D 2023

A Model of Qualitative Factors in Forensic-Ready Software Systems

DAUBNER, Lukáš, Matulevičius RAIMUNDAS and Barbora BÜHNOVÁ

Basic information

Original name

A Model of Qualitative Factors in Forensic-Ready Software Systems

Authors

DAUBNER, Lukáš (203 Czech Republic, guarantor, belonging to the institution), Matulevičius RAIMUNDAS (440 Lithuania) and Barbora BÜHNOVÁ (203 Czech Republic, belonging to the institution)

Edition

Cham, Research Challenges in Information Science: Information Science and the Connected World, p. 308-324, 17 pp. 2023

Publisher

Springer Nature Switzerland

Other information

Language

English

Type of outcome

Stať ve sborníku

Field of Study

10200 1.2 Computer and information sciences

Confidentiality degree

není předmětem státního či obchodního tajemství

Publication form

electronic version available online

References:

RIV identification code

RIV/00216224:14330/23:00131067

Organization unit

Faculty of Informatics

ISBN

978-3-031-33079-7

ISSN

Keywords in English

Forensic Readiness;Forensic-by-Design;Forensic-Ready Software Systems;Requirements Engineering;Risk Management

Tags

International impact, Reviewed
Změněno: 7/4/2024 23:03, RNDr. Pavel Šmerk, Ph.D.

Abstract

V originále

Forensic-ready software systems enhance the security posture by designing the systems prepared for potential investigation of incidents. Yet, the principal obstacle is defining their exact requirements, i.e., what they should implement. Such a requirement needs to be on-point and verifiable. However, what exactly comprises a forensic readiness requirement is not fully understood due to distinct fields of expertise in software engineering and digital forensics. This paper describes a forensic readiness qualitative factor reference model that enables the formulation of specific requirements for forensic-ready software systems. It organises the qualitative properties of forensic readiness into a taxonomy, which can then be used to formulate a verifiable requirement targeted at a specific quality. The model is then utilised in an automated valet parking service to define requirements addressing found inadequacies regarding a potential incident investigation.

Links

CZ.02.1.01/0.0/0.0/16_019/0000822, interní kód MU
(CEP code: EF16_019/0000822)
Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur (Acronym: C4e)
Investor: Ministry of Education, Youth and Sports of the CR, CyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence, Priority axis 1: Strengthening capacities for high-quality research
EF16_019/0000822, research and development project
Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur
MUNI/A/1389/2022, interní kód MU
Name: Aplikovaný výzkum na FI: Bezpečnost počítačových systémů, softwarových architektur kritických infrastruktur s forenzními aspekty, zpracování dat pokročilých sensorů a algoritmy plánování v dopravě a logistice
Investor: Masaryk University
101087529, interní kód MU
Name: Cyber-security Excellence Hub in Estonia and South Moravia (CHESS)
Investor: European Union, Cyber-security Excellence Hub in Estonia and South Moravia (CHESS), Widening participation and strengthening the European Research Area