Abstract:Blockchain technology can be incorporated into new systems to facilitate modern Digital Forensics and Incident Response (DFIR). For example, it is widely acknowledged that the Internet-of-Things (IoT) has introduced complexity to the cyberspace, however, incident responders should also realise the advantages presented by these new “Digital Witnesses” (DW) to support their investigation. Logs generated by IoT devices can help in the process of event reconstruction, but their integrity -and therefore admissibility- can be achieved only if a Chain-of-Custody (CoC) is maintained within the wider context of an on-going digital investigation. Likewise, the transition to electronic documentation improves data availability, legibility, the utility of notes, and therefore enhances the communication between stakeholders. However, without a proof of validity, these data could be falsified. For example, in an application area such as eHealth, there is a requirement to maintain various existing (and new) rules and regulations concerning authorship, auditing, and the integrity of medical records. Lacking data control could lead to system abuse, fraud and severe compromise of service quality. These concerns can be resolved by implementing an online CoC. In this paper, we discuss the value and means of utilising Blockchain in modern systems to support DFIR. we demonstrate the value of Blockchain to improve the implementation of Digital Forensic Models and discuss why law enforcement and incident responders need to understand Blockchain technology. Furthermore, the admissibility of a Digital Evidence to a Court of Law requires chronological documentation. Hence, we discuss how the CoC can be sustained based on a distributed ledger. Finally, we provide a practical scenario related to eHealth to demonstrate the value of this approach to introduce forensic readiness to computer systems and enable better Police interventions.

Block-DEF: A Secure Digital Evidence Framework Using Blockchain

A Trusted System Framework for Electronic Records Management Based on Blockchain.

Electronic evidence preservation model based on blockchain

Electronic evidence in the blockchain era: New rules on authenticity and integrity

Analysis on Challenges and Improvements of Electronic Evidence Preservation on Blockchain in China

Blockchain Solutions for Forensic Evidence Preservation in IoT Environments

Data Security Storage Mechanism Based on Blockchain Network

Decentralized Model to Protect Digital Evidence via Smart Contracts Using Layer 2 Polygon Blockchain

ForensiBlock: A Provenance-Driven Blockchain Framework for Data Forensics and Auditability

Using Blockchain Evidence in China’s Digital Copyright Legislation to Enhance the Sustainability of Legal Systems

Blockchain for Modern Digital Forensics: The Chain-of-Custody as a Distributed Ledger

Anonymous, Secure, Traceable, and Efficient Decentralized Digital Forensics

Log Preservation in Custody Dual Blockchain With Energy Regime and Obfuscation Shuffle

SHARD-FEMF: Adaptive Forensic Evidence Management Framework using Blockchain Sharding and IPFS

An efficient blockchain-based framework for file sharing

Novel blockchain deep learning framework to ensure video security and lightweight storage for construction safety management

BLOCKBENCH

Enhancing Global Blockchain Privacy via a Digital Mutual Trust Mechanism

ETC-Oriented Efficient and Secure Blockchain: Credit-Based Mechanism and Evidence Framework for Vehicle Management

Decentralized Access Control Encryption In Public Blockchain

Scalable and Privacy-Preserving Data Sharing Based on Blockchain