A Socio-Technical Perspective on Threat Intelligence Informed Digital Forensic Readiness

In this article, a DFR framework is proposed focusing on the prioritization, triaging and selection of Indicators of Compromise (IoC) to be used when investigating of security incidents. A core component of the framework is the contextualization of the IoCs to the underlying organization, which can be achieved with the use of clustering and classification algorithms and a local IoC database.

MoreLess

Year of publication:	2017
Authors:	Katos, Vasilios ; Serketzis, Nikolaos ; Ilioudis, Christos ; Baltatzis, Dimitrios ; Pangalos, George J
Published in:	International Journal of Systems and Society (IJSS). - IGI Global, ISSN 2327-3992, ZDB-ID 2754438-2. - Vol. 4.2017, 2 (01.07.), p. 57-68
Publisher:	IGI Global
Subject:	Advanced Persistent Threats \| Digital Forensic Readiness \| Indicators of Compromise \| Intelligent Evidence Storage System \| IOC \| STIX \| TAXII \| Threat Intelligence

More details

Type of publication:	Article
Language:	English
Other identifiers:	10.4018/IJSS.2017070105 [DOI]
Source:	Other ZBW resources

Persistent link: https://www.econbiz.de/10012048014