IT Forensics

Acquiring and analyzing digital evidence

Eine digitale Illustration zeigt eine Lupe, die auf eine Reihe von binären Zahlen fokussiert ist, die von links nach rechts über den Bildschirm verlaufen. Im Hintergrund sind Symbole für Dateien und digitale Medien zu sehen, die auf die Vielfalt der zu analysierenden digitalen Spuren hinweisen. Das Bild verdeutlicht die Aufgaben der IT-Forensik, wie die Spurenerkennung auf IT-Geräten und die Entwicklung von Werkzeugen zur Datenrekonstruktion und Analyse, um kriminelle Handlungen aufzudecken. Es spiegelt die Herausforderungen wider, die durch die Masse der Daten und den Einsatz von Counter-Forensics-Techniken entstehen, und weist auf die thematischen Schwerpunkte und Angebote des Fraunhofer SIT in der IT-Forensik hin.

Today, many criminals use computers and the Internet for their own purposes. They often leave behind digital traces that can be used to discover, investigate and prove criminal or illegal activities. The task of IT forensics is to identify, preserve and analyze these traces. However, technical developments continue to present investigators with major challenges: The mass of data has increased to such an extent that the information can only be efficiently analyzed and evaluated with the help of IT forensic tools. These tools must be further developed to keep up with the rapid pace of technological development. In addition, perpetrators use computer technology to cover their tracks and circumvent the application of IT forensic procedures and tools through the targeted use of counter-forensics techniques.

Our topics

  • Trace detection on hard disks, mobile devices and other IT devices
  • Development of IT forensic tools
  • File Carving / Data Reconstruction
  • Robust and efficient recognition of similar files
  • Image classification in terms of visible content
  • Manipulation detection for multimedia data
    • Detection of “Copy & Paste”, e.g. image splicing
    • Identifying AI-generated synthetic content, e.g. deepfakes
    • Metadata analysis
  • Text Data Analysis
    • Computational Linguistics / NLP
    • Authorship Analysis
    • Topic Modeling
    • Sentiment Analysis
  • Crawling and Open Source Intelligence OSINT
  • Attacks, Security and Privacy in Machine Learning (ML)
  • Fake news detection in texts and images
  • Forensic financial data analysis for fraud detection

Our offer

Fraunhofer SIT is active in many areas of IT forensics and offers the following services and solutions for companies and public authorities

  • Contract Research and consulting
  • Publicly funded research projects, preferably in cooperation with partners from industry and public authorities
  • IT forensic expert opinions as a service
  • Licensing of our security solutions
  • Continuing education courses
Contact
Prof. Dr. Martin Steinebach
Prof. Dr. Martin Steinebach
Media Security and IT Forensics
Phone +49 6151 869-349
Rocognizing Fake News

Fraunhofer SIT deals with disinformation and its technical detection. As part of the ATHENE research center, a laboratory with IT forensic tools has now been established at Fraunhofer SIT to uncover manipulations in various areas.

Checking the Authenticity of Media Data

Our Continuing Education Programs

IT Forensics in the Cybersecurity
Learning Lab: Learn to Analyze and Secure Digital Traces

Learn more

Certificate Course

Learn more