Risk-Oriented Design Approach For Forensic-Ready Software
Systems

D 2021

Risk-Oriented Design Approach For Forensic-Ready Software Systems

DAUBNER, Lukáš a Raimundas MATULEVIČIUS

Základní údaje

Originální název

Risk-Oriented Design Approach For Forensic-Ready Software Systems

Autoři

DAUBNER, Lukáš (203 Česká republika, garant, domácí) a Raimundas MATULEVIČIUS

Vydání

New York, NY, USA, The 16th International Conference on Availability, Reliability and Security (ARES 2021), od s. 1-10, 10 s. 2021

Nakladatel

Association for Computing Machinery

Další údaje

Jazyk

angličtina

Typ výsledku

Stať ve sborníku

Obor

10200 1.2 Computer and information sciences

Stát vydavatele

Spojené státy

Utajení

není předmětem státního či obchodního tajemství

Forma vydání

elektronická verze "online"

Kód RIV

RIV/00216224:14330/21:00122160

Organizační jednotka

Fakulta informatiky

ISBN

978-1-4503-9051-4

DOI

http://dx.doi.org/10.1145/3465481.3470052

UT WoS

000749539200096

Klíčová slova anglicky

Forensic Readiness; Forensic-Ready Software Systems; Information System Security Risk Management

Štítky

best

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 14. 6. 2022 11:56, RNDr. Pavel Šmerk, Ph.D.

Anotace

V originále

Digital forensic investigation is a complex and time-consuming activity in response to a cybersecurity incident or cybercrime to answer questions related to it. These typically are what happened, when, where, how, and who is responsible. However, answering them is often very laborious and sometimes outright impossible due to a lack of useable data. The forensic-ready software systems are designed to produce valuable on-point data for use in the investigation with potentially high evidence value. Still, the particular ways to develop these systems are currently not explored. This paper proposes consideration of forensic readiness within security risk management to refine specific requirements on forensic-ready software systems. The idea is to re-evaluate the taken security risk decisions with the aim to provide trustable data when the security measures fail. Additionally, it also considers possible disputes, which the digital evidence can solve. Our proposed approach, risk-oriented forensic-ready design, composes of two parts: (1) process guiding the identification of the requirements in the form of potential evidence sources, and (2) supporting BPMN notation capturing the potential evidence sources and their relationship. Together they are aimed to provide a high-level overview of the forensic-ready requirements within the system. Finally, the approach is demonstrated on an automated valet parking scenario, followed by a discussion regarding its impact and usefulness within the forensic readiness effort.

Návaznosti

CZ.02.1.01/0.0/0.0/16_019/0000822, interní kód MU
(Kód CEP: EF16_019/0000822)

Název: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur (Akronym: C4e)

Investor: Ministerstvo školství, mládeže a tělovýchovy ČR, Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur, PO 1 Posilování kapacit pro kvalitní výzkum

EF16_019/0000822, projekt VaV

Název: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Citovat

DAUBNER, Lukáš a Raimundas MATULEVIČIUS. Risk-Oriented Design Approach For Forensic-Ready Software Systems. Online. In The 16th International Conference on Availability, Reliability and Security (ARES 2021). New York, NY, USA: Association for Computing Machinery, 2021, s. 1-10. ISBN 978-1-4503-9051-4. Dostupné z: https://dx.doi.org/10.1145/3465481.3470052.

@inproceedings{1787617,
   author = {Daubner, Lukáš and Matulevičius, Raimundas},
   address = {New York, NY, USA},
   booktitle = {The 16th International Conference on Availability, Reliability and Security (ARES 2021)},
   doi = {http://dx.doi.org/10.1145/3465481.3470052},
   keywords = {Forensic Readiness; Forensic-Ready Software Systems; Information System Security Risk Management},
   howpublished = {elektronická verze "online"},
   language = {eng},
   location = {New York, NY, USA},
   isbn = {978-1-4503-9051-4},
   pages = {1-10},
   publisher = {Association for Computing Machinery},
   title = {Risk-Oriented Design Approach For Forensic-Ready Software Systems},
   year = {2021}
}

TY  - JOUR
ID  - 1787617
AU  - Daubner, Lukáš - Matulevičius, Raimundas
PY  - 2021
TI  - Risk-Oriented Design Approach For Forensic-Ready Software Systems
PB  - Association for Computing Machinery
CY  - New York, NY, USA
SN  - 9781450390514
KW  - Forensic Readiness
KW  - Forensic-Ready Software Systems
KW  - Information System Security Risk Management
N2  - Digital forensic investigation is a complex and time-consuming activity in response to a cybersecurity incident or cybercrime to answer questions related to it. These typically are what happened, when, where, how, and who is responsible. However, answering them is often very laborious and sometimes outright impossible due to a lack of useable data. The forensic-ready software systems are designed to produce valuable on-point data for use in the investigation with potentially high evidence value. Still, the particular ways to develop these systems are currently not explored. This paper proposes consideration of forensic readiness within security risk management to refine specific requirements on forensic-ready software systems. The idea is to re-evaluate the taken security risk decisions with the aim to provide trustable data when the security measures fail. Additionally, it also considers possible disputes, which the digital evidence can solve. Our proposed approach, risk-oriented forensic-ready design, composes of two parts: (1) process guiding the identification of the requirements in the form of potential evidence sources, and (2) supporting BPMN notation capturing the potential evidence sources and their relationship. Together they are aimed to provide a high-level overview of the forensic-ready requirements within the system. Finally, the approach is demonstrated on an automated valet parking scenario, followed by a discussion regarding its impact and usefulness within the forensic readiness effort.
ER  -

DAUBNER, Lukáš a Raimundas MATULEVIČIUS. Risk-Oriented Design Approach For Forensic-Ready Software Systems. Online. In \textit{The 16th International Conference on Availability, Reliability and Security (ARES 2021)}. New York, NY, USA: Association for Computing Machinery, 2021, s.~1-10. ISBN~978-1-4503-9051-4. Dostupné z: https://dx.doi.org/10.1145/3465481.3470052.

Podrobný výpis o publikaci