The architecture of a digital forensic readiness management system

A coordinated approach to digital forensic readiness (DFR) in a large organisation requires the management and monitoring of a wide variety of resources, both human and technical. The resources involved in DFR in large organisations typically include staff from multiple departments and business unit...

Full description

Saved in:
Bibliographic Details
Published in:Computers & security 2013-02, Vol.32, p.73-89
Main Authors: Reddy, K., Venter, H.S.
Format: Article
Language:English
Subjects:
Applied sciences
Architecture
Business
Computer architecture
Computer forensics
Computer science
control theory
systems
Digital
Digital forensic management system
Digital forensic readiness
Exact sciences and technology
Forensic engineering
Forensic readiness
Forensic sciences
Human
Information systems
Information systems. Data bases
Management of digital forensic readiness
Management of forensics
Management systems
Memory and file management (including protection and security)
Memory organisation. Data processing
Monitoring
Optimization
Organisational forensic readiness
Prototypes
Software
Studies
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A coordinated approach to digital forensic readiness (DFR) in a large organisation requires the management and monitoring of a wide variety of resources, both human and technical. The resources involved in DFR in large organisations typically include staff from multiple departments and business units, as well as network infrastructure and computing platforms. The state of DFR within large organisations may therefore be adversely affected if the myriad human and technical resources involved are not managed in an optimal manner. This paper contributes to DFR by proposing the novel concept of a digital forensic readiness management system (DFRMS). The purpose of a DFRMS is to assist large organisations in achieving an optimal level of management for DFR. In addition to this, we offer an architecture for a DFRMS. This architecture is based on requirements for DFR that we ascertained from an exhaustive review of the DFR literature. We describe the architecture in detail and show that it meets the requirements set out in the DFR literature. The merits and disadvantages of the architecture are also discussed. Finally, we describe and explain an early prototype of a DFRMS.
ISSN:0167-4048
1872-6208
DOI:10.1016/j.cose.2012.09.008