Forensics and Security Research Group

Forensics and Security Research Group

Academic cybersecurity and digital forensics research group spanning University College Dublin and South East Technological University.

Research Focus

The Forensics and Security Research Group conducts research in digital forensics, cybersecurity, network investigation, artificial intelligence for forensic workflows, cloud and IoT forensics, and digital forensic education.

Founded in University College Dublin and now expanded through collaboration with South East Technological University, the group works with academic, law-enforcement, and industry partners on research that improves the reliability, scalability, and practical impact of digital investigations.

Digital Forensics Network Investigation AI for Forensics Cloud and IoT Evidence Forensic Readiness Education and Training

Latest

News

All News
Preview of Plug to Place: Indoor Multimedia Geolocation from Electrical Sockets for Digital Investigation

Plug to Place: Indoor Multimedia Geolocation from Electrical Sockets for Digital Investigation

This paper presents a novel approach to indoor multimedia geolocation using electrical sockets as consistent indoor markers for geolocation. A three-stage deep learning pipeline detects plug sockets, classifies them into standardized types, and maps them to countries. The approach is evaluated on the Hotels-50K dataset and demonstrates its practical utility for law enforcement in human trafficking investigations.

Recent Output

Selected Publications

Full Publications List
2024
First-page preview of Pushing Network Forensic Readiness to the Edge: A Resource Constrained Artificial Intelligence Based Methodology

Pushing Network Forensic Readiness to the Edge: A Resource Constrained Artificial Intelligence Based Methodology

Syed Rizvi; Mark Scanlon; Jimmy McGibney; John Sheppard

2024 Cyber Research Conference - Ireland (Cyber-RCI)

This paper introduces the Network Forensic Readiness for Edge Devices (NetFoREdge) framework, which deploys lightweight AI models in resource-constrained environments for attack detection, evidence collection, and preservation. The framework is evaluated on two datasets, achieving accuracy rates exceeding 99.60% and 99.98% for multiclassification.

2025
First-page preview of Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiency

Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation Efficiency

Akila Wickramasekara; Frank Breitinger; Mark Scanlon

Forensic Science International: Digital Investigation Vol. 52 pp. 301859

This study explores the potential of Large Language Models (LLMs) in improving digital forensic investigation efficiency, addressing challenges such as bias, explainability, censorship, and resource-intensive infrastructure. A comprehensive literature review highlights the current challenges in digital forensics and the possibilities of incorporating LLMs, with a focus on established models, methods, and key challenges.

2025
First-page preview of Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations

Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations

Gaƫtan Michelet; Hans Henseler; Harm van Beek; Mark Scanlon; Frank Breitinger

ACM Digital Threats: Research and Practice pp. 3748264

This paper proposes recommendations for fine-tuning large language models (LLMs) for digital forensics tasks, addressing the gap in existing research. A case study on chat summarization showcases the applicability of the recommendations, evaluating multiple fine-tuned models to assess their performance. The study shares lessons learned from the case study, providing insights into the fine-tuning process, computational power issues, data challenges, and evaluation methods.