Bayley, Fletcher and Gan, Diane ORCID: 0000-0002-0920-7572 (2013) Forensic analysis of digital attack tool artifacts. In: Cyberforensics Perspectives : Proceedings of the 3rd International Conference on Cybercrime, Security and Digital Forensics (Cyberforensics 2013). University of Strathclyde Publishing, Strathclyde, Scotland, UK, pp. 73-80. ISBN 9780947649975

Preview

PDF (Publisher's PDF - Open Access) 11708 GAN_Digital_Attack_Tool_Artifacts_2013.pdf - Published Version Download (304kB) | Preview

Abstract

This work was to investigate the forensics artifacts left by network attack tools within Linux and UNIX operating systems and to develop an application called HexaFind. The application enables a forensics investigator to collect the digital evidence left behind by the usage, installation or removal of specific attack tools. The main objective was to decrease the complexity of forensic investigations within these operating systems and to increase the detection rate of forensic artifacts relating to criminal or civil evidence of malicious conduct.

Item Type:	Conference Proceedings
Title of Proceedings:	Cyberforensics Perspectives : Proceedings of the 3rd International Conference on Cybercrime, Security and Digital Forensics (Cyberforensics 2013)
Additional Information:	[1] In book of papers presented at the 3rd International Conference on Cybercrime, Security and Digital Forensics, held 10-11 June 2013, at the University of Cardiff, Wales, UK.
Uncontrolled Keywords:	Linux, UNIX, Forensics investigation, Digital evidence, Network, Enumeration, Digital artifacts, HexaFind, Big data
Subjects:	K Law > K Law (General) Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science > Internet of Things and Security Research Centre (ISEC) Faculty of Engineering & Science > School of Computing & Mathematical Sciences (CMS) Faculty of Engineering & Science
Related URLs:	Organisation
Last Modified:	04 Mar 2022 13:08
URI:	http://gala.gre.ac.uk/id/eprint/11708

Actions (login required)

View Item

Downloads