No Cover Image

Book chapter 284 views

Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)

Reza Montasari Orcid Logo, Richard Hill, Victoria Carpenter, Amin Hosseinian-Far

Cyber Security Practitioner's Guide, Volume: Chapter 9, Pages: 303 - 363

Swansea University Author: Reza Montasari Orcid Logo

Full text not available from this repository: check for access using links below.

DOI (Published version): 10.1142/9789811204463_0009

Abstract

The existing digital forensic investigation process models (DFIPMs) have often been developed by digital forensic practitioners (DFPs) based on their own personal experience and on an ad-hoc basis, without attention to the establishment of standardisation within the field. This has prevented the ins...

Full description

Published in: Cyber Security Practitioner's Guide
ISBN: 9789811204456 9789811204463
Published: WORLD SCIENTIFIC 2020
Online Access: http://dx.doi.org/10.1142/9789811204463_0009
URI: https://cronfa.swan.ac.uk/Record/cronfa54954
Tags: Add Tag
No Tags, Be the first to tag this record!
first_indexed 2020-08-19T09:21:01Z
last_indexed 2020-08-21T03:18:52Z
id cronfa54954
recordtype SURis
fullrecord <?xml version="1.0"?><rfc1807><datestamp>2020-08-20T17:38:21.3092902</datestamp><bib-version>v2</bib-version><id>54954</id><entry>2020-08-12</entry><title>Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)</title><swanseaauthors><author><sid>e420369ac98aaaa7f39248e39a847af1</sid><ORCID>0000-0001-7136-6753</ORCID><firstname>Reza</firstname><surname>Montasari</surname><name>Reza Montasari</name><active>true</active><ethesisStudent>false</ethesisStudent></author></swanseaauthors><date>2020-08-12</date><deptcode>CSSP</deptcode><abstract>The existing digital forensic investigation process models (DFIPMs) have often been developed by digital forensic practitioners (DFPs) based on their own personal experience and on an ad-hoc basis, without attention to the establishment of standardisation within the field. This has prevented the institution of both scientific and generic processes that are urgently required within the different fields of law enforcement, commerce and incident response. Therefore, a novel model &#x2014; the Standardised Digital Forensic Investigation Process Model (the SDFIPM) &#x2014; was developed to address these shortcomings. Following the selected research methodology, Peffers et al.&#x2019;s Design Science Research Process (DSRP), the SDFIPM was also subjected to both Demonstration and Evaluation activities to determine how well it would support the solution to the stated research problem. Therefore, this paper presents the results of the Demonstration and Evaluation activities applied to the proposed model. Our study makes three significant and novel contributions to the field of Digital Forensics (DF): First, it implements a process model, the design of which is inclusive of all the advantages of the previous models through their synthesis, harmonisation and extension. No such a model previously existed in the literature. Second, the SDFIPM is generic in that it can be applied within the three fields of law enforcement, commerce and incident response. Third, unlike the majority of the previous models, the effectiveness of which is unknown due to the lack of an evaluation process, the SDFIPM&#x2019;s efficacy is demonstrated in relation to both components of &#x2018;utility&#x2019; and &#x2018;usability.</abstract><type>Book chapter</type><journal>Cyber Security Practitioner's Guide</journal><volume>Chapter 9</volume><paginationStart>303</paginationStart><paginationEnd>363</paginationEnd><publisher>WORLD SCIENTIFIC</publisher><isbnPrint>9789811204456</isbnPrint><isbnElectronic>9789811204463</isbnElectronic><keywords/><publishedDay>1</publishedDay><publishedMonth>3</publishedMonth><publishedYear>2020</publishedYear><publishedDate>2020-03-01</publishedDate><doi>10.1142/9789811204463_0009</doi><url>http://dx.doi.org/10.1142/9789811204463_0009</url><notes/><college>COLLEGE NANME</college><department>Criminology, Sociology and Social Policy</department><CollegeCode>COLLEGE CODE</CollegeCode><DepartmentCode>CSSP</DepartmentCode><institution>Swansea University</institution><apcterm/><lastEdited>2020-08-20T17:38:21.3092902</lastEdited><Created>2020-08-12T00:32:06.7613211</Created><authors><author><firstname>Reza</firstname><surname>Montasari</surname><orcid>0000-0001-7136-6753</orcid><order>1</order></author><author><firstname>Richard</firstname><surname>Hill</surname><order>2</order></author><author><firstname>Victoria</firstname><surname>Carpenter</surname><order>3</order></author><author><firstname>Amin</firstname><surname>Hosseinian-Far</surname><order>4</order></author></authors><documents/><OutputDurs/></rfc1807>
