A Blockchain-Based Model Proposal to Enhance Digital Forensics Readiness

Mehmet Meral; Hasan Hüseyin Sayan

Article Details

A Blockchain-Based Model Proposal to Enhance Digital Forensics Readiness

Authors:

Mehmet Meral | Hasan Hüseyin Sayan

Publisher:

Süleyman Demirel University

Main Topics:

Elektronik | Ağ Mühendisliği | Teknoloji Yönetimi ve İş Modelleri

Journal:

Süleyman Demirel Üniversitesi Fen Bilimleri Enstitüsü Dergisi Vol.29 Issue 1, pp.228-242

Document Type:

Article

Publication Date:

4/2025

Document Language:

English

Document ID (Org No.):

2001345531

pISSN:

1308-6529

Keywords:

Abstract:

 Effective incident response mechanisms are crucial for maintaining system continuity during security incidents. Equally important is the secure preservation of forensic evidence and chain of custody records for potential legal proceedings. However, traditional methods of incident response and evidence handling can be vulnerable to tampering as they rely on the assumption of a pre-existing level of trust among the involved parties. In this study, we propose a blockchain-based model, DFIRChain, to record all operations within digital forensics and incident response DFIR processes on a private permissioned Hyperledger Fabric blockchain, from alert management to case management. By integrating our blockchain-based model into DFIR processes, we aim to ensure the integrity and authenticity of evidence, enhance legal compliance, and contribute to organizations digital forensic readiness.

 Effective incident response mechanisms are crucial for maintaining system continuity during security incidents. Equally important is the secure preservation of forensic evidence and chain of custody records for potential legal proceedings. However, traditional methods of incident response and evidence handling can be vulnerable to tampering as they rely on the assumption of a pre-existing level of trust among the involved parties. In this study, we propose a blockchain-based model, DFIRChain, to record all operations within digital forensics and incident response DFIR processes on a private permissioned Hyperledger Fabric blockchain, from alert management to case management. By integrating our blockchain-based model into DFIR processes, we aim to ensure the integrity and authenticity of evidence, enhance legal compliance, and contribute to organizations digital forensic readiness.

 Effective incident response mechanisms are crucial for maintaining system continuity during security incidents. Equally important is the secure preservation of forensic evidence and chain of custody records for potential legal proceedings. However, traditional methods of incident response and evidence handling can be vulnerable to tampering as they rely on the assumption of a pre-existing level of trust among the involved parties. In this study, we propose a blockchain-based model, DFIRChain, to record all operations within digital forensics and incident response DFIR processes on a private permissioned Hyperledger Fabric blockchain, from alert management to case management. By integrating our blockchain-based model into DFIR processes, we aim to ensure the integrity and authenticity of evidence, enhance legal compliance, and contribute to organizations digital forensic readiness.

 Etkili olay müdahale mekanizmaları, güvenlik olayları sırasında sistem sürekliliğini korumak için çok önemlidir. Aynı derecede önemli olan, olası yasal işlemler için delillerin ve koruma zinciri kayıtlarının güvenli bir şekilde saklanmasıdır. Bununla birlikte, olay müdahale ve delillerin yönetilmesine ilişkin geleneksel yöntemler, ilgili taraflar arasında önceden var olan bir güven düzeyinin varsayımına dayandığından, tahrifata karşı savunmasız olabilir. Bu çalışmada, alarm yönetiminden vaka yönetimine kadar adli bilişim ve olay müdahale DFIR süreçlerindeki tüm işlemleri, özel izinli Hyperledger Fabric blok zincirinde saklamak için blok zinciri tabanlı bir model olan DFIRChaini öneriyoruz. Blok zincir tabanlı modelimizi DFIR süreçlerine entegre ederek delillerin bütünlüğünü ve orijinalliğini sağlamayı, yasal uyumluluğu geliştirmeyi ve kuruluşların adli bilişim incelemelerine hazır bulunmalarına katkı sağlamayı amaçlıyoruz.

Article Details

A Blockchain-Based Model Proposal to Enhance Digital Forensics Readiness

Authors:

Mehmet Meral | Hasan Hüseyin Sayan

Publisher:

Süleyman Demirel University

Main Topics:

Elektronik | Ağ Mühendisliği | Teknoloji Yönetimi ve İş Modelleri

Journal:

Süleyman Demirel Üniversitesi Fen Bilimleri Enstitüsü Dergisi Vol.29 Issue 1, pp.228-242

Document Type:

Article

Publication Date:

4/2025

Document Language:

English

Document ID (Org No.):

2001345531

pISSN:

1308-6529

Digital forensics Incident response

Digital forensics readiness

Blockchain technologiesAdli bilişim

Olay müdahalesi

Adli bilişime hazır olma

Blok zincir teknolojileri

Issues

Article Details

A Blockchain-Based Model Proposal to Enhance Digital Forensics Readiness

Authors: Mehmet Meral | Hasan Hüseyin Sayan

Publisher: Süleyman Demirel University

Main Topics: Elektronik | Ağ Mühendisliği | Teknoloji Yönetimi ve İş Modelleri

Journal: Süleyman Demirel Üniversitesi Fen Bilimleri Enstitüsü Dergisi Vol.29 Issue 1, pp.228-242

Document Type: Article

Publication Date: 4/2025

Document Language: English

Document ID (Org No.): 2001345531

pISSN: 1308-6529

Digital forensics Incident response

Digital forensics readiness

Blockchain technologiesAdli bilişim

Olay müdahalesi

Adli bilişime hazır olma

Blok zincir teknolojileri

Issues

Authors:

Mehmet Meral | Hasan Hüseyin Sayan

Publisher:

Süleyman Demirel University

Main Topics:

Elektronik | Ağ Mühendisliği | Teknoloji Yönetimi ve İş Modelleri

Journal:

Süleyman Demirel Üniversitesi Fen Bilimleri Enstitüsü Dergisi Vol.29 Issue 1, pp.228-242

Document Type:

Article

Publication Date:

4/2025

Document Language:

English

Document ID (Org No.):

2001345531

pISSN:

1308-6529