AccountabilityFS: A File System Monitor for Forensic Readiness

Nordvik, Rune; Liao, Yi-Ching; Langweg, Hanno
Chapter
Accepted version
Thumbnail
View/Open
URI
http://hdl.handle.net/11250/2639688
Date
2014
Metadata
Show full item record
Collections
Original version
10.1109/JISIC.2014.61
Abstract
We present a file system monitor, AccountabilityFS, which prepares an organization for forensic analysis and incident investigation in advance by ensuring file system operation traces readily available. We demonstrate the feasibility of AccountabilityFS in terms of performance and storage overheads, and prove its reliability against malware attacks.
 
AccountabilityFS: A File System Monitor for Forensic Readiness
 
Publisher
Institute of Electrical and Electronics Engineers (IEEE)