Forensics and Security Research Group

Forensics and Security Research Group

Academic cybersecurity and digital forensics research group spanning University College Dublin and South East Technological University.

Research Focus

The Forensics and Security Research Group conducts research in digital forensics, cybersecurity, network investigation, artificial intelligence for forensic workflows, cloud and IoT forensics, and digital forensic education.

Founded in University College Dublin and now expanded through collaboration with South East Technological University, the group works with academic, law-enforcement, and industry partners on research that improves the reliability, scalability, and practical impact of digital investigations.

Digital Forensics Network Investigation AI for Forensics Cloud and IoT Evidence Forensic Readiness Education and Training

Latest

News

All News

Recent Output

Selected Publications

Full Publications List
2025
First-page preview of Low-overhead and Non-invasive Electromagnetic Side-Channel Monitoring for Forensic-ready Industrial Control Systems

Low-overhead and Non-invasive Electromagnetic Side-Channel Monitoring for Forensic-ready Industrial Control Systems

Buddhima Weerasinghe; Asanka Sayakkara; Kasun De Zoysa; Mark Scanlon

Digital Forensics Doctoral Symposium

This paper proposes a low-overhead and non-invasive electromagnetic side-channel monitoring approach for forensic-ready industrial control systems. It uses unintentional electromagnetic radiation emitted by Ethernet network cables to detect denial of service attacks with considerable accuracy, introducing an architecture for ICS infrastructure to be forensic-ready with minimal computational resources.

Publication details

2025
First-page preview of Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations

Fine-Tuning Large Language Models for Digital Forensics: Case Study and General Recommendations

Gaƫtan Michelet; Hans Henseler; Harm van Beek; Mark Scanlon; Frank Breitinger

ACM Digital Threats: Research and Practice pp. 3748264

This paper proposes recommendations for fine-tuning large language models (LLMs) for digital forensics tasks, addressing the gap in existing research. A case study on chat summarization showcases the applicability of the recommendations, evaluating multiple fine-tuned models to assess their performance. The study shares lessons learned from the case study, providing insights into the fine-tuning process, computational power issues, data challenges, and evaluation methods.

Publication details

2025
First-page preview of An AI-Based Network Forensic Readiness Framework for Resource-Constrained Environments

An AI-Based Network Forensic Readiness Framework for Resource-Constrained Environments

Syed Rizvi; Mark Scanlon; Jimmy McGibney; John Sheppard

Proceedings of the 18th International Workshop on Digital Forensics, part of the 20th International Conference on Availability, Reliability and Security

This paper presents an AI-based network forensic readiness framework for resource-constrained environments. The framework integrates optimised artificial intelligence models to detect attacks in real-time, capturing and preserving critical forensic artefacts. It aligns with ISO/IEC 27043:2015 Digital Forensic Readiness principles, reducing time and human effort.

Publication details