Case Study of Network forensic readiness for financial network in the Case of Ethiopian banks.

B.Sc. Lulit Girma Woldegiorgis

Master's thesis

Abstract:

Banks are a crucial portion of the economy that facilitates expenditure, but, despite their importance, they are vulnerable to failure. Ethiopian banks' reliance on technology is growing faster than previously and has far-reaching consequences like exposing them to cyber-attacks. Despite the fact that banks are working on cyber security, attacks cause damage, and the investigation of the damage exposes the banks to additional costs and time waste. This is a signal for banks that need to improve their network forensic readiness capabilities. There is an observation of good practices to fulfil the readiness processes before an incident. However, there are not much studies that address current practices in the literature part. This research follows a qualitative method to study the case in which the current practices regarding Network forensic readiness in Ethiopian banks and the first paper to address the area. The results revealed that banks do not have satisfactory pre-incident activities implementation, including incident detection and alerting tools. Most important findings regarding the improper performance of defined information system architecture and data handling, including incident management, are observed as if there are good practices on implementing modern monitoring tools and frequent revision of necessary job aids and documents. Also, work on the awareness gap and develop the skill of employees, proper digital evidence source identification, and set the capability of pre-incident data analysis are Expected from banks to maximize the ability of Network Forensic Readiness and introduced a model. This also has been supported by other related studies.

Keywords

Digital Forensic, Network forensic, Network forensic readiness, potential digital evidence, International Organisation for standards, Intrusion detection system, Data investigation

Language used: English

Date on which the thesis was submitted / produced: 31. 3. 2021

Thesis defence

• Supervisor: Ing. Tomáš Vokoun

Czech University of Life Sciences Prague

Faculty of Economics and Management

Master programme / field:
Systems Engineering and Informatics / Informatics