A New Incident Event Discovery Model Based On Traceability Matrix For Mobile Forensics Investigation

Mas'ud, Mohd Zaki and Selamat, Siti Rahayu and Sahib, Shahrin and Yusof, Robiah and Abdollah, Mohd Faizal (2019) A New Incident Event Discovery Model Based On Traceability Matrix For Mobile Forensics Investigation. Project Report. Universiti Teknikal Malaysia Melaka, Melaka, Malaysia. (Submitted)

Text (24 Pages) A New Incident Event Discovery Model Based On Traceability Matrix For Mobile Forensics Investigation.pdf - Submitted Version Restricted to Registered users only Download (529kB)

Abstract

In recent years mobile devices has been providing the same capabilities of traditional personal computer particularly when it provide the connectivity to various ubiquitous services.mobile devices are among the prominent mobile devices use by the community and the amount of data stored in such devices is much less as compared to the amount of data stored in computers,but this small amount of data is potential to reveal useful information for mobile malware attack incident investigation.Hence,all of this information inside mobile devices can be used as a source of evidence in digital forensic investigations.However,the current increase of prevalence of mobile devices has cause a problem in discovering complex and huge volume of evidence.This lead to the difficulty in cross referencing and linking meaningful relationships between the incident events.Previous study only foresees investigation as identifying the scope of an attack instead of the actual attacker and assessing the liability of an organization without dealing with issue of origin identification and cross referencing in investigation process.Based on this reason,this research will construct and test the traceability matrix in mobile forensic investigation to identify the relationship between the components of forensic investigation and the incident events discovered.The traceability process in a mobile malware incident has become a crucial part of the digital forensic investigation process due to its capability to map the events of an incident from different sources in collecting evidence of an incident to be used for other additional investigation aspects.Thus,the need of finding and mapping evidence in mobile platform has also become more important.Based on this reason,this research project proposes the adaptability of the traceability matrix to represent the relationship in the digital forensic investigation process by assimilating the traceability features in the android base mobile device environment. The aim of this research is to construct the traceability matrix in mobile forensic investigation to identify the relationship between the components of forensic investigation and the incident events discovered on Android-based mobile devices.

Actions (login required)

View Item