Skip to main content
SpringerLink
Log in

Research Perspective on Digital Forensic Tools and Investigation Process

  • Chapter
  • First Online:
Illumination of Artificial Intelligence in Cybersecurity and Forensics

Part of the book series: Lecture Notes on Data Engineering and Communications Technologies ((LNDECT,volume 109))

Abstract

The digital forensic tool plays a crucial role in protecting from share trading fraud, financial fraud, identity theft, and money laundering. Investigators in Digital Forensic analysis have the right to use various forensic tools for investigation. Regretfully, several contemporary digital forensics technologies are lacking in a number of areas. The research aims to study different phases of digital forensic methods and various issues encountered during the investigation process. In addition, the study also focuses on the mindful analysis of different kinds of digital forensic tools. The methodology includes building, providing defense to any scene, proper review, effective communication, and identification. It also involves the identification of the digital investigation opportunities and recognizing all the policies for controlling proof. The tools and procedures that can be utilized to investigate digital crime are discussed in this article. Desktop forensic tool, Live Forensic tool, Operating System Forensic tool, and Email Forensic tool are some of the covered categories. AI-based network logs are evaluated using a variety of machine learning techniques and compared with various metrics such as accuracy, precision, recall, and F1-Score. A comparative analysis of popular tools in each category is tabulated to understand better, making it easy for the user to choose according to their needs. Furthermore, the paper presents how machine learning, deep learning, and natural language processing, a subset of artificial intelligence, can be effectively used in digital forensic investigation. Finally, the future direction of the challenges and study scope in digital forensics and artificial intelligence is also mentioned for potential researches.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 109.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 139.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Sindhu K (2012) Digital forensics and cyber crime datamining. J Inf Secur 03:196–201. https://doi.org/10.4236/jis.2012.33024

    Article  Google Scholar 

  2. Alhassan JK, Oguntoye RT, Misra S, Adewumi A, Maskeliūnas R, Damaševičius R (2018) Comparative evaluation of mobile forensic tools https://doi.org/10.1007/978-3-319-73450-7_11

  3. Olajide F, Misra S (2016) Forensic investigation and analysis of user input information in business application. Indian J Sci Technol 9. https://doi.org/10.17485/ijst/2016/v9i25/95211

  4. Osho O, Mohammed UL, Nimzing NN, Uduimoh AA, Misra S (2019) Forensic analysis of mobile banking apps. https://doi.org/10.1007/978-3-030-24308-1_49

  5. Malin CH, Casey E, Aquilina JM (2014) Chapter 1—Malware incident response: volatile data collection and examination on a live linux system. In: Malin CH, Casey E, Aquilina JM (eds) Malware forensics field guide for linux systems, syngress, pp 1–106. https://doi.org/10.1016/B978-1-59749-470-0.00001-2. ISBN 9781597494700

  6. Barker K, Askari M, Banerjee M, Ghazinour K, Mackas B, Majedi M, Pun S, Williams A (2009) A data privacy taxonomy. In: BNCOD 26: proceedings of the 26th British national conference on databases. Springer, Berlin, Heidelberg, pp 42–54

    Google Scholar 

  7. Patankar M, Bhandari D (2014) Forensic tools used in digital crime investigation forensic science

    Google Scholar 

  8. Kabir SMS (2016) Basic guidelines for research. In: An introductory approach for all disciplines, pp 168–180

    Google Scholar 

  9. Shimeall TJ, Spring JM (2014) Chapter 1—Motivation and security definitions. In: Shimeall TJ, Spring JM (eds) Introduction to information security, syngress, pp 1–20. ISBN 9781597499699

    Google Scholar 

  10. Hibshi H, Vidas T, Cranor L (2011) Usability of forensics tools: a user study. In: Proceedings—6th international conference on IT security Incident management and IT forensics, IMF, pp 81–91. https://doi.org/10.1109/IMF.2011.19

  11. Qadir AM, Varol A (2020) The role of machine learning in digital forensics. In: 2020 8th international symposium on digital forensics and security (ISDFS). IEEE, pp 1–5

    Google Scholar 

  12. Misra S (2020) A step by step guide for choosing project topics and writing research papers in ICT related disciplines. In: International conference on information and communication technology and applications. Springer, Cham, pp 727–744

