Using Signaling Information in Telecom Network Forensics

Moore, Tyler; Meehan, Anthony; Manes, Gavin; Shenoi, Sujeet

doi:10.1007/0-387-31163-7_15

Cited by 2 publications

(2 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The signaling core of public telephone networks generates valuable data about phone calls and calling patterns that may be used in criminal investigations, especially with the widespread uptake in voice‐over‐IP (VoIP) systems. However, much of these data are not maintained by service providers and are therefore unavailable to law enforcement agencies . If such data can be collected and stored, it can be analyzed forensically and greatly facilitate the prosecution of criminals in a court of law.…”

Section: The Ontology For Digital Forensic Disciplinesmentioning

confidence: 99%

Toward a General Ontology for Digital Forensic Disciplines

Karie

Venter

2014

Journal of Forensic Sciences

View full text Add to dashboard Cite

Ontologies are widely used in different disciplines as a technique for representing and reasoning about domain knowledge. However, despite the widespread ontology-related research activities and applications in different disciplines, the development of ontologies and ontology research activities are still wanting in digital forensic disciplines. This paper therefore presents the case for establishing an ontology for digital forensic disciplines. Such an ontology would enable better categorisation of digital forensic disciplines, as well as help with the development of methodologies that can offer direction in different areas of digital forensics, such as professional specialisation, certifications, development digital forensic tools, curricula and educational materials. In addition, the ontology presented in this paper can be used, for example, to better organise digital forensics domain knowledge and explicitly describe the discipline's semantics in a common way.Finally, this paper is meant to spark discussions and further research on an internationally agreed ontological distinction of the digital forensic disciplines. Digital forensic disciplines ontology is a novel approach towards organising the digital forensics domain knowledge and constitutes the main contribution of this paper.KEYWORDS: forensic science, digital forensics, ontology, ontological distinction, digital forensics disciplines, digital forensics sub-disciplines 2 `Ontology, as defined by Van Rees (1), is a set of well-defined concepts describing a specific domain of interest. According to Grüber (2), an ontology is a specification of a conceptualisation. More precisely, Smith et al (3) defines ontology as an explicit formal specification of how to represent entities that exist in a given domain of interest and the relationships that hold among them. However, for an ontology to be useful, it must represent a shared, agreed-upon conceptualisation (4), in other words it should be accepted by a group or community.Ontologies have been used in many contexts and for many purposes (5). In recent years, however, the development of ontology has become common in many different domains (6). This is backed up by the fact that ontologies can be used to generate a common definition, knowledge and understanding (1) of a domain.Therefore, to help create a common definition that enhances the sharing and reuse of formal represented knowledge (2) in digital forensics (DF), it is important to develop ontologies that define the common entities in which the shared knowledge in this field can be represented. Ontologies in DF can also promote the reasoning about existing disciplines and sub-disciplines within the domain, as well as describe the domain.This paper presents an ontology for the DF disciplines in an attempt to advance the domain and enhance the sharing and reuse of formal represented knowledge (2) in DF. In the authors' opinion, the ontology presented here can be viewed as a formal way of representing shared knowledge in the digital forensics dom...

show abstract

Section: The Ontology For Digital Forensic Disciplinesmentioning

confidence: 99%

Toward a General Ontology for Digital Forensic Disciplines

Karie

Venter

2014

Journal of Forensic Sciences

View full text Add to dashboard Cite

show abstract

“…Signaling messages provide data about phone calls---not the content of phone conversations. Therefore, collecting and analyzing signaling messages may not be subject to the same legal restrictions as recording voice conversations [23]. In the second kind of tap call content, the actual contents of a call are passed to LEA.…”

Section: Known Usesmentioning

confidence: 99%

Misuse patterns in VoIP

Pelaez

Fernández

Larrondo-Petrie

2009

Security Comm Networks

View full text Add to dashboard Cite

To protect against security attacks, it is necessary to be aware of typical risks and to have a good understanding of how vulnerabilities can be exploited. Security patterns are useful to guide the security design of systems by providing generic solutions that can stop a variety of attacks, but it is not clear to an inexperienced designer what pattern should be applied to stop a specific attack. Additionally, security patterns are not useful for network forensics purposes because they do not emphasize the modus operandi of the attack. As a complement and improvement, we have proposed a new type of pattern, the misuse pattern. This pattern describes, from the point of view of the attacker, how a type of information misuse is performed, analyzes the ways of stopping the attack, and considers how to trace the attack once it has happened. To apply this approach, we need a catalog of misuse patterns. In this paper, we restrict our interest to voice over Internet protocol (VoIP) and we present a set of typical and frequent misuse patterns for VoIP: denial of service (DoS), call interception, theft of service, and call hijacking on VoIP. These patterns could be the start of a comprehensive catalog that would be of practical value to developers, testers, users, and researchers. Published in

show abstract

Using Signaling Information in Telecom Network Forensics

Cited by 2 publications

References 2 publications

Toward a General Ontology for Digital Forensic Disciplines

Toward a General Ontology for Digital Forensic Disciplines

Misuse patterns in VoIP

Contact Info

Product

Resources

About