你准备好了吗？迈向法医就绪系统工程
Are You Ready? Towards the Engineering of Forensic-Ready Systems
摘要：
随着安全事件继续影响组织，对系统“法医就绪”的需求越来越大-最大限度地利用证据，同时最大限度地降低调查成本。研究人员通过建议使用政策和流程，使系统与法医目标保持一致以及培训员工来支持组织法医准备工作。然而，最近的工作也提出了一个替代战略，以实施法医准备称为法医设计。这是一种方法，涉及将取证要求纳入系统开发生命周期的相关阶段，目的是设计取证就绪系统。虽然这种替代法医准备策略已在文献中讨论，没有以前的研究已经检查了组织实际使用这种方法来实施法医准备的程度。因此，我们调查在何种程度上组织考虑系统开发过程中的取证要求。我们首先评估了现有的研究，以确定实施取证准备的各种观点，然后进行了一项在线调查，以调查在系统开发生命周期中对取证要求的考虑。我们的研究结果提供了一个初步评估的程度，法医学的要求被认为是在组织内。然后，我们使用我们的研究结果，再加上文献，以确定一些研究的挑战，有关工程的法医准备系统。
英文摘要：
As security incidents continue to impact organisations, there is a growing demand for systems to be 'forensic ready'- to maximise the potential use of evidence whilst minimising the costs of an investigation. Researchers have supported organisational forensic readiness efforts by proposing the use of policies and processes, aligning systems with forensics objectives and training employees. However, recent work has also proposed an alternative strategy for implementing forensic readiness called forensic-by-design. This is an approach that involves integrating requirements for forensics into relevant phases of the systems development lifecycle with the aim of engineering forensic-ready systems. While this alternative forensic readiness strategy has been discussed in the literature, no previous research has examined the extent to which organisations actually use this approach for implementing forensic readiness. Hence, we investigate the extent to which organisations consider requirements for forensics during systems development. We first assessed existing research to identify the various perspectives of implementing forensic readiness, and then undertook an online survey to investigate the consideration of requirements for forensics during systems development lifecycles. Our findings provide an initial assessment of the extent to which requirements for forensics are considered within organisations. We then use our findings, coupled with the literature, to identify a number of research challenges regarding the engineering of forensic-ready systems.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
