Secure SaaS Knowledge Management System for Digital Forensics

Digital forensics aim at preserving, identifying, extracting and analyzing digital evidence with technical approaches, and ensuring the integrity, confidentiality and fairness of forensic procedures along with the results, which could be an important basis on the court. Consequently, digital forensics can be regarded as a science of dealing with information security related events or solving the problems of computer crimes. Due to the digitalized property of digital evidence and for achieving above mentioned properties, we must adopt all kinds of cryptographic techniques such as signcryption, authenticated encryption, message recovery signature and proxy signature schemes to ensure that digital evidence will not be damaged or modified during transmission. On the other hand, for integrated management of forensic documents in each phase and to achieve the goals of experience accumulation and knowledge sharing, we elaborate on the cloud computing to establish a SaaS (Software as a Service) knowledge management platform for digital forensics. By importing different knowledge forms and providing protection of documents with time-bounded confidentiality, forensic persons can create more forensic knowledge of practical benefits and share experiences of each other through the platform. This project is devoted to the analysis, design and integration of knowledge management platform for digital forensics. We hope to integrate current cryptographic techniques for ensuring the security of forensic procedures, and to centralize distributed forensic documents in the knowledge management platform for helping forensic persons with experience sharing and establishing complete forensic knowledge database. This project will achieve Integrity, Accuracy, Consistency, Compliance, and Authenticity for digital evidences. In summary, this project achieves the following goals: (1) We will design and implement a SaaS knowledge management platform for digital forensics. (2) We will design and establish standard operation process and forms. (3) We will design and establish knowledge and forms for digital forensics. (4) We will design a privilege management mechanism for the SaaS knowledge management platform. (5) We will design and implement some cryptographic mechanisms for protecting digital evidence on knowledge management system. (6) We will design and implement a privilege management mechanism for protecting digital evidences. (7) We will design and implement some security mechanisms for securing singing the report of digital forensics. The project is a three year project and had applied the funding of Ministry of Science and Technology (MOST), but MOST does not agree to support the funding due to the limitation of priority and number of projects. However, the research team still perform the project according to the project schedule and submit the project outcomes during the time period is 2018/8/1 to 2015/7/31. In this project, we consider the project outcomes as “the outcomes of previous project tasks”. We will apply two year funding from MOST based on the outcomes of previous project tasks, and complete all above claimed project tasks.

Project ID:PB10408-5753
External Project ID:MOST104-2221-E182-028