Forensic experts' view of forensic-ready software systems: A
qualitative study

J 2023

Forensic experts' view of forensic-ready software systems: A qualitative study

DAUBNER, Lukáš, Barbora BÜHNOVÁ and Tomáš PITNER

Basic information

Original name

Forensic experts' view of forensic-ready software systems: A qualitative study

Authors

DAUBNER, Lukáš (203 Czech Republic, guarantor, belonging to the institution), Barbora BÜHNOVÁ (203 Czech Republic, belonging to the institution) and Tomáš PITNER (203 Czech Republic, belonging to the institution)

Edition

Journal of Software: Evolution and Process, John Wiley & Sons Ltd. 2023, 2047-7481

Other information

Language

English

Type of outcome

Článek v odborném periodiku

Field of Study

10200 1.2 Computer and information sciences

Country of publisher

United States of America

Confidentiality degree

není předmětem státního či obchodního tajemství

References:

URL

Impact factor

Impact factor: 2.000 in 2022

RIV identification code

RIV/00216224:14330/23:00131216

Organization unit

Faculty of Informatics

DOI

http://dx.doi.org/10.1002/smr.2598

UT WoS

001026921200001

Keywords in English

digital forensics;forensic by design;forensic readiness;forensic-ready software;interview;software engineering

Abstract

V originále

Abstract Software engineers widely acknowledge the inclusion of security requirements in the early stages of the development process. However, the need to prepare the software for the failure of the implemented security controls and subsequent investigation of the incident is often not discussed. Forensic-ready software systems represent an evolution of secure systems being designed for the eventual digital forensic investigation. However, their exact properties remain largely unexplored, beyond preliminary high-level conceptualizations of requirements and capabilities. Further obstacles hindering the adoption of forensic-ready software systems are the different priorities and goals of involved parties and a gap in the digital forensics expertise of software engineers. In this paper, we conduct an empirical qualitative study identifying the problems and needs of forensic readiness while framing the notion of an ideal forensic-ready software system and how it should treat potential evidence. To this end, we conducted semisupervised interviews with digital forensics experts on their idea, experience, and suggestions. The results provide insights into the needs of the experts to facilitate the definition of correct requirements towards forensic-ready software systems to support the anticipated investigations properly.

Links

CZ.02.1.01/0.0/0.0/16_019/0000822, interní kód MU
(CEP code: EF16_019/0000822)

Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur (Acronym: C4e)

Investor: Ministry of Education, Youth and Sports of the CR, CyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence, Priority axis 1: Strengthening capacities for high-quality research

EF16_019/0000822, research and development project

Name: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur

Citovat

DAUBNER, Lukáš, Barbora BÜHNOVÁ and Tomáš PITNER. Forensic experts' view of forensic-ready software systems: A qualitative study. Journal of Software: Evolution and Process. John Wiley & Sons Ltd., 2023, Neuveden, e2598, p. 1-23. ISSN 2047-7481. Available from: https://dx.doi.org/10.1002/smr.2598.

@article{2297177,
   author = {Daubner, Lukáš and Bühnová, Barbora and Pitner, Tomáš},
   article_number = {e2598},
   doi = {http://dx.doi.org/10.1002/smr.2598},
   keywords = {digital forensics;forensic by design;forensic readiness;forensic-ready software;interview;software engineering},
   language = {eng},
   issn = {2047-7481},
   journal = {Journal of Software: Evolution and Process},
   title = {Forensic experts' view of forensic-ready software systems: A qualitative study},
   url = {https://onlinelibrary.wiley.com/doi/abs/10.1002/smr.2598},
   volume = {Neuveden},
   year = {2023}
}

TY  - JOUR
ID  - 2297177
AU  - Daubner, Lukáš - Bühnová, Barbora - Pitner, Tomáš
PY  - 2023
TI  - Forensic experts' view of forensic-ready software systems: A qualitative study
JF  - Journal of Software: Evolution and Process
VL  - Neuveden
IS  - e2598
SP  - 1-23
EP  - 1-23
PB  - John Wiley & Sons Ltd.
SN  - 20477481
KW  - digital forensics;forensic by design;forensic readiness;forensic-ready software;interview;software engineering
UR  - https://onlinelibrary.wiley.com/doi/abs/10.1002/smr.2598
N2  - Abstract Software engineers widely acknowledge the inclusion of security requirements in the early stages of the development process. However, the need to prepare the software for the failure of the implemented security controls and subsequent investigation of the incident is often not discussed. Forensic-ready software systems represent an evolution of secure systems being designed for the eventual digital forensic investigation. However, their exact properties remain largely unexplored, beyond preliminary high-level conceptualizations of requirements and capabilities. Further obstacles hindering the adoption of forensic-ready software systems are the different priorities and goals of involved parties and a gap in the digital forensics expertise of software engineers. In this paper, we conduct an empirical qualitative study identifying the problems and needs of forensic readiness while framing the notion of an ideal forensic-ready software system and how it should treat potential evidence. To this end, we conducted semisupervised interviews with digital forensics experts on their idea, experience, and suggestions. The results provide insights into the needs of the experts to facilitate the definition of correct requirements towards forensic-ready software systems to support the anticipated investigations properly.
ER  -

DAUBNER, Lukáš, Barbora BÜHNOVÁ and Tomáš PITNER. Forensic experts' view of forensic-ready software systems: A qualitative study. \textit{Journal of Software: Evolution and Process}. John Wiley \&{} Sons Ltd., 2023, Neuveden, e2598, p.~1-23. ISSN~2047-7481. Available from: https://dx.doi.org/10.1002/smr.2598.

Detailed Information on Publication Record