D. A. Flores

Hybrid Logical Clocks for Database Forensics: Filling the Gap between Chain of Custody and Database Auditing (Article)

2020-01-23T21:30:00.000-08:00

The18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE)

Abstract

Database audit records are important for investigating suspicious actions against transactional databases. Their admissibility as digital evidence depends on satisfying Chain of Custody (CoC) properties during their generation, collection and preservation in order to prevent their modification, guarantee action accountability, and allow third-party verification. However, their production has relied on auditing capabilities provided by commercial database systems which may not be effective if malicious users (or insiders) misuse their privileges to disable audit controls, and compromise their admissibility. Hence, in this paper, we propose a forensically-aware distributed database architecture that implements CoC properties as functional requirements to produce admissible audit records. The novelty of our proposal is the use of hybrid logical clocks, which compared with a previous centralised vector-clock architecture, has evident advantages as it (i) allows for more accurate provenance and causality tracking of insider actions, (ii) is more scalable in terms of system size, and (iii) although latency is higher (as expected in distributed environments), 70 per cent of user transactions are executed within acceptable latency intervals.

DOI: https://doi.org/10.1109/TrustCom/BigDataSE.2019.00038

Hybrid Logical Clocks for Database Forensics: Filling the Gap between Chain of Custody and Database Auditing

2020-01-23T21:26:00.001-08:00

In a fast-growing cyber security threat landscape, game-changing techniques in information security, trust, privacy and forensics are required for a sustainable future. CROW and STRATUS are proud to host the 18th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-19) which was held at Rotorua, New Zealand on 5-8 August 2019.

As a leading international conference in the area of trust, information security and privacy, and forensics, the IEEE TrustCom 2019 conference aims to bring together international researchers and practitioners working on trusted computing and communications, with regard to trust, security, privacy, reliability, dependability, survivability, availability, and fault tolerance aspects of computer systems and networks – providing a forum to present and discuss emerging ideas and trends in this highly challenging research field.

TrustCom-19-Paper ID 158 from Denys A. Flores

PhD Annual Progress Report - Y3

2018-07-27T22:18:00.000-07:00

This is my last research report before submission 😀😉

Know-Your-Adversary: Towards a Forensically-Aware Architecture for Analysing Malicious Insider Actions against Transactional Databases.

2018-07-10T06:15:00.001-07:00

Date and Time: Friday, 29 June 2018. 10:20 - 10:35

Abstract: Database audit records can be used as forensic evidence to investigate suspicious actions against transactional databases. Currently, these actions are being perpetrated by trusted users (insiders) who interact with databases using data manipulation (DML) operations. Although the investigation of such actions rely on audit records, these must be produced during the normal operation of a forensically-aware database architecture. I.e. following an unbroken accountability trail known as Chain-of-Custody (CoC) to ensure their proper production. Hence, our research aims to define the functional requirements of such an architecture, assuming role segregation, provenance, event timelining and causality as CoC requirements, and introducing forensic controllers for the generation, collection and preservation of audit records. These controllers use vector clocks in centralised settings, and hybrid logical clocks in distributed environments to produce a timeline that can be used for analysing provenance and causality of DML operations derived from insider activity.

D flores wpccs18 from Denys A. Flores

2018 Family Goals

2018-01-06T08:09:00.000-08:00

PhD Annual Progress Report - Year 2

2017-10-25T20:00:00.000-07:00

Clama a mí, y yo te responderé, y te enseñaré cosas grandes y ocultas que tú no conoces.

Jer. 33:3

D.Flores - Annual Progress Report Y2 from Denys A. Flores

To my wife Stacy, and my sons Liam and Josh

"Thank you for joining me in a journey beyond time, distance and feelings."

I've never been so grateful to God for having placed your lives in my path,

... and allowing me to be a part of yours.

I know that it's not easy to handle ME... but without all of you, this whole sacrifice wouldn't have any meaning at all. Thanks for supporting me and bear with me... in spite of my ups and downs during my journey.

