Embedding Hercule Poirot in Networks: Addressing Inefficiencies in Digital Forensic Investigations

摘要: Forensic investigations on networks are not scalable in terms of time and money [1]. Those that do occur consume months attention from the very experts who should be investing more productive activities, like designing improving network performance Given these circumstances, organizations often must select which cases to pursue, ignoring many could prosecuted, if allowed. Recognizing exponential growth number crimes employ computers become subject digital evidence procedures, researchers practitioners, alike, have called for embedding forensics-essentially integrating cognitive skills a detective into [2, 3, 4]. The premise is level effort required document incidents can thus reduced, significantly. This paper introduces what technical factors might reflect those detecting skills, leading solutions offset inefficiencies current practice.