National Workshop on Redefining Cyber Forensics

重新定义网络取证全国研讨会

• 批准号: 1649101
• 负责人: Ibrahim Baggili
• 金额: $ 5万
• 依托单位: University of New Haven
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-09-01 至 2018-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1649101&HistoricalAwards=false
• 关键词: National; Workshop; Redefining; Cyber; Forensics

The project proposes hosting a national workshop on redefining the domain of cyber forensics. Cyber forensics has encountered major obstacles over the last decade and is at a crossroads. Traditional computer forensics, although still valid, does not fully map to emerging sub-areas such as memory forensics, cloud forensics, social media forensics, network forensics and mobile forensics, since data in many instances may not be acquired without some form of modification. There is also an increase in the volume, velocity and variety of data and storage necessitating the need for more efficient analysis methods while still preserving the authenticity and privacy of the collected digital evidence. Device security and encryption has also improved and now, cyber forensics scientists and practitioners have to venture into ethical hacking to gain access to potential digital evidence as exhibited in the high profile Apple-FBI case. All these challenges have impacts on education and training, policy, law, the domain's ontology, and society as a whole. In parallel, there have been related extensive research areas emerging in social network analysis, psychology, data science, reverse engineering, and privacy without much interaction with cyber forensics. The proposed workshop with a blue-ribbon panel will stimulate the needed intellectual exchange of ideas and discussions on the future of the domain. It will help redefine the agenda for the future of cyber forensics, and will disseminate a progressive national report, setting the agenda for the field.

该项目提议主办一次关于重新界定网络取证领域的国家讲习班。网络取证在过去十年中遇到了重大障碍，正处于十字路口。传统的计算机取证虽然仍然有效，但不能完全映射到新兴的子领域，例如存储器取证、云取证、社交媒体取证、网络取证和移动的取证，因为在许多情况下，如果没有某种形式的修改，可能无法获取数据。数据和存储的数量、速度和种类也在增加，这就需要更有效的分析方法，同时仍然保护所收集的数字证据的真实性和隐私。设备安全性和加密也得到了改善，现在，网络取证科学家和从业人员不得不冒险进行道德黑客攻击，以获得潜在的数字证据，正如备受瞩目的Apple-FBI案件中所展示的那样。所有这些挑战都对教育和培训、政策、法律、该领域的本体以及整个社会产生了影响。与此同时，在社交网络分析、心理学、数据科学、逆向工程和隐私方面出现了相关的广泛研究领域，但与网络取证没有太多的互动。拟议的研讨会将设有一个蓝带小组，将促进必要的思想交流和对该领域未来的讨论。它将有助于重新定义网络取证的未来议程，并将传播一份渐进的国家报告，为该领域制定议程。