In EDS ansehen

Effective Management of Rapid Intervention, Investigation, Analysis and Reporting Processes in Computer Crimes with New-Generation Digital Forensic Methods.

Gespeichert in:
Bibliographische Detailangaben
Titel: Effective Management of Rapid Intervention, Investigation, Analysis and Reporting Processes in Computer Crimes with New-Generation Digital Forensic Methods.
Alternate Title: Bilgisayarla İşlenen Suçlara Hızlı Müdahale, İnceleme, Analiz Ve Raporlama Süreçlerinin Yeni Nesil Adli Bilişim Yöntemleri İle Etkin Yönetimi. (Turkish)
Autoren: ALKAN, Abdulkerim Oğuzhan, DOĞRU, İbrahim Alper, ATACAK, İsmail
Quelle: Journal of Polytechnic; Sep2024, Vol. 27 Issue 5, p1945-1954, 10p
Schlagwörter: INTERNET security, DIGITAL forensics, COMPUTER crimes, SCIENTIFIC literature, CRIME scene searches, ACQUISITION of data, ELECTRONIC evidence
Abstract (English): The exponential growth in attack vector volume and speed, the rapid increase in computer crimes, and huge volumes of enterprise attack surface and data to be managed have led to the recognition that 100% prevention of breaches in individual and corporate cybersecurity is no longer a realistic expectation. With traditional digital forensic approaches, the process of collecting and creating digital evidence, such as getting the disk image, examining and reporting, can be quite time-consuming and difficult to the incident response quickly, depending on the size of the data. For example, on average, getting an image of harddisk which includes 20 terabyte capacity, takes 2 days of time. As a solution, with a special digital forensic tool such as Binalyze AIR, collecting only evidentiary documents (Disk Proof, Proof of Memory, Proof of Scanner, Proof of NTFS, Proof of Log, Proof of Network, Proof of Event Logs, Proof of WMI, Proof of Process Execution, etc.), hashing all evidence and automatically generating preliminary report will allow this process to be completed in a much shorter time. It provides effective management of crime scene investigation and fast response to computer crimes, investigation, analysis and reporting processes blocked with traditional digital forensic methods and offers an innovative solution to the scientific literature. This study presents results obtained by using new-generation digital forensic methods (Binalyze AIR and Binalyze Tactical software) in comparison with traditional digital forensic methods. [ABSTRACT FROM AUTHOR]
Abstract (Turkish): Saldırı vektör hacmi ve hızındaki üstel büyüme, bilgisayarla işlenen suçların hızlı artışı ile kurumsal saldırı yüzeyi ve yönetilecek veri miktarının çok büyük hacimlere ulaşması, bireysel ve kurumsal siber güvenlik içinde %100 ihlal önlemenin artık gerçekçi bir beklenti olmadığının kabul edilmesine yol açmıştır. Geleneksel adli bilişim yaklaşımları ile bir olaya müdahalede kullanılacak disk imajının alınması, imajın incelenmesi ve raporlanması gibi dijital delillerin toplanma ve oluşturulma süreci, veri büyüklüğüne bağlı olarak çok zaman alıcı olabilmekte ve hızlı müdahaleyi zorlaştırabilmektedir. Ortalama 20 terabaytlık bir diskin sadece imajını almak (bir elektronik delilin kopyasının oluşturulması) 2 gün sürmektedir. Binalyze AIR gibi özel bir adli bilişim aracıyla olay yeri müdahalesinde sadece delil niteliği taşıyan belgelerin (Disk Kanıtı, Hafıza Kanıtı, Tarayıcı Kanıtı, NTFS Kanıtı, Kayıt Kanıtı, Ağ Kanıtı, Olay Günlükleri Kanıtı, WMI Kanıtı, Süreç Yürütme Kanıtı vb.) toplanması, tüm delillerin hash’inın alınması ve otomatik olarak ön raporlarının oluşturulması bu sürecin çok daha kısa bir sürede tamamlanmasına olanak sağlayacaktır. Geleneksel adli tıp yöntemleriyle bloke edilen olay yeri inceleme ve bilgisayar suçlarına hızlı müdahale, soruşturma, analiz ve raporlama süreçlerinin etkin yönetimini sağlar ve bilimsel literatüre yenilikçi bir çözüm sunar. Bu çalışmada Binalyze AIR ve Binalyze Tactical yazılımları kullanılarak yeni nesil adli bilişim yöntemleri ve geleneksel adli bilişim yöntemleri üzerine çalışmalar yapılarak elde edilen sonuçlar karşılaştırmalı olarak ortaya konulmuştur. [ABSTRACT FROM AUTHOR]
Copyright of Journal of Polytechnic is the property of Journal of Polytechnic and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Datenbank: Complementary Index
Beschreibung
Abstract:The exponential growth in attack vector volume and speed, the rapid increase in computer crimes, and huge volumes of enterprise attack surface and data to be managed have led to the recognition that 100% prevention of breaches in individual and corporate cybersecurity is no longer a realistic expectation. With traditional digital forensic approaches, the process of collecting and creating digital evidence, such as getting the disk image, examining and reporting, can be quite time-consuming and difficult to the incident response quickly, depending on the size of the data. For example, on average, getting an image of harddisk which includes 20 terabyte capacity, takes 2 days of time. As a solution, with a special digital forensic tool such as Binalyze AIR, collecting only evidentiary documents (Disk Proof, Proof of Memory, Proof of Scanner, Proof of NTFS, Proof of Log, Proof of Network, Proof of Event Logs, Proof of WMI, Proof of Process Execution, etc.), hashing all evidence and automatically generating preliminary report will allow this process to be completed in a much shorter time. It provides effective management of crime scene investigation and fast response to computer crimes, investigation, analysis and reporting processes blocked with traditional digital forensic methods and offers an innovative solution to the scientific literature. This study presents results obtained by using new-generation digital forensic methods (Binalyze AIR and Binalyze Tactical software) in comparison with traditional digital forensic methods. [ABSTRACT FROM AUTHOR]
ISSN:13020900