Digital forensics in the context of information system protection

Abstract

Although a lot has been said and written about the protection of information systems and users of the Internet, only a small number of managers and users of information technologies are aware of the significance of this problem. This can lead to occurrence of risky situations in which business information systems may be threatened. Their inadequate protection may have disastrous effects on the business process itself. The purpose of the paper is to clearly and transparently establish relations between methods and techniques of information system protection and digital forensic investigation, as well as to raise the security awareness and promote security culture as essential elements of the cycle of risk management and protection.

Iako se o zaštiti informacionih sistema i korisnika interneta često govori i piše, mali broj menadžera i korisnika informacionih tehnologija su svesni značaja ovog problema. To može dovesti do pojave rizičnih incidentnih situacija u kojima su ugroženi poslovni informacioni sistemi. Njihova neadekvatna zaštita može imati katastrofalne posledice na sam poslovni proces. Cilj rada je da se na jasan i transparentan način uspostave i dovedu u vezu metode i tehnike zaštite informacionih sistema sa digitalnom forenzičkom istragom, kao i da se skrene pažnja na bezbednosnu svest i kulturu kao esencijalne elemente ciklusa upravljanja rizikom i zaštitom.