Cyber incident forensics as a forward lean security

Abstract

Recently, cyber space is regarded as the second real world connected in real time. Accordingly, the issue related security and incident respond is being magnified in most of ICT dependent industries. However, it's rarely impossible for organizations to perfectly defend cyber-attacks with legacy security solutions. This problem is bringing new challenges to the ICT industries. In this paper, we describe why and how the ICT industries should deal with this problem. And then, we introduce the concept of cyber incident forensics and propose the design of cyber incident forensic system.