I am particularly interested in proactive forensic computing. A (forensically ready) system is said to be proactive if it it is designed and configured to be forensics-aware so that the generation, collection and preservation of digital evidence is possible during their normal operation. I am interested in the design, implementation and testing of such systems considering both auditing and forensics requirements in order to guarantee that the evidence being produced is not only accurate, but also legally admissible, even in the presence of abnormal cirsumstances produced by unknown adversaries.
During my doctoral studies at Warwick, I researched into the proactive characteristics of database forensics. My work studied the challenges of analysing transactional databases using inadequate reactive forensic techniques. As a result, an alternative proactive approach was proposed, implemented and demostrated, considering both auditing and forensics as accountability requirements. We assumed malicious insiders as potential adversaries of our system, which was prepared to produce real-time evidence in centralised and distributed environments.
Cybersecurity, ethical hacking, information security, money laundering detection, auditing, cyber ethics and policing.
I am also involved in outreach activities for teaching cybersecurity to children.