecht, The Netherlands, pp. 53–70, 1998.
8. G. Palmer, A Road Map for Digital Forensic Research, DFRWS Technical Report DTR–T001-01 Final, Air Force Research Laboratory, Rome, New York (dfrws.org/2001/dfrws-rm-final.pdf), 2001.
9. M. Pollitt, Computer forensics: An approach to evidence in cyberspace, Proceedings of the National Information Systems Security Conference, pp. 487–491, 1995.
10. M. Pollitt, Six blind men from Indostan, Proceedings of the Fourth Digital Forensics Research Workshop, 2004.
11. M. Reith, C. Carr and G. Gunsch, An examination of digital forensic models, International Journal of Digital Evidence, vol. 1(3), 2002.
12. S. Selamat, R. Yusof and S. Sahib, Mapping process of digital forensic investigation framework, International Journal of Computer Science and Network Security, vol. 8(10), pp. 163–169, 2008.
13. J. Sherwood, A. Clark and D. Lynas, Enterprise Security Architecture: A Business Driven Approach, CMP Books, San Francisco, California, 2005.
14. A. Tanenbaum, Computer Networks, Prentice-Hall, Upper Saddle River, New Jersey, 2003.
15. U.S. Department of Justice, Digital Forensics Analysis Methodology, Washington, DC (www.justice.gov/criminal/cybercrime/forensics chart.pdf), 2007.
16. J. Zachman, A framework for information systems architecture, IBM Systems Journal, vol. 26(3), pp. 276–292, 1987.