Propuesta de un método de preservación de privacidad para la aplicación de inteligencia de fuentes abiertas (OSINT) durante investigaciones digitales forenses.

Abstract

This work proposes a privacy preservation method for the application of open-source intelligence (OSINT) during digital forensic investigations. For the design of the method, a mapping of phases of a forensic investigation, privacy principles, generic ethical principles given by PRECEPT and the phases of the osint cycle were carried out, from this, privacy requirements were defined together with references to articles of the LOPD (Organic Law on Data Protection). The phases of acquisition, collection and preservation were particularly considered. Subsequently, the method was put into practice through a web crawler using design security techniques, access control methods and security controls. The evaluation of the method was carried out through a case study where functionality, performance and resilience were evaluated. Functional evaluation, the effectiveness of the guidelines and privacy requirements of the method during searches with the crawler versus a conventional browser was demonstrated. In terms of performance, resource consumption was evidenced by three scenarios with different load where memory was the most consumed. With regard to resilience, a threat modeling based on the adversary and another with Microsoft Threat Modeling Tool was performed, on these threats, risk was managed through controls of the proposed method and critical operating requirements were defined. Finally, attack scenarios were executed where the system showed resilience according to the expected results in each scenario.