Procedures for Digital Forensics and Incident Response on Including Data Integrity Constraints on Solid-State Drives (SSD) - A Literature Review
-
Published:2022-05-04
Issue:
Volume:
Page:328-350
-
ISSN:2581-6942
-
Container-title:International Journal of Case Studies in Business, IT, and Education
-
language:en
-
Short-container-title:IJCSBE
Author:
Pallivalappil Abdul Shareef1, S. N. Jagadeesha2
Affiliation:
1. Research Scholar, Institute of Computer Science and Information Science, Srinivas University, Mangalore, India. 2. Research Professor, Institute of Computer Science and Information Science, Srinivas University, Mangalore, Karnataka, India.
Abstract
Background/Purpose: To get evidence from suspect computers running on Windows Operating System, law enforcement agencies and corporations follow many standard procedures relevant to Digital Forensics and Incident Response processes. The primary contrast between forensics and incident response is that forensics is evidence-driven and is often more closely connected with criminal activity, while incident response is more focused on discovering, containing, and recovering from breach of security incidents. A guideline is often intended to simplify certain procedures in accordance with a predefined routine or good practice. As data storage technology progresses from hard disc drives (HDDs) to solid-state drives (SSDs), it has become more difficult for Digital Forensics Analysts to perform evidence acquisition tasks from suspicious systems due to file integrity issues. Existing forensic principles and methods were created mostly on the basis of hard disc drive technology. This literature survey analyses several guidelines to identify gaps in SSD Forensic challenges and makes recommendations for improvement.
Objective: To survey leading Digital Forensics and Incident Response guidelines on how SSD forensic acquisition procedures are outlined and to find the gaps and suggest enhancements that might be made.
Design/Methodology/Approach: Data from academic papers, web articles, and other sources is analysed and presented using ABCD analysis.
Findings/Results: Cyber Security Framework is a vital aspect of an organisations strategy to safeguard its IT assets from cyber assaults and other form of damages. Most organisation use NIST framework since it is being generally acknowledged. However, owing to quick improvement in new technologies CSF’s need to be kept up to date in order to confront emerging cyber security threats. After verifying the policy framework of NIST 800-61, it was determined that the SSD forensic gathering approach which raises problems about data integrity has not been addressed.
Originality/Value: A study comparing and contrasting different CSFs in the field of Digital Forensics and Incident Response with the most recent emerging technologies will draw more attention to this area from a wider range of stakeholders, allowing the policy framework to keep pace with the most recent emerging technologies in the same time frame.
Paper Type: Literature Review Paper.
Publisher
Srinivas University
Reference81 articles.
1. Cichonski, P., Millar, T., Grance, T., & Scarfone, K. (2012). Computer security incident handling guide. NIST Special Publication, 800(61), 1-147. 2. Shah, Z., Mahmood, A. N., & Slay, J. (2014, September). Forensic potentials of solid-state drives. In International Conference on Security and Privacy in Communication Networks, 113-126. 3. Kumar, M. (2021). Solid state drive forensics analysis—Challenges and recommendations. Concurrency and Computation: Practice and Experience, 33(24), 22-42. 4. Azmi, R., Tibben, W., & Win, K. T. (2018). Review of cybersecurity frameworks: context and shared concepts. Journal of cyber policy, 3(2), 258-283. 5. Dedeke, A. (2017). Cybersecurity framework adoption: using capability levels for implementation tiers and profiles. IEEE Security & Privacy, 15(5), 47-54.
Cited by
4 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. The Power of Social Media on Online Buying Behaviour of the Fashion Products: A Quantitative ABCD Analysis;International Journal of Case Studies in Business, IT, and Education;2023-07-26 2. How to Create Business Value Through Technological Innovations Using ICCT Underlying Technologies;International Journal of Applied Engineering and Management Letters;2023-06-30 3. Quantitative ABCD Analysis of Green Marketing for Sustainable Development;International Journal of Case Studies in Business, IT, and Education;2022-12-31 4. Quantitative ABCD Analysis of Online Shopping;International Journal of Applied Engineering and Management Letters;2022-05-31
|
|