Ibrahim, M and Dehghantanha, A 2014, 'Modelling based approach for reconstructing evidence of VoIP malicious attacks' , International Journal of Cyber-Security and Digital Forensics (IJCSDF), 3 (4) , pp. 183-199.
- Published Version
Download (673kB) | Preview
Voice over Internet Protocol (VoIP) is a new communication technology that uses internet protocol in providing phone services. VoIP provides various forms of benefits such as low monthly fee and cheaper rate in terms of long distance and international calls. However, VoIP is accompanied with novel security threats. Criminals often take advantages of such security threats and commit illicit activities. These activities require digital forensic experts to acquire, analyses, reconstruct and provide digital evidence. Meanwhile, there are various methodologies and models proposed in detecting, analysing and providing digital evidence in VoIP forensic. However, at the time of writing this paper, there is no model formalized for the reconstruction of VoIP malicious attacks. Reconstruction of attack scenario is an important technique in exposing the unknown criminal acts. Hence, this paper will strive in addressing that gap. We propose a model for reconstructing VoIP malicious attacks. To achieve that, a formal logic approach called Secure Temporal Logic of Action(S-TLA+ ) was adopted in rebuilding the attack scenario. The expected result of this model is to generate additional related evidences and their consistency with the existing evidences can be determined by means of S-TLA+ model checker.
|Themes:||Media, Digital Technology and the Creative Economy|
|Schools:||Schools > School of Computing, Science and Engineering > Salford Innovation Research Centre (SIRC)|
|Journal or Publication Title:||International Journal of Cyber-Security and Digital Forensics (IJCSDF)|
|Publisher:||Society of Digital Information and Wireless Communications (SDIWC)|
|Funders:||University Putra Malaysia|
|Depositing User:||Dr. Ali Dehghantanha|
|Date Deposited:||24 Mar 2015 11:17|
|Last Modified:||29 Oct 2015 00:18|
Actions (login required)
|Edit record (repository staff only)|