Forensics and Security Research Group

Forensics and Security Research Group

Academic cybersecurity and digital forensics research group spanning University College Dublin and South East Technological University.

Research Focus

The Forensics and Security Research Group conducts research in digital forensics, cybersecurity, network investigation, artificial intelligence for forensic workflows, cloud and IoT forensics, and digital forensic education.

Founded in University College Dublin and now expanded through collaboration with South East Technological University, the group works with academic, law-enforcement, and industry partners on research that improves the reliability, scalability, and practical impact of digital investigations.

Digital Forensics Network Investigation AI for Forensics Cloud and IoT Evidence Forensic Readiness Education and Training

Latest

News

All News
Preview of Plug to Place: Indoor Multimedia Geolocation from Electrical Sockets for Digital Investigation

Plug to Place: Indoor Multimedia Geolocation from Electrical Sockets for Digital Investigation

This paper presents a novel approach to indoor multimedia geolocation using electrical sockets as consistent indoor markers for geolocation. A three-stage deep learning pipeline detects plug sockets, classifies them into standardized types, and maps them to countries. The approach is evaluated on the Hotels-50K dataset and demonstrates its practical utility for law enforcement in human trafficking investigations.

Recent Output

Selected Publications

Full Publications List
2024
First-page preview of A Comprehensive Evaluation on the Benefits of Context Based Password Cracking for Digital Forensics

A Comprehensive Evaluation on the Benefits of Context Based Password Cracking for Digital Forensics

Aikaterini Kanta; Iwen Coisel; Mark Scanlon

Journal of Information Security and Applications

This paper evaluates the benefits of context-based password cracking for digital forensics, demonstrating that targeted approaches can increase the likelihood of success when contextual information is available. The study presents an experimental methodology and results section analyzing the approach's performance across ten datasets, proving the impact of context in password cracking.

2025
First-page preview of Low-overhead and Non-invasive Electromagnetic Side-Channel Monitoring for Forensic-ready Industrial Control Systems

Low-overhead and Non-invasive Electromagnetic Side-Channel Monitoring for Forensic-ready Industrial Control Systems

Buddhima Weerasinghe; Asanka Sayakkara; Kasun De Zoysa; Mark Scanlon

Digital Forensics Doctoral Symposium

This paper proposes a low-overhead and non-invasive electromagnetic side-channel monitoring approach for forensic-ready industrial control systems. It uses unintentional electromagnetic radiation emitted by Ethernet network cables to detect denial of service attacks with considerable accuracy, introducing an architecture for ICS infrastructure to be forensic-ready with minimal computational resources.

2025
First-page preview of An AI-Based Network Forensic Readiness Framework for Resource-Constrained Environments

An AI-Based Network Forensic Readiness Framework for Resource-Constrained Environments

Syed Rizvi; Mark Scanlon; Jimmy McGibney; John Sheppard

Proceedings of the 18th International Workshop on Digital Forensics, part of the 20th International Conference on Availability, Reliability and Security

This paper presents an AI-based network forensic readiness framework for resource-constrained environments. The framework integrates optimised artificial intelligence models to detect attacks in real-time, capturing and preserving critical forensic artefacts. It aligns with ISO/IEC 27043:2015 Digital Forensic Readiness principles, reducing time and human effort.