THE ARTIFICIAL INTELLIGENCE TECHNOLOGIES APPLICATION IN DIGITAL FORENSICS
DOI:
https://doi.org/10.33184/vest-law-bsu-2026.31.12Keywords:
digital forensics, artificial intelligence, neural network, machine learning, neural network training, dataset, computer crimesAbstract
Today, artificial intelligence (AI) technologies are widely integrated into various spheres of public life, including law enforcement. Their use has become a prerequisite for successful crime control since crime itself is significantly transformed under the influence of AI capabilities as a means of implementing criminal intent. The progressively growing volume of computer information makes it impossible to investigate crimes committed with the use of information technologies without automating data processing and identifying patterns indicative of criminal activity. Such automation can be achieved through AI technologies. The purpose of the article is to examine global practice in applying various AI technologies to solve the tasks of forensic computer expertise and the subsequent investigation of crimes committed with the use of information technologies. Results: the most appropriate neural network architectures for working with different classes of digital forensic tasks are identified: network traffic analysis, detection and classification of malicious software, analysis of user behavioral patterns, establishing event sequences, natural language processing (including the analysis of messages), working with video files and images and others. The main limitations of applying AI technologies in digital forensics are also outlined and the most promising directions for their implementation are presented.
References
Чеснокова Е.В., Усов А.И., Омельянюк Г.Г., Никулина М.В. Искусственный интеллект в судебной экспертологии / Е.В. Чеснокова, А.И. Усов, Г.Г. Омельянюк, М.В. Никулина // Теория и практика судебной экспертизы. – 2023. – Т. 18, № 3. – С. 60–77. – DOI: 10.30764/1819-2785-2023-3-60-77.
Руденкова Ю.С., Хазиев Ш.Н., Усов А.И. Искусственный интеллект и судебная компьютерно-техническая экспертиза / Ю.С. Руденкова, Ш.Н. Хазиев, А.И. Усов // Теория и практика судебной экспертизы. – 2024. – Т. 19, № 2. – С. 76–87. – DOI: 10.30764/1819-2785-2024-2-76-87.
Россинская Е.Р., Неретина Н.С., Чубина Е.А., Семикаленова А.И., Шамаев Г.П., Чернявская М.С. Современное состояние и перспективы развития машинного обучения и искусственного интеллекта для решения задач судебно-экспертной деятельности: аналитический доклад [Электронный ресурс] // URL: https://consortium.msal.ru/wp-content/uploads/2024/07/K_5-Sovremennoe-sostoyanie-i-perspektivy-razvitiya-mashinnogo-obucheniya-i-iskusstvennogo-intellekta-dlya-resheniya-zadach-sudebno-eksper.pdf (дата обращения: 06.05.2026).
Хатунцев Н.А. Судебная компьютерно-техническая экспертиза в свете цифровизации общества / Н.А. Хатунцев // Эксперт-криминалист. – 2020. – № 2. – С. 18–20.
RizwanBasha A., Annamalai R. Transforming crime scene investigations through the integration of artificial intelligence in digital forensics / A. RizwanBasha, R. Annamalai // 2024 IEEE International Conference on Communication, Computing and Signal Processing (IICCCS). – P. 1–6.
Мищук В.А. Соотношение понятий «искусственный интеллект» и «искусственная нейронная сеть» в судебной экспертологии / В.А. Мищук // Теория и практика судебной экспертизы. – 2024. – Т. 19, № 3. – С. 33–46. – DOI: 10.30764/1819-2785-2024-3-33-46.
Баланов А.Н. Машинное обучение и искусственный интеллект: учебное пособие для вузов. 2-е изд., стер. / А.Н. Баланов. – СПб.: Лань, 2025. — 172 с. — ISBN 978-5-507-52891-2.
Brink H., Richards J.W., Fetherolf M. Real-World Machine Learning / H. Brink, J.W. Richards, M. Fetherolf. – Manning Publications, 2016. – 264 p. – ISBN 9781617291920.
Vulinović K., Ivković L., Petrović J., Skračić K., Pale P. Neural Networks for File Fragment Classification / K. Vulinović, L. Ivković, J. Petrović, K. Skračić, P. Pale // 2019 42nd International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO). – P. 1194–1198.
Marturana F., Tacconi S. A Machine Learning-based Triage methodology for automated categorization of digital media / F. Marturana, S. Tacconi // Digital Investigation. – 2013. – Vol. 10, iss. 2. – P. 193–204. – DOI: 10.1016/j.diin.2013.01.001.
Moustafa N., Hu J., Slay J. A holistic review of Network Anomaly Detection Systems: A comprehensive survey / N. Moustafa, J. Hu, J. Slay // Journal of Network and Computer Applications. – 2019. – Vol. 128. – P. 33–55. – DOI: 10.1016/j.jnca.2018.12.006.