spelling 2020-08-20T17:38:21.3092902 v2 54954 2020-08-12 Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM) e420369ac98aaaa7f39248e39a847af1 0000-0001-7136-6753 Reza Montasari Reza Montasari true false 2020-08-12 CSSP The existing digital forensic investigation process models (DFIPMs) have often been developed by digital forensic practitioners (DFPs) based on their own personal experience and on an ad-hoc basis, without attention to the establishment of standardisation within the field. This has prevented the institution of both scientific and generic processes that are urgently required within the different fields of law enforcement, commerce and incident response. Therefore, a novel model — the Standardised Digital Forensic Investigation Process Model (the SDFIPM) — was developed to address these shortcomings. Following the selected research methodology, Peffers et al.’s Design Science Research Process (DSRP), the SDFIPM was also subjected to both Demonstration and Evaluation activities to determine how well it would support the solution to the stated research problem. Therefore, this paper presents the results of the Demonstration and Evaluation activities applied to the proposed model. Our study makes three significant and novel contributions to the field of Digital Forensics (DF): First, it implements a process model, the design of which is inclusive of all the advantages of the previous models through their synthesis, harmonisation and extension. No such a model previously existed in the literature. Second, the SDFIPM is generic in that it can be applied within the three fields of law enforcement, commerce and incident response. Third, unlike the majority of the previous models, the effectiveness of which is unknown due to the lack of an evaluation process, the SDFIPM’s efficacy is demonstrated in relation to both components of ‘utility’ and ‘usability. Book chapter Cyber Security Practitioner's Guide Chapter 9 303 363 WORLD SCIENTIFIC 9789811204456 9789811204463 1 3 2020 2020-03-01 10.1142/9789811204463_0009 http://dx.doi.org/10.1142/9789811204463_0009 COLLEGE NANME Criminology, Sociology and Social Policy COLLEGE CODE CSSP Swansea University 2020-08-20T17:38:21.3092902 2020-08-12T00:32:06.7613211 Reza Montasari 0000-0001-7136-6753 1 Richard Hill 2 Victoria Carpenter 3 Amin Hosseinian-Far 4
title Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
spellingShingle Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
Reza Montasari
title_short Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
title_full Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
title_fullStr Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
title_full_unstemmed Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
title_sort Evaluation of the Standardised Digital Forensic Investigation Process Model (SDFIPM)
author_id_str_mv e420369ac98aaaa7f39248e39a847af1
author_id_fullname_str_mv e420369ac98aaaa7f39248e39a847af1_***_Reza Montasari
author Reza Montasari
author2 Reza Montasari
Richard Hill
Victoria Carpenter
Amin Hosseinian-Far
format Book chapter
container_title Cyber Security Practitioner's Guide
container_volume Chapter 9
container_start_page 303
publishDate 2020
institution Swansea University
isbn 9789811204456
9789811204463
doi_str_mv 10.1142/9789811204463_0009
publisher WORLD SCIENTIFIC
url http://dx.doi.org/10.1142/9789811204463_0009
document_store_str 0
active_str 0
description The existing digital forensic investigation process models (DFIPMs) have often been developed by digital forensic practitioners (DFPs) based on their own personal experience and on an ad-hoc basis, without attention to the establishment of standardisation within the field. This has prevented the institution of both scientific and generic processes that are urgently required within the different fields of law enforcement, commerce and incident response. Therefore, a novel model — the Standardised Digital Forensic Investigation Process Model (the SDFIPM) — was developed to address these shortcomings. Following the selected research methodology, Peffers et al.’s Design Science Research Process (DSRP), the SDFIPM was also subjected to both Demonstration and Evaluation activities to determine how well it would support the solution to the stated research problem. Therefore, this paper presents the results of the Demonstration and Evaluation activities applied to the proposed model. Our study makes three significant and novel contributions to the field of Digital Forensics (DF): First, it implements a process model, the design of which is inclusive of all the advantages of the previous models through their synthesis, harmonisation and extension. No such a model previously existed in the literature. Second, the SDFIPM is generic in that it can be applied within the three fields of law enforcement, commerce and incident response. Third, unlike the majority of the previous models, the effectiveness of which is unknown due to the lack of an evaluation process, the SDFIPM’s efficacy is demonstrated in relation to both components of ‘utility’ and ‘usability.
published_date 2020-03-01T04:09:48Z
_version_ 1737027578264289280
score 10.898576