%0 Conference Proceedings
%T Enhancing industrial control system forensics using replication-based digital twins
%+ University of Regensburg
%A Dietz, Marietheres
%A Englbrecht, Ludwig
%A Pernul, Günther
%Z Part 1: Themes and Issues
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B 17th IFIP International Conference on Digital Forensics (DigitalForensics)
%C Virtual, China
%Y Gilbert Peterson
%Y Sujeet Shenoi
%I Springer International Publishing
%3 Advances in Digital Forensics XVII
%V AICT-612
%P 21-38
%8 2021-02-01
%D 2021
%R 10.1007/978-3-030-88381-2_2
%K Digital forensics
%K industrial control systems
%K digital twins
%Z Computer Science [cs]Conference papers
%X Industrial control systems are increasingly targeted by cyber attacks. However, it is difficult to conduct forensic investigations of industrial control systems because taking them offline is often infeasible or expensive. An attractive option is to conduct a forensic investigation of a digital twin of an industrial control system. This chapter demonstrates how a forensic investigation can be performed using a replication-based digital twin. A digital twin also makes it possible to select the appropriate tools for evidence acquisition and analysis before interacting with the real system. The approach is evaluated using a prototype implementation.
%G English
%2 https://inria.hal.science/hal-03764369/document
%2 https://inria.hal.science/hal-03764369/file/522103_1_En_2_Reference.pdf
%L hal-03764369
%U https://inria.hal.science/hal-03764369
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-AICT
%~ IFIP-TC
%~ IFIP-WG
%~ IFIP-TC11
%~ IFIP-DF
%~ IFIP-WG11-9
%~ IFIP-AICT-612