Research Output
Publications
Peer-reviewed publications, theses, posters, and presentations from the Forensics and Security Research Group.
2026
- 2026
Investigation of large language models, GenAI, and proprietary AI systems: Digital forensic evidence, readiness and regulationForensic Science International: Digital Investigation Vol. 57 Article 302135
- 2026
Plug to place: Indoor multimedia geolocation from electrical sockets for digital investigationForensic Science International: Digital Investigation Vol. 56 Article 302056
- 2026
AutoDFBench 1.0: A benchmarking framework for digital forensic tool testing and generated code evaluationForensic Science International: Digital Investigation Vol. 56 Article 302055
- 2026
VAAS: Vision-Attention Anomaly Scoring for image manipulation detection in digital forensicsForensic Science International: Digital Investigation Vol. 56 Article 302063
- 2026
Objects as Universal Geolocation Cues: A Computer Vision Approach13th Annual Digital Forensics Research Workshop Europe (DFRWS EU 2026)
2025
- 2025
Towards a standardized methodology and dataset for evaluating LLM-based digital forensic timeline analysisForensic Science International: Digital Investigation Vol. 54S Article 301982
- 2025
An AI-Based Network Forensic Readiness Framework for Resource-Constrained EnvironmentsProceedings of the 18th International Workshop on Digital Forensics, part of the 20th International Conference on Availability, Reliability and Security
- 2025
Fine-Tuning Large Language Models for Digital Forensics: Case Study and General RecommendationsACM Digital Threats: Research and Practice Article 3748264
- 2025
AutoDFBench: A Framework for AI Generated Digital Forensic Code and Tool Testing and EvaluationDigital Forensics Doctoral Symposium
- 2025
- 2025
Low-overhead and Non-invasive Electromagnetic Side-Channel Monitoring for Forensic-ready Industrial Control SystemsDigital Forensics Doctoral Symposium
- 2025
Exploring the Potential of Large Language Models for Improving Digital Forensic Investigation EfficiencyForensic Science International: Digital Investigation Vol. 52 Article 301859
2024
- 2024
Context Based Password Cracking Dictionary Expansion Using Generative Pre-trained Transformers2024 Cyber Research Conference - Ireland (Cyber-RCI)
- 2024
Perceptual Colour-based Geolocation of Human Trafficking Images for Digital Forensic Investigation2024 Cyber Research Conference - Ireland (Cyber-RCI)
- 2024
Pushing Network Forensic Readiness to the Edge: A Resource Constrained Artificial Intelligence Based Methodology2024 Cyber Research Conference - Ireland (Cyber-RCI)
- 2024
A Comprehensive Evaluation on the Benefits of Context Based Password Cracking for Digital ForensicsJournal of Information Security and Applications
- 2024
A Digital Forensic Methodology for Encryption Key Recovery from Black-Box IoT DevicesProceedings of the 12th International Symposium on Digital Forensics and Security
- 2024
A Framework for Integrated Digital Forensic Investigation Employing AutoGen AI AgentsProceedings of the 12th International Symposium on Digital Forensics and Security
- 2024
- 2024
DFRWS EU 10-Year Review and Future Directions in Digital Forensic ResearchForensic Science International: Digital Investigation Vol. 48 Article 301685
- 2024
Ensuring Cross-Device Portability of Electromagnetic Side-Channel Analysis for Digital ForensicsForensic Science International: Digital Investigation Vol. 48 Article 301684
- 2024
DFPulse: The 2024 digital forensic practitioner surveyForensic Science International: Digital Investigation Vol. 51 Article 301844
2023
- 2023
An Evaluation of AI-Based Network Intrusion Detection in Resource-Constrained Environments14th Annual IEEE Ubiquitous Computing, Electronics & Mobile Communication Conference (IEEE UEMCON)
- 2023
Context-Based Password Cracking for Digital InvestigationSchool of Computer Science, University College Dublin
- 2023
Digital forensic investigation in the age of ChatGPTForensic Science International: Digital Investigation Vol. 44 Article 301543
- 2023
Harder, Better, Faster, Stronger: Optimising the Performance of Context-Based Password Cracking DictionariesForensic Science International: Digital Investigation Vol. 44S Article 301507
- 2023
ChatGPT for digital forensic investigation: The good, the bad, and the unknownForensic Science International: Digital Investigation Vol. 46 Article 301609
2022
- 2022
