Systematic Framework/ Model of Digital Forensics for Closed IT Organizations in Pakistan

Abstract

Technology is budding day by day and impacting human life significantly. Mankind molds itself according to the advancement in the technology. This technology innovation also poses bad impacts on the society as same is being used by criminals and cyber terrorists. Now a days, almost all the businesses and organizations are heavily relying on Info Systems and Digital Data hence prone to breech of data and cyber attacks. Organizations with air gapped systems installed are no exception to these threats. In order to cope-up with these modern crimes and threats, along with the cyber security measures the field of Digital Forensics also evolves itself with the passage of time. In this thesis, we analyze various digital forensics frameworks/ models according to the technology challenges, of that time, faced by investigators/ security experts and remained focused on the digital forensics models proposed for the security incidents/ attacks/ breeches occurred in closed IT Organizations. The overall evolution process of digital forensics frameworks/ models is classified into four phases in this thesis in order to better map the technology challenges with proposed models and comparative study on these models have undergone to propose a systematic framework/ model of digital forensics for closed IT organizations while considering the evolving and dynamic digital environment of Pakistan. Furthermore, overall confidentiality, integrity, privacy and security of digital forensics process have been ensured in proposed framework/ model by using cryptographic techniques. This thesis also helps in determine the future research directions and motivations.