Digital Forensics in the Era of Artificial Intelligence

Digital forensics plays a crucial role in identifying, analysing, and presenting cyber threats as evidence in a court of law. Artificial intelligence, particularly machine learning and deep learning, enables automation of the digital investigation process. This book provides an in-depth look at the fundamental and advanced methods in digital forensics. It also discusses how machine learning and deep learning algorithms can be used to detect and investigate cybercrimes.

This book demonstrates digital forensics and cyber-investigating techniques with real-world applications. It examines hard disk analytics and style architectures, including Master Boot Record and GUID Partition Table as part of the investigative process. It also covers cyberattack analysis in Windows, Linux, and network systems using virtual machines in real-world scenarios.

Digital Forensics in the Era of Artificial Intelligence will be helpful for those interested in digital forensics and using machine learning techniques in the investigation of cyberattacks and the detection of evidence in cybercrimes.

數位取證在法庭上識別、分析和呈現網絡威脅作為證據方面扮演著關鍵角色。人工智慧，特別是機器學習和深度學習，使數位調查過程自動化成為可能。本書深入探討了數位取證的基本和高級方法。同時討論了機器學習和深度學習算法在檢測和調查網絡犯罪方面的應用。

本書通過實際應用展示了數位取證和網絡調查技術。它探討了硬碟分析和系統架構，包括主引導記錄和GUID分割表，作為調查過程的一部分。同時，它還涵蓋了使用虛擬機器在Windows、Linux和網絡系統中進行實際場景下的網絡攻擊分析。

《人工智慧時代的數位取證》對於對數位取證感興趣並在調查網絡攻擊和檢測網絡犯罪證據時使用機器學習技術的人士將會很有幫助。

Dr Nour Moustafa is currently Senior Lecturer and leader of Intelligent Security Group at the School of Engineering & Information Technology, University of New South Wales (UNSW Canberra), Australia. He is also Strategic Advisor (AI-SME) at the DXC Technology, Canberra, Australia. He was a Post-doctoral Fellow at UNSW Canberra from June 2017 to December 2018. He received his PhD degree in Computing from UNSW, Australia, in 2017. He obtained his Bachelor and Master degree in Computer Science in 2009 and 2014, respectively, from the Faculty of Computer and Information, Helwan University, Egypt. His areas of interest include Cyber Security, particularly network security, IoT security, intrusion detection systems, statistics, deep learning and machine learning techniques. He has several research grants from industry and defence sponsors, such as Australia's Cyber Security Cooperative Defence Centre, Australian Defence Science and Technology Group, and the Canadian Department of National Defence. He has been awarded the 2020 prestigious Australian Spitfire Memorial Defence Fellowship award. He is also a Senior IEEE Member, ACM Distinguished Speaker, and Spitfire Fellow. He has served his academic community as the guest associate editor of multiple journals, such as IEEE Transactions on Industrial Informatics, IEEE Systems, IEEE IoT Journal, IEEE Access, Ad Hoc Networks, and the Journal of Parallel and Distributed Computing. He has also served over seven leadership conferences, including as vice-chair, session chair, Technical Program Committee (TPC) member and proceedings chair, including for the 2020-2021 IEEE TrustCom and 2020 33rd Australasian Joint Conference on Artificial Intelligence.

Dr Nour Moustafa目前是澳洲新南威爾斯大學坎培拉校區（UNSW Canberra）工程與資訊技術學院的高級講師，也是智能安全團隊的負責人。他同時也是澳洲坎培拉DXC Technology的戰略顧問（AI-SME）。他在2017年6月至2018年12月期間擔任UNSW Canberra的博士後研究員。他於2017年在澳洲新南威爾斯大學獲得計算機博士學位。他分別於2009年和2014年在埃及赫爾旺大學計算機與資訊學院獲得學士和碩士學位。他的研究興趣包括網絡安全、物聯網安全、入侵檢測系統、統計學、深度學習和機器學習技術等。他獲得了來自工業和國防贊助商的多個研究資助，例如澳洲的Cyber Security Cooperative Defence Centre、澳洲國防科學技術集團和加拿大國防部。他獲得了2020年享有盛譽的澳洲Spitfire Memorial Defence Fellowship獎。他還是高級IEEE會員、ACM傑出演講者和Spitfire Fellow。他曾擔任多個期刊的客座副編輯，包括IEEE Transactions on Industrial Informatics、IEEE Systems、IEEE IoT Journal、IEEE Access、Ad Hoc Networks和Journal of Parallel and Distributed Computing。他還擔任過七個領導性會議的職務，包括副主席、分會主席、技術計劃委員會（TPC）成員和會議主席，其中包括2020-2021年IEEE TrustCom和2020年第33屆澳洲聯合人工智能大會。