An on-site digital investigation methodology for data leak case

Seokhee Lee, Keungi Lee, Jong Hyuk Park, Sangjin Lee

Research output: Contribution to journalArticle

Abstract

The ever growing storage device capacity poses a severe limit to the standard digital forensics collection procedures based on duplicating the original storage device by creating a bit-by-bit copy. Such a traditional procedure is followed, even if the goal of the investigation is to find a limited quantity of digital objects to support or refute an investigative hypothesis related to a precise case category. Therefore, in this paper, we propose a new methodology to deal with data leak cases, by applying an intelligent collection paradigm, a fast analysis approach that reduces investigation time.

Original languageEnglish
Pages (from-to)2616-2626
Number of pages11
JournalSecurity and Communication Networks
Volume7
Issue number12
DOIs
Publication statusPublished - 2014 Jan 1

Fingerprint

Digital forensics

Keywords

  • Data leak detection
  • Intelligent imaging
  • On-the-spot live investigations

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Information Systems

Cite this

An on-site digital investigation methodology for data leak case. / Lee, Seokhee; Lee, Keungi; Park, Jong Hyuk; Lee, Sangjin.

In: Security and Communication Networks, Vol. 7, No. 12, 01.01.2014, p. 2616-2626.

Research output: Contribution to journalArticle

Lee, Seokhee ; Lee, Keungi ; Park, Jong Hyuk ; Lee, Sangjin. / An on-site digital investigation methodology for data leak case. In: Security and Communication Networks. 2014 ; Vol. 7, No. 12. pp. 2616-2626.
@article{a67a92b3f7ca4fa09e17dbb988a57b8b,
title = "An on-site digital investigation methodology for data leak case",
abstract = "The ever growing storage device capacity poses a severe limit to the standard digital forensics collection procedures based on duplicating the original storage device by creating a bit-by-bit copy. Such a traditional procedure is followed, even if the goal of the investigation is to find a limited quantity of digital objects to support or refute an investigative hypothesis related to a precise case category. Therefore, in this paper, we propose a new methodology to deal with data leak cases, by applying an intelligent collection paradigm, a fast analysis approach that reduces investigation time.",
keywords = "Data leak detection, Intelligent imaging, On-the-spot live investigations",
author = "Seokhee Lee and Keungi Lee and Park, {Jong Hyuk} and Sangjin Lee",
year = "2014",
month = "1",
day = "1",
doi = "10.1002/sec.405",
language = "English",
volume = "7",
pages = "2616--2626",
journal = "Security and Communication Networks",
issn = "1939-0122",
publisher = "John Wiley and Sons Inc.",
number = "12",

}

TY - JOUR

T1 - An on-site digital investigation methodology for data leak case

AU - Lee, Seokhee

AU - Lee, Keungi

AU - Park, Jong Hyuk

AU - Lee, Sangjin

PY - 2014/1/1

Y1 - 2014/1/1

N2 - The ever growing storage device capacity poses a severe limit to the standard digital forensics collection procedures based on duplicating the original storage device by creating a bit-by-bit copy. Such a traditional procedure is followed, even if the goal of the investigation is to find a limited quantity of digital objects to support or refute an investigative hypothesis related to a precise case category. Therefore, in this paper, we propose a new methodology to deal with data leak cases, by applying an intelligent collection paradigm, a fast analysis approach that reduces investigation time.

AB - The ever growing storage device capacity poses a severe limit to the standard digital forensics collection procedures based on duplicating the original storage device by creating a bit-by-bit copy. Such a traditional procedure is followed, even if the goal of the investigation is to find a limited quantity of digital objects to support or refute an investigative hypothesis related to a precise case category. Therefore, in this paper, we propose a new methodology to deal with data leak cases, by applying an intelligent collection paradigm, a fast analysis approach that reduces investigation time.

KW - Data leak detection

KW - Intelligent imaging

KW - On-the-spot live investigations

UR - http://www.scopus.com/inward/record.url?scp=84911868286&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84911868286&partnerID=8YFLogxK

U2 - 10.1002/sec.405

DO - 10.1002/sec.405

M3 - Article

VL - 7

SP - 2616

EP - 2626

JO - Security and Communication Networks

JF - Security and Communication Networks

SN - 1939-0122

IS - 12

ER -