Deep Learning Based Network Intrusion Detection System for Resource-Constrained EnvironmentsThe 13th EAI International Conference on Digital Forensics and Cyber Crime
- 2022
- 2022
Data Exfiltration through Electromagnetic Covert Channel of Wired Industrial Control SystemsApplied Sciences Vol. 13 Article 2928
- 2022
A Novel Dictionary Generation Methodology for Contextual-Based Password CrackingIEEE Access Vol. 10 pp. 59178-59188
- 2022
Security, Ethics and Privacy Issues in Remote Extended Reality for EducationMixed Reality for Education
2021
- 2021
Identifying Internet of Things Software Activities using Deep Learning-based Electromagnetic Side-Channel AnalysisForensic Science International: Digital Investigation Vol. 39 Article 301308
- 2021
PCWQ: A Framework for Evaluating Password Cracking Wordlist QualityThe 12th EAI International Conference on Digital Forensics and Cyber Crime
- 2021
How Viable is Password Cracking in Digital Forensic Investigation? Analyzing the Guessability of over 3.9 Billion Real-World AccountsForensic Science International: Digital Investigation Vol. 37 Article 301186
- 2021
Digital Forensics: Leveraging Deep Learning Techniques in Facial Images to Assist Cybercrime InvestigationsSchool of Computer Science, University College Dublin
- 2021
A Comparative Study of Support Vector Machine and Neural Networks for File Type Identification Using n-gram AnalysisForensic Science International: Digital Investigation
- 2021
TraceGen: User Activity Emulation for Digital Forensic Test Image GenerationForensic Science International: Digital Investigation
- 2021
Vec2UAge: Enhancing Underage Age Estimation Performance through Facial EmbeddingsForensic Science International: Digital Investigation
- 2021
On Offloading Network Forensic Analytics to Programmable Data Plane SwitchesBook Series: World Scientific Series in Digital Forensics and Cybersecurity
2020
- 2020
A Survey Exploring Open Source Intelligence for Smarter Password CrackingForensic Science International: Digital Investigation Vol. 35 Article 301075
- 2020
Alleviating the Digital Forensic Backlog: A Methodology for Automated Digital Evidence ProcessingSchool of Computer Science, University College Dublin
- 2020
Electromagnetic Side-Channel Analysis Methods for Digital Forensics on Internet of ThingsSchool of Computer Science, University College Dublin
- 2020
Retracing the Flow of the Stream: Investigating Kodi Streaming ServicesThe 11th EAI International Conference on Digital Forensics and Cyber Crime
- 2020
SoK: Exploring the State of the Art and the Future Potential of Artificial Intelligence in Digital Forensic InvestigationThe 13th International Workshop on Digital Forensics (WSDF), held at the 15th International Conference on Availability, Reliability and Security (ARES)
- 2020
Facilitating Electromagnetic Side-Channel Analysis for IoT Investigation: Evaluating the EMvidence FrameworkForensic Science International: Digital Investigation
- 2020
Assessing the Influencing Factors on the Accuracy of Underage Facial Age EstimationThe 6th IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security)
- 2020
Automated Artefact Relevancy Determination from Artefact Metadata and Associated Timeline EventsThe 6th IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security)
- 2020
Smarter Password Guessing Techniques Leveraging Contextual Information and OSINT6th IEEE International Conference on Cyber Security and Protection of Digital Services (Cyber Security)
- 2020
Cutting through the Emissions: Feature Selection from Electromagnetic Side-Channel Data for Activity DetectionForensic Science International: Digital Investigation Vol. 32 Article 300927
- 2020
DeepUAge: Improving Underage Age Estimation Accuracy to Aid CSEM InvestigationForensic Science International: Digital Investigation Vol. 32 Article 300921
- 2020
EMvidence: A Framework for Digital Evidence Acquisition from IoT Devices through Electromagnetic Side-Channel AnalysisForensic Science International: Digital Investigation Vol. 32 Article 300907
2019
- 2019
Improving Borderline Adulthood Facial Age Estimation through Ensemble LearningThe 8th International Workshop on Cyber Crime (IWCC), held at the 14th International Conference on Availability, Reliability and Security (ARES)
- 2019
Methodology for the Automated Metadata-Based Classification of Incriminating Digital Forensic ArtefactsThe 12th International Workshop on Digital Forensics (WSDF), held at the 14th International Conference on Availability, Reliability and Security (ARES)
