The Use of Ontology Framework for Automation Digital Forensics Investigation

Authors: Ahmad Luthfi

Abstract:

One of the main goals of a computer forensic analyst is to determine the cause and effect of the acquisition of a digital evidence in order to obtain relevant information on the case is being handled. In order to get fast and accurate results, this paper will discuss the approach known as Ontology Framework. This model uses a structured hierarchy of layers that create connectivity between the variant and searching investigation of activity that a computer forensic analysis activities can be carried out automatically. There are two main layers are used, namely Analysis Tools and Operating System. By using the concept of Ontology, the second layer is automatically designed to help investigator to perform the acquisition of digital evidence. The methodology of automation approach of this research is by utilizing Forward Chaining where the system will perform a search against investigative steps and atomically structured in accordance with the rules of the Ontology.

Keywords: Ontology, Framework, Automation, Forensics.

Digital Object Identifier (DOI): doi.org/10.5281/zenodo.1091430

References:

[1] Auerbach. "Computer Crime Investigation & Computer Forensics." Information Systems Security 6 (2011): 56.
[2] Ashley Brinson, Abigail Robinson, Marcus Rogers. "A Cyber Forensics Ontology: Creating a New Approach to Studying Cyber Forensics." Digital Investigation (Elsevier), 2006.
[3] Sanin, Cesar. "An OWL Ontology of Set of Experience Knowledge Structure." Journal of Universal Computer Science 13 (2007): 209-223.
[4] Bradley Schatz, George Mohay and Andrew Clark. "Rich Event Representation for Computer Forensics." Proceedings of the Fifth Asia Pacific Industrial Engineering and Management Systems Conference. Queensland: APIEMS, 2004. 2.12.1.
[5] Victor Raskin, Christian F. Hempelmann, and Katrina E. Triezenberg. "Semantic Forensics: An Application of Ontological Semantics to Information Assurance." 2011.
[6] Noy N, McGuinness D. Ontology Development 101: A Guide to Creating Your First Ontology. Available from: http://protege. stanford.edu/publications/ontology_development/ ontology101-noy-mcguinness.html; 2001 (retrieved 15.01.06)