Serketzis, N., Katos, V., Ilioudis, C., Baltatzis, D. and Pangalos, G., 2018. A Socio-Technical Perspective on Threat Intelligence Informed Digital Forensic Readiness. International Journal of Systems and Society, 4 (2), 5.
Full text available as:
|
PDF
A-Socio-Technical-Perspective-on-Threat-Intelligence-Informed-Digital-Forensic-Readiness.pdf - Published Version Available under License Creative Commons Attribution Non-commercial. 596kB | |
Copyright to original material in this document is with the original owner(s). Access to this content through BURO is granted on condition that you use it only for research, scholarly or other non-commercial purposes. If you wish to use it for any other purposes, you must contact BU via BURO@bournemouth.ac.uk. Any third party copyright material in this document remains the property of its respective owner(s). BU grants no licence for further use of that third party material. |
Abstract
In this article, a DFR framework is proposed focusing on the prioritization, triaging and selection of Indicators of Compromise (IoC) to be used when investigating of security incidents. A core component of the framework is the contextualization of the IoCs to the underlying organization, which can be achieved with the use of clustering and classification algorithms and a local IoC database.
Item Type: | Article |
---|---|
ISSN: | 2327-3984 |
Uncontrolled Keywords: | advanced persistent threats; digital forensic readiness; indicators of compromise; intelligent evidence storage system; IOC; STIX; TAXII; threat intelligence |
Group: | Faculty of Science & Technology |
ID Code: | 34180 |
Deposited By: | Symplectic RT2 |
Deposited On: | 22 Jun 2020 13:36 |
Last Modified: | 14 Mar 2022 14:22 |
Downloads
Downloads per month over past year
Repository Staff Only - |