- 2019
A Survey of Electromagnetic Side-Channel Attacks and Discussion on their Case-Progressing Potential for Digital ForensicsDigital Investigation Vol. 29 pp. 43-54
- 2019
- 2019
Improving the Accuracy of Automated Facial Age Estimation to Aid CSEM InvestigationsDigital Investigation Vol. 28 Article S142
- 2019
- 2019
Solid State Drive Forensics: Where Do We Stand?Digital Forensics and Cyber Crime pp. 149-164
2018
- 2018
Accuracy Enhancement of Electromagnetic Side-channel Attacks on Computer MonitorsThe Second International Workshop on Criminal Use of Information Hiding (CUING), part of the 13th International Conference on Availability, Reliability and Security (ARES)
- 2018
Cloud Investigations of Illegal IPTV NetworksProceedings of the 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom-18) pp. 1942-1947
- 2018
Deduplicated Disk Image Evidence Acquisition and Forensically-Sound ReconstructionProceedings of the 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom-18) pp. 1674-1679
- 2018
Enabling the Non-Expert Analysis of Large Volumes of Intercepted Network TrafficAdvances in Digital Forensics XIV pp. 183-197
- 2018
Deep Learning at the Shallow End: Malware Classification for Non-Domain ExpertsDigital Investigation Vol. 26 pp. S118 - S126
- 2018
Digital Forensic Investigation of Two-Way Radio Communication Equipment and ServicesDigital Investigation Vol. 26 pp. S77 - S86
- 2018
Electromagnetic Side-Channel Attacks: Potential for Progressing Hindered Digital Forensic AnalysisProceedings of the International Workshop on Speculative Side Channel Analysis (WoSSCA 2018)
- 2018
Evaluating Automated Facial Age Estimation Techniques for Digital Forensics12th International Workshop on Systematic Approaches to Digital Forensics Engineering (SADFE), IEEE Security & Privacy Workshops
- 2018
Hierarchical Bloom Filter Trees for Approximate MatchingJournal of Digital Forensics, Security and Law Vol. 13 pp. 81-96
- 2018
Expediting MRSH-v2 Approximate Matching with Hierarchical Bloom Filter TreesDigital Forensics and Cyber Crime. ICDF2C 2017 Vol. 216 pp. 144-157
- 2018
Private Web Browser Forensics: A Case Study on Epic Privacy BrowserJournal of Information Warfare Vol. 17
2017
- 2017
Data Analytics for Digital Forensics and CybersecurityPredict Conference; Europe's Leading Data Conference (Predict 2017)
- 2017
Privileged Data within Digital EvidenceProceedings of the 16th IEEE International Conference On Trust, Security And Privacy In Computing And Communications (TrustCom-17) pp. 737-744
- 2017
Evaluation of Digital Forensic Process Models with Respect to Digital Forensics as a ServiceProceedings of the 16th European Conference on Cyber Warfare and Security (ECCWS 2017) pp. 573-581
- 2017
Forensic Analysis of Epic Privacy Browser on Windows Operating SystemsProceedings of the 16th European Conference on Cyber Warfare and Security (ECCWS 2017) pp. 341-350
- 2017
Integration of Ether Unpacker into Ragpicker for plugin-based Malware Analysis and IdentificationProceedings of the 16th European Conference on Cyber Warfare and Security (ECCWS 2017) pp. 419-425
- 2017
Behavioral Service Graphs: A Formal Data-Driven Approach for Prompt Investigation of Enterprise and Internet-wide InfectionsDigital Investigation Vol. 20S pp. 47-55
- 2017
EviPlant: An Efficient Digital Forensic Challenge Creation, Manipulation, and Distribution SolutionDigital Investigation Vol. 20S pp. 29-36
2016
- 2016
Behavioral Service Graphs: A Big Data Approach for Prompt Investigation of Internet-wide InfectionsProceedings of the IFIP International Workshop on Cybercrime Investigation and Digital Forensics (CID) pp. 1-5
- 2016
Towards the Leveraging of Data Deduplication to Break the Disk Acquisition Speed LimitProceedings of the IFIP International Workshop on Cybercrime Investigation and Digital Forensics (CID) pp. 1-5
- 2016Battling the Digital Forensic Backlog
Proceedings of the 2nd International Workshop on Cloud Security and Forensics (WCSF 2016) pp. 10-14
- 2016
Battling the Digital Forensic Backlog through Data DeduplicationProceedings of the 6th IEEE International Conference on Innovative Computing Technologies (INTECH 2016)
- 2016
IPv6 Security and Forensics2nd International Workshop on Cloud Security and Forensics (WCSF 2016) pp. 743-748
- 2016