Implementing Chain of Custody Requirements in Database Audit Records for Forensic Purposes (Article)

2017-09-11T03:26:00.000-07:00

The 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-17, 2 August 2017.

Abstract

During forensic database investigations, audit records become a crucial evidential element; particularly, when certain events can be attributed to insider activity. However, traditional reactive forensic methods may not be suitable, urging the adoption of proactive approaches that can be used to ensure accountability through audit records whilst satisfying Chain of Custody (CoC) requirements for forensic purposes. In this paper, role segregation, evidence provenance, event time- liness and causality are considered as CoC requirements in order to implement a forensically ready architecture for the proactive generation, collection and preservation of database audit records that can be used as digital evidence for the investigation of insider activity. Our proposal implements triggers and stored procedures as forensic routines in order to build a vector-clock- based timeline for explaining causality in transactional events recorded in audit tables. We expect to encourage further work in the ﬁeld of proactive digital forensics and forensic readiness; in particular, for justifying admissibility of audit records under CoC restrictions.

DOI: 10.1109/Trustcom/BigDataSE/ICESS.2017.299

Implementing Chain of Custody Requirements in Database Audit Records for Forensic Purposes (Presentation)

2017-08-02T03:34:00.000-07:00

The 16th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-17) will be held in Sydney, Australia from 1st to 4th August, 2017. The conference aims at bringing together researchers and practitioners in the world working on trusted computing and communications, with regard to trust, security, privacy, reliability, dependability, survivability, availability, and fault tolerance aspects of computer systems and networks, and providing a forum to present and discuss emerging ideas and trends in this highly challenging research field.

TrustCom-17-Paper ID 152 from Denys A. Flores

Proactive Database Forensics: Chain of Custody Requirements for Database Audit Records (WPCCS-17)

2017-07-06T13:28:00.001-07:00

Presented in WPCCS-17 on 30 June 2017.

Abstract: In forensic database investigations, audit records are important evidence for analysing malicious activities carried out by trusted employees or insiders who may have misused their privileged access to sensitive transactional information. Our research proposes a proactive forensic approach for the generation, collection and preservation of audit records related to insider activity in order to ensure accountability whilst satisfying Chain of Custody (CoC) requirements. Hence, role segregation, evidence provenance, event timeliness and causality are considered as functional requirements for the implementation of a forensically ready architecture to proactively investigate insider activity. This architecture implements triggers and stored procedures as forensic routines for building a vector-clock-based timeline in order to explain causality in suspicious transactional events that can be attributed to malicious insiders.

WPCCS-17 Poster from Denys A. Flores

4th International Workshop on Cybercrimes and Emerging Web Environments - CEWE2017 in conjunction with 10th IEEE International Conference on Cyber, Physical and Social Computing (CPSCom-2017).

2017-02-09T17:13:00.000-08:00

2017 - Technical Committee Member. Exeter, United Kingdom

Cewe2017-technical committee from Denys A. Flores

Bring Your Own Disclosure: Analysing BYOD Threats to Corporate Information (Article)

2017-02-09T09:09:00.000-08:00

The 15th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, 25 August 2016.

Abstract

Mobile device consumerisation has introduced the Bring-Your-Own-Device (BYOD) trend to the organisational context, allowing employees to work using their personal devices. However, as personal mobile devices are perceived as less secure than those provided by the organisation, BYOD has risen security concerns about corporate information being accessed by mobile devices from inside and outside the corporate perimeter. Moreover, this uncontrolled mobile device activity makes it difficult to differentiate external (outsider) malicious activity from reckless/naive employee (insider) behaviour, preventing effective correlation of unauthorised actions with the perpetrators. In this paper, a STRIDE-based BYOD Threat Model is proposed to analyse BYOD Threat Interactions from inside and outside the corporate perimeter. Our research contributes to a better understanding and awareness about the influence of BYOD Threats on disclosure and contamination of corporate information, encouraging future work in the field of BYOD security and digital forensics in order to protect information and manage an increasing number of evidence sources.