    Google Scholar 

  13. Garfinkel SL (2010) Digital forensics research: the next 10 years. Int J Digit Foren Incid Response 7(Supplement):S64–S73 (Naval Postgraduate School, Monterey, USA)

    Google Scholar 

  14. Abirami A, Palanikumar S (2021) Proactive network packet classification using artificial intelligence. In: Artificial intelligence for cyber security: methods, issues and possible horizons or opportunities. Springer, Cham, pp 169–187

    Google Scholar 

  15. Yamin MM, Ullah M, Ullah H, Katt B (2021) Weaponized AI for cyber attacks. J Inf Secur Appl 57:102722

    Google Scholar 

  16. Kebande VR, Venter HS (2018) Novel digital forensic readiness technique in the cloud environment. Aust J Forensic Sci 50(5):552–591

    Article  Google Scholar 

  17. Xiao J, Li S, Xu Q (2019) Video-based evidence analysis and extraction in digital forensic investigation. IEEE Access 7:55432–55442

    Article  Google Scholar 

  18. Amato F, Cozzolino G, Moscato V, Moscato F (2019) Analyse digital forensic evidences through a semantic-based methodology and NLP techniques. Futur Gener Comput Syst 98:297–307

    Article  Google Scholar 

  19. Lee JU, Soh WY (2020) Comparative analysis on integrated digital forensic tools for digital forensic investigation. In: IOP conference series: materials science and engineering, vol 834, no 1. IOP Publishing, p 012034

    Google Scholar 

  20. Wu T, Breitinger F, O'Shaughnessy S (2020) Digital forensic tools: recent advances and enhancing the status quo. Forensic Sci Int Dig Investig 34:300999

    Google Scholar 

  21. Cosic J, Schlehuber C, Morog D (2021) Digital forensic investigation process in railway environment. In: 2021 11th IFIP international conference on new technologies, mobility and security (NTMS). IEEE, pp 1–6

    Google Scholar 

  22. Hemdan EED, Manjaiah DH (2021) An efficient digital forensic model for cybercrimes investigation in cloud computing. Multimed Tools Appl

    Google Scholar 

  23. Jang YJ, Kwak J (2015) Digital forensics investigation methodology applicable for social network services. Multimed Tools Appl 74(14):5029–5040

    Article  Google Scholar 

  24. Joseph DP, Norman J (2019) An analysis of digital forensics in cyber security. In: First international conference on artificial intelligence and cognitive computing. Springer, Singapore, pp 701–708

    Google Scholar 

  25. Costantini S, De Gasperis G, Olivieri R (2019) Digital forensics and investigations meet artificial intelligence. Ann Math Artif Intell 86(1):193–229

    Article  MathSciNet  Google Scholar 

  26. Krivchenkov A, Misnevs B, Pavlyuk D (2018) Intelligent methods in digital forensics: state of the art. In: International conference on reliability and statistics in transportation and communication. Springer, Cham, pp 274–284

    Google Scholar 

  27. Quick D, Choo KKR (2014) Impacts of increasing volume of digital forensic data: a survey and future research challenges. Digit Investig 11(4):273–294

    Article  Google Scholar 

  28. Mohammad RMA, Alqahtani M (2019) A comparison of machine learning techniques for file system forensics analysis. J Inf Secur Appl 46:53–61

    Google Scholar 

  29. Pluskal J, Lichtner O, Rysavy O (2018) Traffic classification and application identification in network forensics. In: IFIP international conference on digital forensics. Springer, Cham, pp 161–181

    Google Scholar 

  30. Alhawi OM, Baldwin J, Dehghantanha A (2018) Leveraging machine learning techniques for windows ransomware network traffic detection. In: Cyber threat intelligence. Springer, Cham, pp 93–106

    Google Scholar 

  31. Srinivasan S, Ravi V, Alazab M, Ketha S, Ala’M AZ, Padannayil SK (2021) Spam emails detection based on distributed word embedding with deep learning. In: Machine intelligence and big data analytics for cybersecurity applications. Springer, Cham, pp 161–189

    Google Scholar 

  32. Sachdeva S, Ali A (2021) Machine learning with digital forensics for attack classification in cloud network environment. Int J Syst Assur Eng Manag 1–10

    Google Scholar 

  33. Sarker IH, Furhad MH, Nowrozy R (2021) Ai-driven cybersecurity: an overview, security intelligence modeling and research directions. SN Comput Sci 2(3):1–18

