Forensic experts' view of forensic-ready software systems: A qualitative study
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14330%2F23%3A00131216" target="_blank" >RIV/00216224:14330/23:00131216 - isvavai.cz</a>
Result on the web
<a href="https://onlinelibrary.wiley.com/doi/abs/10.1002/smr.2598" target="_blank" >https://onlinelibrary.wiley.com/doi/abs/10.1002/smr.2598</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1002/smr.2598" target="_blank" >10.1002/smr.2598</a>
Alternative languages
Result language
angličtina
Original language name
Forensic experts' view of forensic-ready software systems: A qualitative study
Original language description
Abstract Software engineers widely acknowledge the inclusion of security requirements in the early stages of the development process. However, the need to prepare the software for the failure of the implemented security controls and subsequent investigation of the incident is often not discussed. Forensic-ready software systems represent an evolution of secure systems being designed for the eventual digital forensic investigation. However, their exact properties remain largely unexplored, beyond preliminary high-level conceptualizations of requirements and capabilities. Further obstacles hindering the adoption of forensic-ready software systems are the different priorities and goals of involved parties and a gap in the digital forensics expertise of software engineers. In this paper, we conduct an empirical qualitative study identifying the problems and needs of forensic readiness while framing the notion of an ideal forensic-ready software system and how it should treat potential evidence. To this end, we conducted semisupervised interviews with digital forensics experts on their idea, experience, and suggestions. The results provide insights into the needs of the experts to facilitate the definition of correct requirements towards forensic-ready software systems to support the anticipated investigations properly.
Czech name
—
Czech description
—
Classification
Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
10200 - Computer and information sciences
Result continuities
Project
<a href="/en/project/EF16_019%2F0000822" target="_blank" >EF16_019/0000822: CyberSecurity, CyberCrime and Critical Information Infrastructures Center of Excellence</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)<br>S - Specificky vyzkum na vysokych skolach
Others
Publication year
2023
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Name of the periodical
Journal of Software: Evolution and Process
ISSN
2047-7481
e-ISSN
—
Volume of the periodical
Neuveden
Issue of the periodical within the volume
e2598
Country of publishing house
US - UNITED STATES
Number of pages
23
Pages from-to
1-23
UT code for WoS article
001026921200001
EID of the result in the Scopus database
2-s2.0-85163320859