SaTC: EDU: Expanding Digital Forensics Education with Artifact Curation and Scalable, Accessible Artifact Exercises

SaTC：EDU：通过工件管理和可扩展、可访问的工件练习扩展数字取证教育

• 批准号: 2303715
• 负责人: Ibrahim Baggili
• 金额: $ 30万
• 依托单位: Louisiana State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-12-01 至 2023-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2303715&HistoricalAwards=false
• 关键词: SaTC; EDU; Expanding; Digital; Forensics

In digital forensic investigations, practitioners typically find data of forensic value in digital forensic artifacts. The Scientific Working Group on Digital Evidence (SWGDE) defines an artifact as "Information or data created as a result of the use of an electronic device that shows past activity". However, educational programs and resources have not kept up with digital forensics artifacts - which are the cornerstone of real-world investigations. Practitioners face the challenge of the diversity and volume of digital forensic artifacts they encounter. This makes the process of integrating artifacts into educational programs difficult. Little to no research has focused on creating scalable educational material that may be employed by instructors to teach the process of artifact curation and analysis. This is not only causing a learning gap in academic programs but is decreasing the possibility of students graduating with the necessary skills to conduct artifact analysis upon graduation. The community needs a granular, validated academic artifact dataset as well as academic exercises that employ them. This project will support the development of educational materials to address the artifact problem and will lead to graduates that understand artifacts, what they are and the process of recovering them.By leveraging past work on the Artifact Genome Project (AGP), the researchers will curate digital forensic artifacts, and use them to design scalable, self-paced, open, online digital forensic exercises. Furthermore, artifacts produced from this work will impact practice. The work will have an impact on a multitude of organizations worldwide spanning private, local, and federal organizations. The work will also impact digital forensics education through a paradigm shift from focusing only on data dumps, to digital forensic artifacts. Lastly, the curation of artifacts over time aids in the exploration of the basic scientific principles related to what artifacts are, their ontology, and definition.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

在数字取证调查中，从业者通常在数字取证工件中找到具有取证价值的数据。数字证据科学工作组（SWGDE）将人工制品定义为“由于使用显示过去活动的电子设备而创建的信息或数据”。然而，教育计划和资源没有跟上数字取证文物-这是现实世界调查的基石。从业者面临着他们遇到的数字取证文物的多样性和数量的挑战。这使得将工件集成到教育程序中的过程变得困难。几乎没有研究关注于创建可扩展的教育材料，这些材料可以被教师用来教授工件管理和分析的过程。这不仅造成了学术课程的学习差距，而且降低了学生毕业时掌握必要技能进行工件分析的可能性。社区需要一个粒度的、经过验证的学术工件数据集以及使用它们的学术练习。该项目将支持教育材料的开发，以解决文物问题，并将导致毕业生了解文物，他们是什么，并恢复他们的过程。通过利用过去的工作对人类基因组计划（AGP），研究人员将策展数字取证文物，并使用它们来设计可扩展的，自定进度的，开放的，在线数字取证练习。此外，这项工作产生的工件将影响实践。这项工作将对世界各地的许多组织产生影响，包括私营、地方和联邦组织。这项工作还将通过从只关注数据转储到数字取证工件的范式转变来影响数字取证教育。最后，随着时间的推移，人工制品的管理有助于探索与人工制品是什么，它们的本体和定义相关的基本科学原理。该奖项反映了NSF的法定使命，并被认为值得通过使用基金会的智力价值和更广泛的影响审查标准进行评估来支持。

项目成果

Expanding digital forensics education with artifact curation and scalable, accessible exercises via the Artifact Genome Project

通过 Artifact Genome Project 进行文物管理和可扩展、可访问的练习，扩大数字取证教育

• DOI: 10.1016/j.fsidi.2023.301566
• 发表时间: 2023
• 期刊: Forensic Science International: Digital Investigation
• 作者: Grajeda, Cinthya;Berrios, Jessica;Benzo, Sankofa;Ogunwobi, Emmanuel;Baggili, Ibrahim
• 通讯作者: Baggili, Ibrahim