An Analytical Approach to the Recovery of Data From 3rd Party Proprietary CCTV File Systems15th European Conference on Cyber Warfare and Security (ECCWS 2016)
- 2016
Current Challenges and Future Research Areas for Digital Forensic InvestigationThe 11th ADFSL Conference on Digital Forensics, Security and Law (CDFSL 2016) pp. 9-20
- 2016
Increasing Digital Investigator Availability through Efficient Workflow Management and AutomationThe 4th International Symposium on Digital Forensics and Security (ISDFS 2016) pp. 68-73
- 2016
On the Benefits of Information Retrieval and Information Extraction Techniques Applied to Digital ForensicsAdvanced Multimedia and Ubiquitous Engineering: FutureTech & MUE pp. 641-647
- 2016
Tiered Forensic Methodology Model for Digital Field Triage by Non-Digital Evidence SpecialistsDigital Investigation Vol. 16 pp. 75-85
2015
- 2015
An Evaluation of Google Plus Communities as an Active Learning Journal Alternative to Improve Learning EfficacyProceedings of 8th International Conference on Engaging Pedagogy (ICEP 2015)
- 2015
Forensic Analysis and Remote Evidence Recovery from Syncthing: An Open Source Decentralised File Synchronisation UtilityDigital Forensics and Cyber Crime Vol. 157 pp. 85-99
- 2015
Network Investigation Methodology for BitTorrent Sync: A Peer-to-Peer Based File Synchronisation ServiceComputers & Security Vol. 54 pp. 27 - 43
- 2015
Project Maelstrom: Forensic Analysis of the BitTorrent-Powered BrowserJournal of Digital Forensics, Security and Law: Proc. of 10th International Conference on Systematic Approaches to Digital Forensic Engineering (SADFE 2015) pp. 115-124
- 2015
Overview of the Forensic Investigation of Cloud Services10th International Conference on Availability, Reliability and Security (ARES 2015) pp. 556-565
- 2015Remote Evidence Acquisition
Proceedings of the International Workshop on Digital Forensics (WSDF 2015)
- 2015
Towards the Forensic Identification and Investigation of Cloud Hosted Servers through Noninvasive WiretapsProceedings of 10th International Conference on Availability, Reliability and Security (ARES 2015)
- 2015
HTML5 Zero Configuration Covert Channels: Security Risks and ChallengesThe 10th ADFSL Conference on Digital Forensics, Security and Law (CDFSL 2015) pp. 135-150
2014
- 2014
An analysis of BitTorrent cross-swarm peer participation and geolocational distribution23rd International Conference on Computer Communication and Networks (ICCCN 2014) pp. 1-6
- 2014
BitTorrent Sync: Network Investigation MethodologyProceedings of 9th International Conference on Availability, Reliability and Security (ARES 2014) pp. 21-29
- 2014
Leveraging Decentralisation to Extend the Digital Evidence Acquisition Window: Case Study on BitTorrent SyncJournal of Digital Forensics, Security and Law: Proc. of Sixth International Conference on Digital Forensics & Cyber Crime (ICDF2C 2014) pp. 85-99
- 2014
Digital Evidence Bag Selection for P2P Network InvestigationProceedings of the 7th International Symposium on Digital Forensics and Information Security (DFIS-2013), Future Information Technology, Application, and Service pp. 307-314
- 2014
BitTorrent Sync: First Impressions and Digital Forensic ImplicationsDigital Investigation Vol. 11, Supplement 1 pp. S77-S86
- 2014
The Case for a Collaborative Universal Peer-to-Peer Botnet Investigation FrameworkProceedings of the 9th International Conference on Cyber Warfare and Security (ICCWS 2014) pp. 287-293
2013
- 2013
- 2013
Investigating Cybercrimes That Occur on Documented P2P NetworksPervasive and Ubiquitous Technology Innovations for Ambient Intelligence Environments pp. 109-115
- 2013
Universal Peer-to-Peer Network Investigation FrameworkAvailability, Reliability and Security (ARES), 2013 Eighth International Conference on pp. 694-700
2012
- 2012
Peer-to-Peer Botnet Investigation: A ReviewProceedings of the 6th International Symposium on Digital Forensics and Information Security (DFIS-2012), Future Information Technology, Application, and Service pp. 231-238
2011
- 2011
Investigating Cybercrimes That Occur on Documented P2P NetworksInternational Journal of Ambient Computing and Intelligence Vol. 3 pp. 56-63
2010
- 2010
A week in the Life of the Most Popular BitTorrent SwarmsProceedings of the 5th Annual Symposium on Information Assurance (ASIA 2010) pp. 32-36
2009
- 2009
- 2009
Online Acquisition of Digital Forensic EvidenceProceedings of International Conference on Digital Forensics and Cyber Crime (ICDF2C 2009) pp. 122-131