Intensional Cyberforensics
arXiv:1312.0466
Abstract
This work focuses on the application of intensional logic to cyberforensic analysis and its benefits and difficulties are compared with the finite-state-automata approach. This work extends the use of the intensional programming paradigm to the modeling and implementation of a cyberforensics investigation process with backtracing of event reconstruction, in which evidence is modeled by multidimensional hierarchical contexts, and proofs or disproofs of claims are undertaken in an eductive manner of evaluation. This approach is a practical, context-aware improvement over the finite state automata (FSA) approach we have seen in previous work. As a base implementation language model, we use in this approach a new dialect of the Lucid programming language, called Forensic Lucid, and we focus on defining hierarchical contexts based on intensional logic for the distributed evaluation of cyberforensic expressions. We also augment the work with credibility factors surrounding digital evidence and witness accounts, which have not been previously modeled. The Forensic Lucid programming language, used for this intensional cyberforensic analysis, formally presented through its syntax and operational semantics. In large part, the language is based on its predecessor and codecessor Lucid dialects, such as GIPL, Indexical Lucid, Lucx, Objective Lucid, and JOOIP bound by the underlying intensional programming paradigm.
412 pages, 94 figures, 18 tables, 19 algorithms and listings; PhD thesis; v2 corrects some typos and refs; also available on Spectrum at http://spectrum.library.concordia.ca/977460/
References in corpus (12)
- Complete Context Calculus Design and Implementation in GIPSY
- Formally Specifying and Proving Operational Aspects of Forensic Lucid in Isabelle
- Computer-Assisted Interactive Documentary and Performance Arts in Illimitable Space
- Managing Distributed MARF with SNMP
- A Java Data Security Framework (JDSF) and its Case Studies
- MARFCAT: Transitioning to Binary and Larger Data Sets of SATE IV
- Towards a Heuristic Categorization of Prepositional Phrases in English with WordNet
- Towards Improving Validation, Verification, Crash Investigations, and Event Reconstruction of Flight-Critical Systems with Self-Forensics
- Towards Automated Deduction in Blackmail Case Analysis with Forensic Lucid
- OCT Segmentation Survey and Summary Reviews and a Novel 3D Segmentation Algorithm and a Proof of Concept Implementation
- Ftklipse - Design and Implementation of an Extendable Computer Forensics Environment: Software Requirements Specification Document
- Ftklipse - Design and Implementation of an Extendable Computer Forensics Environment: Specification Design Document