    Google Scholar 

  34. Jadhao AR, Agrawal AJ (2016) A digital forensics investigation model for social networking site. In: Proceedings of the second international conference on information and communication technology for competitive strategies

    Google Scholar 

  35. Montasari R (2017) A standardised data acquisition process model for digital forensic investigations. Int J Inf Comput Secur

    Google Scholar 

  36. Kigwana I, Kebande VR, Venter HS (2017) A proposed digital forensic investigation framework for an eGovernment structure for Uganda. In: 2017 IST-Africa week conference (IST-Africa). IEEE, pp 1–8

    Google Scholar 

  37. Dokko J, Shin M (2018) A digital forensic investigation and verification model for industrial espionage. In: International conference on digital forensics and cyber crime. Springer, Cham, pp 128–146

    Google Scholar 

  38. Singh A, Ikuesan AR, Venter HS (2018) Digital forensic readiness framework for ransomware investigation. In: International conference on digital forensics and cyber crime. Springer, Cham, pp 91–105

    Google Scholar 

  39. Montasari R, Hill R, Carpenter V, Hosseinian-Far A (2019) The standardised digital forensic investigation process model (SDFIPM). In: Blockchain and clinical trial. Springer, Cham, pp 169–209

    Google Scholar 

  40. Mothi D, Janicke H, Wagner I (2020) A novel principle to validate digital forensic models. Forensic Sci Int: Dig Investig 33:200904

    Google Scholar 

  41. Sun D, Zhang X, Choo KKR, Hu L, Wang F (2021) NLP-based digital forensic investigation platform for online communications. Comput Secur 104:102210

    Google Scholar 

  42. Babiker M, Karaarslan E, Hoscan Y (2018) Web application attack detection and forensics: a survey. In: 2018 6th international symposium on digital forensic and security (ISDFS). IEEE, pp 1–6

    Google Scholar 

  43. Henseler H, van Loenhout S (2018) Educating judges, prosecutors and lawyers in the use of digital forensic experts. Digit Investig 24:S76–S82

    Article  Google Scholar 

  44. Kamal KMA, Alfadel M, Munia MS (2016) Memory forensics tools: Comparing processing time and left artifacts on volatile memory. In: 2016 international workshop on computational intelligence (IWCI). IEEE, pp 84–90

    Google Scholar 

  45. Dietzel C, Wichtlhuber M, Smaragdakis G, Feldmann A (2018) Stellar: network attack mitigation using advanced blackholing. In: Proceedings of the 14th international conference on emerging networking experiments and technologies, pp 152–164

    Google Scholar 

  46. Dizdarevic A, Baraković S, Husic JB (2019) Examination of digital forensics software tools performance: open or not?. In: International symposium on innovative and interdisciplinary applications of advanced technologies. Springer, Cham, pp 442–451

    Google Scholar 

  47. Lovanshi M, Bansal P (2018) Benchmarking of digital forensic tools. In: International conference on computational vision and bio inspired computing. Springer, Cham, pp 939–947

    Google Scholar 

  48. Quick D, Choo KKR (2018) Digital forensic data reduction by selective imaging. In: Big digital forensic data. Springer, Singapore, pp 69–92

    Google Scholar 

  49. Tabuyo-Benito R, Bahsi H, Peris-Lopez P (2018) Forensics analysis of an online game over steam platform. In: International conference on digital forensics and cyber crime. Springer, Cham, pp 106–127

    Google Scholar 

  50. Aggarwal P, Gonzalez C, Dutt V (2020) HackIt: a real-time simulation tool for studying real-world cyberattacks in the laboratory. In: Handbook of computer networks and cyber security. Springer, Cham, pp 949–959

    Google Scholar 

  51. Munoz FR, Vega EAA, Villalba LJG (2018) Analyzing the traffic of penetration testing tools with an IDS. J Supercomput 74(12):6454–6469

    Article  Google Scholar 

  52. Kenkre PS, Pai A, Colaco L (2015) Real time intrusion detection and prevention system. In: Proceedings of the 3rd international conference on frontiers of intelligent computing: theory and applications (FICTA) 2014. Springer, Cham, pp 405–411

    Google Scholar 

  53. Agrawal N, Tapaswi S (2015) Wireless rogue access point detection using shadow honeynet. Wirel Pers Commun 83(1):551–570

