Towards a Comprehensive Ontology Based-Investigation for Digital Forensics Cybercrime
Amir Mohamed Talib, Fahad Omar Alomary · International Journal on Communications Antenna and Propagation (IRECAP) · 2015
Cyber physical attacks against information and computer systems are a tangible and dangerous threat that requires an effective response. In this paper, digital forensics cybercrime ontology is proposed to collect, examine, analyze, prepare, acquire and preserve evidence of computer crimes of digital forensics in cyberspace. The power of the proposed ontology is to determine the difficulties of association of the digital crime types and their collection evidences in digital forensics cases. Ontology development has consists three main steps, 1) domain, purpose and scope setting, 2) important terms acquisition, classes and class hierarchy conceptualization and 3) instances creation. Digital forensics and ontology are two normally unrelated topics. Ontology congruent to this paper is method that will help to better understanding and defining terms of digital forensics. Our proposed digital forensics cybercrime ontology resulting from the Protégé has a total of 180 classes, 179 subclasses and 84 instances regarding digital forensics crime cases.