Digital Forensics in Industrial Control Systems

The increasing complexity of industrial control systems (ICS) and interconnection with other systems poses more safety- and/or security-related challenges due to a rising number of attacks and errors. The event reconstruction is the goal of the new field of ICS forensics differing from well-established Desktop-IT forensics. We identify ICS properties, implications and the impact on the forensic process.

[1]  Keith Marzullo,et al.  Computer Forensics in Forensis , 2008, 2008 Third International Workshop on Systematic Approaches to Digital Forensic Engineering.

[2]  Mark Pollitt Applying Traditional Forensic Taxonomy to Digital Forensics , 2008, IFIP Int. Conf. Digital Forensics.

[3]  M. Tahar Kechadi,et al.  Forensics in Industrial Control System: A Case Study , 2015, CyberICS/WOS-CPS@ESORICS.

[4]  Jana Dittmann,et al.  Supporting Forensic Design - A Course Profile to Teach Forensics , 2015, 2015 Ninth International Conference on IT Security Incident Management & IT Forensics.