MSc Defence: Ruan van Staden
Posted by mriekert on Tue 13 Feb 2018, 06:43:39 Tue 13 Feb 2018, 06:43:39
Date: 16 February 2018
Time: 12:00
Venue: IT 4-58
Title: FReadyPass: Investigating and Implementing an Email Forensic Readiness Architecture
Abstract:
Email forensic investigations rely on the collection and analysis of digital forensic evidence collected from email systems. Problems arise when the digital forensic evidence needed for the email forensic investigation is no longer available or there is a huge amount of email data that can be collected which take time to sift through to find the digital forensic evidence that is actually needed. The email digital forensic readiness (eDFR) architecture, as proposed in this dissertation, endeavours to address these problems. The eDFR architecture is based on the digital forensic readiness process described in ISO 27043. To ensure that the collected email data can be used as digital forensic evidence a process to validate the collected email data was created. The validation process uses data collected from the email IP headers to validate the data in the SMTP headers ensuring that the SMTP header data was not spoofed or in any way changed. The IP header data is stored in an audit database together with the email data so that the validation process can be executed at any time. An audit database is used to store the collected data to ensure that once the data is stored it cannot be tampered with. The digital forensic evidence collected using the eDFR architecture was found to be useable as part of an email forensic investigation. It was also found to be useful for other processes such as creating a graph representation of email sent and received by an email system or a group of email systems. It was shown that implementing the eDFR architecture could be achieved in an economical way that has almost no impact on current email systems.
Images
Links
Attachments
Additional News
- Department of Computer Science Receives a QS Ranking
- Standard Bank Technology Impact Challenge
- MSc Presentation: Stacey Omeleze
- Oral defense: Bennie Leonard
- Oral Defense: Prittish Dala
- Presentation by Dr Karen Renaud
- Dr. Mardé Helbig Selected as SAYAS Member
- UP Wins Annual Standard Bank Impact Challenge
- Coding Hat-Trick for the University of Pretoria
- COS 301 project prizes
- SAYAS Inauguration Ceremony
- Honours Induction
- MSc Presentation: Jade Abbott
- PhD oral presentation: Victor Kebande
- MSc Presentation: Elre Oldewage
- PhD oral defense: Tiaan Scheepers
- MSc Defence: Philip Trenwith
- MSc Defence: Ruan van Staden
- Prof Martin Olivier selected as a member of IAC
- Coding Competitions
- University of Pretoria participated in the Catalyst Coding Contest
- SIT Research Day
- Dr Linda Marshall Wins Departmental Teaching and Learning Award
- Autumn Graduation
- Coding Contests
- Dr Marde Helbig wins the TW Kambule-NSTF Emerging Researchers Award
- "We should all be Data Scientists"
- Another Dr in the department
- Deep Learning IndabaX to be hosted at UP
- Dr Vukosi Marivate selected for the DHET Future Professors Programme
- Mr Avinash Singh joins the Department as a Lecturer
- COVID-19: Computer science research group sets up databank to empower experts and citizens with accurate info
- International Collaboration on Verification of Multi-Agent Systems
- Dr Vukosi Marivate receives the "Mail and Guardian 200 Young South Africans 2020" award
- Call for COS301 projects now open
- Welcome Dr Thambo Nyathi
- Welcome Mr Werner Hauger