DOI: 10.1109/TrustCom.2016.0169

CH933 - Academic Scientific Writing: Writing extended scientific articles and reports

2017-01-20T04:03:00.000-08:00

Reflections on Module CH933 - Writing Extended Scientific Articles and Reports from Denys A. Flores

2017 Family Goals

2017-01-03T10:29:00.001-08:00

My Very Best Friend

2016-12-13T18:26:00.001-08:00

The two of us... just us... standing on a corner watching the sky.
While you discover the world, I learn about it through your eyes.
You say to me amazing things, those crazy little things that make me laugh...
You draw with your hands subtle thin lines on that infinite blue sky.

And so... the minutes pass by... we are just there standing... watching... laughing...
The time is over us... quick! we need to find a place to sit!
You hold my hand and run faster and faster, unlike me, who every second now runs slower.
Then, we enter the place where dreams come true, and suddenly you smile...

You are my best friend, you said... and my heart melts... my life and my very existence makes sense.
While you laugh at the puppets, I wonder how you manage to take my burdens away....
And I still wonder for how long I may be your best friend... I hope forever...

Although it doesn't matter for how long... just please let me be there by your side;
Let me stand there with you on the last days of my life, so I can remember...
So I can still remember that day when your sky was mine, and I was yours...
Forever you, my very best friend.

PhD Upgrade Report - Year 1

2016-09-13T18:00:00.000-07:00

It's been a long journey... so far away from home.

D.Flores - Upgrade Report from Denys A. Flores

Dedicado a

Rolando, Wilson, Fidel & William ... Los hombres más sabios e inteligentes

que he conocido en mi vida.

Bring Your Own Disclosure: Analysing BYOD Threats to Corporate Information (Presentation)

2016-09-12T06:36:00.004-07:00

The 15th IEEE International Conference on Trust, Security and Privacy in Computing and Communications (IEEE TrustCom-16) was held in Tianjin, China on 23-26 August, 2016. The conference aimed at bringing together researchers and practitioners in the world working on trusted computing and communications, with regard to trust, security, privacy, reliability, dependability, survivability, availability, and fault tolerance aspects of computer systems and networks, and providing a forum to present and discuss emerging ideas and trends in this highly challenging research field.

Again, I was honoured to be accepted to present my research results in this prestigious academic conference in which I already participated back in 2012. This year's conference inlcuded a specific track for digital forensics which I was totally amazed to be in. There is a lot of work being performed in the digital forensics field, particularly focused on mobile devices and volatile evidence recovery. I am quite exited to see what the future brings on.

TrustCom-16 - Paper ID 227 from Denys A. Flores

WPCCS 2016 - Price Winner

2016-07-01T18:00:00.000-07:00

Original Page Screenshot from warwick[dot]ac[dot]uk
Last Accessed: 18/01/2018

Proactive Database Forensics in the BYOD Era - An Overview (WPCCS-16)

2016-07-01T06:36:00.000-07:00

The Warwick Postgraduate Colloquium is an annual event held in the Department of Computer Science which brings together postgraduate researchers from Computer Science and the Centre for Scientific Computing to present recent and on-going research.

I had the pleasure to participate in the WPCCS 2016 as it is compulsory for all research students in Computer Science in order to upgrade from an MPhil to a PhD.I talked about my preliminary research in the field of proactive database forensics along with the security and forensics implications of the Bring-Your-Own-Device (BYOD) paradigm. My presentation was selected as Best Presentation in my track. This made me feel very honoured because all the work done by my colleagues at Warwick DCS is amazing with high academic standards, so being considered one of the best amongst the best is trully a very delightful experience.

WPCCS 16 Presentation from Denys A. Flores

Incident Response and the Rise of Organizational Doxing: Ask Bruce, epis...

2016-06-08T07:11:00.001-07:00

This video explains in a very understandable way why data (information) security breaches are dangerous. Here, Bruce Schneir also explains that this danger is usually related to the lack of effective incident response strategies inside organisations.

