Forensic experts' view of forensic-ready software systems: A
qualitative study

J 2024

Forensic experts' view of forensic-ready software systems: A qualitative study

DAUBNER, Lukáš, Barbora BÜHNOVÁ a Tomáš PITNER

Základní údaje

Originální název

Forensic experts' view of forensic-ready software systems: A qualitative study

Autoři

DAUBNER, Lukáš (203 Česká republika, garant, domácí), Barbora BÜHNOVÁ (203 Česká republika, domácí) a Tomáš PITNER (203 Česká republika, domácí)

Vydání

Journal of Software: Evolution and Process, HOBOKEN, WILEY, 2024, 2047-7473

Další údaje

Jazyk

angličtina

Typ výsledku

Článek v odborném periodiku

Obor

10200 1.2 Computer and information sciences

Stát vydavatele

Velká Británie a Severní Irsko

Utajení

není předmětem státního či obchodního tajemství

Odkazy

URL

Impakt faktor

Impact factor: 2.000 v roce 2022

Organizační jednotka

Fakulta informatiky

DOI

http://dx.doi.org/10.1002/smr.2598

UT WoS

001026921200001

Klíčová slova anglicky

digital forensics; forensic by design; forensic readiness; forensic-ready software; interview; software engineering

Příznaky

Mezinárodní význam, Recenzováno

Změněno: 5. 9. 2024 19:43, prof. RNDr. Tomáš Pitner, Ph.D.

Anotace

V originále

Software engineers widely acknowledge the inclusion of security requirements in the early stages of the development process. However, the need to prepare the software for the failure of the implemented security controls and subsequent investigation of the incident is often not discussed. Forensic-ready software systems represent an evolution of secure systems being designed for the eventual digital forensic investigation. However, their exact properties remain largely unexplored, beyond preliminary high-level conceptualizations of requirements and capabilities. Further obstacles hindering the adoption of forensic-ready software systems are the different priorities and goals of involved parties and a gap in the digital forensics expertise of software engineers. In this paper, we conduct an empirical qualitative study identifying the problems and needs of forensic readiness while framing the notion of an ideal forensic-ready software system and how it should treat potential evidence. To this end, we conducted semisupervised interviews with digital forensics experts on their idea, experience, and suggestions. The results provide insights into the needs of the experts to facilitate the definition of correct requirements towards forensic-ready software systems to support the anticipated investigations properly.

Návaznosti

CZ.02.1.01/0.0/0.0/16_019/0000822, interní kód MU
(Kód CEP: EF16_019/0000822)

Název: Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur (Akronym: C4e)

Investor: Ministerstvo školství, mládeže a tělovýchovy ČR, Centrum excelence pro kyberkriminalitu, kyberbezpečnost a ochranu kritických informačních infrastruktur, PO 1 Posilování kapacit pro kvalitní výzkum

Přiložené soubory

J_Software_Evolu_Process_-_2023_-_Daubner_-_Forensic_experts_view_of_forensic_E2_80_90ready_software_systems_A_qualitative_study.pdf

Požádat o autorskou verzi souboru

Citovat

DAUBNER, Lukáš, Barbora BÜHNOVÁ a Tomáš PITNER. Forensic experts' view of forensic-ready software systems: A qualitative study. Journal of Software: Evolution and Process. HOBOKEN: WILEY, 2024, roč. 36, č. 5, s. 1-23. ISSN 2047-7473. Dostupné z: https://dx.doi.org/10.1002/smr.2598.

@article{2429518,
   author = {Daubner, Lukáš and Bühnová, Barbora and Pitner, Tomáš},
   article_location = {HOBOKEN},
   article_number = {5},
   doi = {http://dx.doi.org/10.1002/smr.2598},
   keywords = {digital forensics; forensic by design; forensic readiness; forensic-ready software; interview; software engineering},
   language = {eng},
   issn = {2047-7473},
   journal = {Journal of Software: Evolution and Process},
   title = {Forensic experts' view of forensic-ready software systems: A qualitative study},
   url = {https://onlinelibrary.wiley.com/doi/full/10.1002/smr.2598},
   volume = {36},
   year = {2024}
}

TY  - JOUR
ID  - 2429518
AU  - Daubner, Lukáš - Bühnová, Barbora - Pitner, Tomáš
PY  - 2024
TI  - Forensic experts' view of forensic-ready software systems: A qualitative study
JF  - Journal of Software: Evolution and Process
VL  - 36
IS  - 5
SP  - 1-23
EP  - 1-23
PB  - WILEY
SN  - 20477473
KW  - digital forensics
KW  - forensic by design
KW  - forensic readiness
KW  - forensic-ready software
KW  - interview
KW  - software engineering
UR  - https://onlinelibrary.wiley.com/doi/full/10.1002/smr.2598
N2  - Software engineers widely acknowledge the inclusion of security requirements in the early stages of the development process. However, the need to prepare the software for the failure of the implemented security controls and subsequent investigation of the incident is often not discussed. Forensic-ready software systems represent an evolution of secure systems being designed for the eventual digital forensic investigation. However, their exact properties remain largely unexplored, beyond preliminary high-level conceptualizations of requirements and capabilities. Further obstacles hindering the adoption of forensic-ready software systems are the different priorities and goals of involved parties and a gap in the digital forensics expertise of software engineers. In this paper, we conduct an empirical qualitative study identifying the problems and needs of forensic readiness while framing the notion of an ideal forensic-ready software system and how it should treat potential evidence. To this end, we conducted semisupervised interviews with digital forensics experts on their idea, experience, and suggestions. The results provide insights into the needs of the experts to facilitate the definition of correct requirements towards forensic-ready software systems to support the anticipated investigations properly.
ER  -

DAUBNER, Lukáš, Barbora BÜHNOVÁ a Tomáš PITNER. Forensic experts' view of forensic-ready software systems: A qualitative study. \textit{Journal of Software: Evolution and Process}. HOBOKEN: WILEY, 2024, roč.~36, č.~5, s.~1-23. ISSN~2047-7473. Dostupné z: https://dx.doi.org/10.1002/smr.2598.

Podrobný výpis o publikaci