DFLARE
Digital Forensics, Logging, Analysis, and Response for Embedded Systems
Connected embedded systems are everywhere and under increasing attack by both state-sponsored and cybercriminal threats. However, in case of a (suspected) incident, there is no framework for device-level Digital Forensics & Incident Response (DFIR) on embedded systems. The DFLARE project will will design, build and release an open-source modular framework tailored to embedded device-level DFIR activities. The framework will aid responders in quickly assessing the situation, collecting and analyzing evidence, and also provide functionalities to aid in responsibly restoring operations. The modular DFLARE framework will support several high-profile embedded systems commonly encountered in critical infrastructure, and, of course, be well-suited for extension with additional functionalities and wider device support, kicking off an ecosystem for a currently non-existent yet critical application.
Run by Midnight Blue
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101135429. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).