    Article  Google Scholar 

  54. Ghafarian A, Wood C (2018) Forensics data recovery of skype communication from physical memory. In: Science and information conference. Springer, Cham, pp 995–1009

    Google Scholar 

  55. Hassan NA (2019) Analyzing digital evidence. In: Dig Forensics Basics. Apress, Berkeley, CA, pp 141–177

    Google Scholar 

  56. Seo J, Lee S, Shon T (2015) A study on memory dump analysis based on digital forensic tools. Peer-to-Peer Netw Appl 8(4):694–703

    Article  Google Scholar 

  57. Hassan NA (2019) Computer forensics lab requirements. In: Digital forensics basics. Apress, Berkeley, CA, pp 69–91

    Google Scholar 

  58. Alqahtany S, Clarke N, Furnell S, Reich C (2016) A forensic acquisition and analysis system for IaaS. Clust Comput 19(1):439–453

    Article  Google Scholar 

  59. Barton TEA, Azhar MHB (2017) Open source forensics for a multi-platform drone system. In: International conference on digital forensics and cyber crime. Springer, Cham, pp 83–96

    Google Scholar 

  60. Alsmadi I, Burdwell R, Aleroud A, Wahbeh A, Al-Qudah M, Al-Omari A (2018) Web forensics-chapter competencies. In: Practical information security. Springer, Cham, pp 283–296

    Google Scholar 

  61. Chhabra GS, Bajwa DS (2015) Review of email system, security protocols and email forensics. Int J Comput Sci Commun Netw 5(3):201–211

    Google Scholar 

  62. Singh V (2015) Forensic investigation of email artefacts by using various tools 2:2321–613

    Google Scholar 

  63. Al Fahdi M, Clarke NL, Li F, Furnell SM (2016) A suspect-oriented intelligent and automated computer forensic analysis. Digit Investig 18:65–76

    Article  Google Scholar 

  64. Guarino A (2013) Digital forensics as a big data challenge. In: ISSE 2013 securing electronic business processes. Springer, Wiesbaden, pp 197–203

    Google Scholar 

  65. Quick D, Choo KKR (2016) Big forensic data reduction: digital forensic images and electronic evidence. Clust Comput 19(2):723–740

    Article  Google Scholar 

  66. Alabdulsalam S, Schaefer K, Kechadi T, Le-Khac NA (2018) Internet of things forensics—Ch:allenges and a case study. In: IFIP international conference on digital forensics. Springer, Cham, pp 35–48

    Google Scholar 

  67. Karie NM, Venter HS (2015) Taxonomy of challenges for digital forensics. J Forensic Sci 60(4):885–893

    Article  Google Scholar 

  68. Hraiz S (2017) Challenges of digital forensic investigation in cloud computing. In: 2017 8th international conference on information technology (ICIT)

    Google Scholar 

  69. Krishnan S, Zhou B, An MK (2019) Smartphone forensic challenges. Int J Comput Sci Secur (IJCSS) 13(5):183

    Google Scholar 

  70. Caviglione L, Wendzel S, Mazurczyk W (2017) The future of digital forensics: challenges and the road ahead. IEEE Secur Priv 6:12–17

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. JIS Institute of Advanced Studies & Research, JIS University, Kolkata, India

    Kousik Barik, Karabi Konar & Saptarshi Das

  2. Bannari Amman Institute of Technology, Erode, India

    A. Abirami

Authors
  1. Kousik Barik
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. A. Abirami
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Karabi Konar
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Saptarshi Das
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Østfold University College, Halden, Norway

    Sanjay Misra

  2. Computer Science and Engineering, Sri Sivasubramaniya Nadar College of Engineering, Chennai, Tamil Nadu, India

    Chamundeswari Arumugam

Rights and permissions

Reprints and permissions

Copyright information

© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Barik, K., Abirami, A., Konar, K., Das, S. (2022). Research Perspective on Digital Forensic Tools and Investigation Process. In: Misra, S., Arumugam, C. (eds) Illumination of Artificial Intelligence in Cybersecurity and Forensics. Lecture Notes on Data Engineering and Communications Technologies, vol 109. Springer, Cham. https://doi.org/10.1007/978-3-030-93453-8_4

Download citation

Publish with us

Policies and ethics

Search

Navigation