A Digital Investigation Tool based on Data Fusion in Management of Cyber Security Systems

With overwhelming use of Internet, security in Cyberspace has become a prime concern. The forensic digital analysis as a whole, in its relative infancy, is the unwilling victim of the rapid advancement of computer technology, so it is at the mercy of ever more new and complex computing approaches. Forensic digital analysis is unique among the forensic sciences in that it is inherently mathematical and generally comprises more data from an investigation than is present in other types of forensics. The digital investigation process can be driven using numerous forensic investigation models. Among these is the need to analyze forensic materials over complex chains of evidence in a wide variety of heterogeneous computing platforms, environments and transports. This paper compares and contrasts different forensic investigation models and highlights the main components of forensic investigation model. It also proposes a fusion based investigation tool by grouping and merging the same activities or processes that provide the same output into an appropriate phase and mapping them into the domain of data fusion. This grouping process of the activities will balance the investigation process and mapping them into data fusion domain will produce more quality data for analysis and can produce potential legal digital evidence as an expert testimony in the court of law.