Blockchain Forensic Consulting
Fraunhofer SIT’s proactive forensic consulting follows the principle of “forensic readiness”—and this naturally applies to blockchain applications as well. Reactive forensic consulting in the blockchain context is primarily aimed at law enforcement agencies.
Forensic readiness refers to preparation for the IT forensic investigation of incidents and thus enables an effective and efficient response to future attacks. Forensic readiness is of particularly high importance, especially for a relatively new technology like blockchain, which has potentially unknown attack vectors that can vary greatly depending on the application. Time and again, reports on incidents and attacks state that those affected “did not anticipate this” and that appropriate mechanisms—which would facilitate or even enable an investigation—were not implemented. While many future attacks cannot be specifically predicted, the potential for harm—including from previously unknown attacks—can generally be assessed and categorized. Technical and non-technical measures, such as insurance or alternative risk transfer, can thus be effective. Fraunhofer SIT offers its many years of experience in IT forensics for effective and efficient prevention and risk assessment—particularly to companies whose business models are based on blockchain technology and users of mission-critical information technology (e.g., banks, insurance companies, energy providers) who intend to adopt this technology.
Another focus is on law enforcement agencies: Due to the number and severity of incidents, law enforcement agencies’ interest in forensics for blockchain systems lies in cryptocurrencies and, specifically, in the associated investigation of criminal offenses such as extortion via ransomware or illegal transactions on the dark web. While the pseudonymity of cryptocurrency transactions complicates investigations, authorities have access to a broad portfolio of state-of-the-art IT forensic methods and research to detect illegal activities. These methods must be classified, further developed, and evaluated in terms of their effectiveness.
Fraunhofer SIT serves as a trusted partner to authorities in this area, ensuring investigations are conducted in compliance with fundamental rights and the law. Fraunhofer SIT can make blockchain data traces on the dark web accessible and analyze them to aid in the investigation of criminal offenses. Even if perpetrators employ mechanisms to evade forensic analysis, investigators can often still access the desired data. When taking such an approach, special care must always be taken to ensure that the evidential value of the data is preserved.
