Avoiding Data Loss and Corruption (Towards File Integrity Monitoring)

Abstract

Cybercrimes, encompassing a range of malicious activities such as phishing, identity theft, and denial of service attacks, pose significant threats to individuals and organizations worldwide. In Malaysia, these crimes have been on the rise, with reported losses reaching RM539 million in 2019 and escalating to RM560 million in 2021 with four-fold increase recorded in 2023. These cases highlight the pressing need for effective cybersecurity measures. Moreover, the reliance on digital evidence in legal proceedings underscores the importance of accurate analysis. However, the potential for evidence tampering complicates the interpretation of digital artifacts. For instance, alterations to browser history can mislead investigators, emphasizing the necessity of robust forensic techniques. To address these challenges, a proposed project, the File Integrity Checker (FIC), aims to enhance data security through continuous monitoring of file integrity. By comparing current file states to trusted baselines using cryptographic techniques, FIC detects unauthorized modifications or corruption. Leveraging File Integrity Monitoring (FIM) principles, FIC enables proactive identification of integrity issues and facilitates forensic auditing, thereby bolstering overall cybersecurity resilience. Incorporating tools like OSSEC, the File Integrity Checker project aligns with fundamental information security principles and contributes to a comprehensive risk mitigation strategy against data breaches and system vulnerabilities. Through proactive integrity verification, organizations can safeguard data reliability and foster trust in their digital operations, mitigating the escalating threats posed by cybercrimes in Malaysia.