AccountabilityFS: A file system monitor for forensic readiness presented at JISIC 2014

by Rune Nordvik, Yi-ching Liao, Hanno Langweg,

Summary : We present a file system monitor, AccountabilityFS, which prepares an organization for forensic analysis and incident
investigation in advance by ensuring file system operation traces readily available. We demonstrate the feasibility of
AccountabilityFS in terms of performance and storage overheads, and prove its reliability against malware attacks.