A Proactive Approach to Database Forensics

2016-05-05T05:15:00.000-07:00

Database forensics from Denys A. Flores

How Meditation can help on Anxiety

2016-03-15T06:35:00.000-07:00

Hello again :-)

I haven´t written in a while... I´ve been trying to find time to study and support my wife during her pregnancy... It hasn´t been easy to adapt to changes and try to find balance in between my personal and student life.

My first semester in University has been... well... full of anxiety. It's the first time I have experienced high levels of anxiety. My advisors told me that it is mainly because of the changes I am going through at the moment. Being a father and a student is very hard, because your previous experiences as a student were some years ago, and back then you didn´t have others depending on you. Well, in short, all these changes have affected a lot the way I manage my research and my time. The first stages to "get used to a new routine" are hard, and sometimes get you by surprise, unexpectedly. If you don´t do something to manage your adaptation process, it will start to affect everything around you. The first symptom I detected was my anxiety levels rising to the point of confusion and lack of action.

Because of the previous background, one month ago I began to attend meditation lessons at the University. To be honest, I was skeptical at the beginning because I thought that meditation is not very helpful. I was wrong... After the first week of practising meditation, I was able to find stability in my life and reduce my anxiety levels drastically. Incorporating breathing and muscle relaxation techniques in my daily routine has helped me a lot. These techniques are also useful when combined with gratitude and love feelings, enable your brain to disseminate these feelings to your whole body. I am not an expert in the field, but I can recommend this web site that refers to my meditation teacher Peter Keyton-Hook.

I recommend practising and applying these meditation techniques in your life, particularly if you are going through overwhelming changes that trigger your anxiety levels. Remember that to beat anxiety and bring your life back to normal, you must do something about it. Talking helps a lot, so having your loved ones around you can make a significant change. Also, trying new techniques like meditation can help you boosting your positive feelings and use them to mitigate the negative ones when they are becoming an issue.

When God and Life Surprise You

2016-02-16T07:36:00.002-08:00

It's been a while since my last post... Honestly, it is very hard to find time to post something, and sometimes your mind just go blank! Well, news about me... I must said that finally, I did it! I took a step forward and decided to come back to England to do my PhD at the University of Warwick...

How do I feel about it? Well... very pleased and happy for having been accepted in this University... a dream come true! On the other hand... there's also the challenge ahead that makes you think if you are ready for this... I've been asking this myself and sometimes I don't feel ready or 'good enough' to do it. However, there are inner motivations higher than myself that drives me and pushes me to surpass my own expectations... First, there is God telling me that He will be in control of all my circumstances in my life, including this PhD. Second, there is my wife and my son who are always encouraging me to keep moving and after a long day, they are always there to give me a hug and a smile... I see God in their faces everyday. There are also my family and friends who are with me every time when I remember the memories shared with them... There is nothing like that warming feeling of belonging and gratitude with everyone who makes your life special, although you may be miles away from the people you care the most. God and life are two interdependent aspects, characteristics, beings (whatever you may call them) that makes your existence a rewarding experience, which moves in between reality and ethereal existence... soul, mind, body, ideas... everything that they represent comes from inside and if you let them drive your motivation, you may find that enjoying what you do, even when you don't feel suitable enough, doesn't depend on how you feel about it.

Making progress is sometimes not about having results and success all the time... In my first steps on becoming a researcher, I must say that your mistakes, your ups and lows... everything makes you learn and helps you to become a better you, if only you are willing to embrace all the positive and negative aspects of the process. Now that I'm back on my beloved England, I must face the huge challenge of my life... I must defeat my own self and leave behind every fear, every wish of giving up... I must move forward... At the beginning it is hard... it really puts your heart to test, but once you stop thinking about the long path ahead, you can enjoy the journey and embrace adventure...

Becoming a researcher is more than a dream, for me, it is the means that God will use to surprise me... for me, it is the power of determination to achieve something that will make my family proud. Life can be hard, but good enough to give it a try.