Pfautch R., Dagli C., Ashiku L. Cyber Forensics with Deep Learning Recurrent Neural Networks / R. Pfautch, C. Dagli, L. Ashiku // Procedia Computer Science. – 2025. – Vol. 268. – P. 51–60. – DOI: 10.1016/j.procs.2025.08.181.
Chourasiya L., Khatri S., Lilhore U.K. et al. Advanced system log analyzer for anomaly detection and cyber forensic investigations using LSTM and transformer networks / L. Chourasiya, S. Khatri, U.K. Lilhore [et al.] // Journal of Cloud Computing. – 2025. – Vol. 14, art. no. 60. – DOI: 10.1186/s13677-025-00789-y.
Jamshidi S. et al. Effective text classification using BERT, MTM LSTM, and DT / S. Jamshidi [et al.] // Data & Knowledge Engineering. – 2024. – Vol. 151, art. no. 102306. – DOI: 10.1016/j.datak.2024.102306.
Mahmoudi A. Investigating LSTM-based time series prediction using dynamic systems measures / A. Mahmoudi // Evolving Systems. – 2025. – Vol. 16, art. no. 71. – DOI: 10.1007/s12530-025-09703-y.
Jha S., Prashar D., Long H.V., Taniar D. Recurrent neural network for detecting malware / S. Jha, D. Prashar, H.V. Long, D. Taniar // Computers & Security. – 2020. – Vol. 99, art. no. 102037. – DOI: 10.1016/j.cose.2020.102037.
Ibrahim M., Elhafiz R. Modelling an intrusion detection using recurrent neural networks / M. Ibrahim, R. Elhafiz // Journal of Engineering Research. – 2023. – Vol. 11, iss. 1, art. no. 100013. – DOI: 10.1016/j.jer.2023.100013.
Wei Y., Chow K.P., Yiu S.M. Insider Threat Detection Using Multi-autoencoder Filtering and Unsupervised Learning / Y. Wei, K.P. Chow, S.M. Yiu // Advances in Digital Forensics XVI / ed. by G. Peterson, S. Shenoi. – Cham: Springer, 2020. – P. 273–290. – (IFIP Advances in Information and Communication Technology; vol. 589). – DOI: 10.1007/978-3-030-56223-6_15.
Studiawan H., Sohel F. Anomaly detection in a forensic timeline with deep autoencoders / H. Studiawan, F. Sohel // Journal of Information Security and Applications. – 2021. – Vol. 63, art. no. 103002. – DOI: 10.1016/j.jisa.2021.103002.
Rodrigues F.B., Giozza W., Albuquerque R., Villalba L.J.G. Natural Language Processing Applied to Forensics Information Extraction With Transformers and Graph Visualization / F.B. Rodrigues, W. Giozza, R. Albuquerque, L.J.G. Villalba // IEEE Transactions on Computational Social Systems. – 2024. – Vol. 11, no. 4. – P. 4727–4743. – DOI: 10.1109/TCSS.2022.3159677.
Tundis A., Cauteruccio F. On Machine Learning for Digital Forensics Investigation in Network Traffic / A. Tundis, F. Cauteruccio // 2025 21st International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT). – P. 1027–1033. – DOI: 10.1109/DCOSS-IoT65416.2025.00155.
Vasan D., Alazab M., Wassan S., Safaei B., Zheng Q. Image-Based malware classification using ensemble of CNN architectures (IMCEC) / D. Vasan, M. Alazab, S. Wassan, B. Safaei, Q. Zheng // Computers & Security. – 2020. – Vol. 92, art. no. 101748. – DOI: 10.1016/j.cose.2020.101748.
Nataraj L., Karthikeyan S., Jacob G., Manjunath B.S. Malware images: visualization and automatic classification / L. Nataraj, S. Karthikeyan, G. Jacob, B.S. Manjunath // Proceedings of the 8th International Symposium on Visualization for Cyber Security (VizSec '11). – New York: Association for Computing Machinery, 2011. – P. 1–7. – DOI: 10.1145/2016904.2016908.
Dhabliya D., Gujar S.N., Dhabliya R., Chavan G.T., Kalnawat A., Bendale S.P. Temporal Intelligence in AI-Enhanced Cyber Forensics using Time-Based Analysis for Proactive Threat Detection / D. Dhabliya, S.N. Gujar, R. Dhabliya [et al.] // Journal of Electrical Systems. – 2023. – Vol. 19, № 3. – P. 126–146. – DOI: 10.52783/jes.659.
Islam U., Alwageed H.S., Farooq M.M.U., Khan I., Awwad F.A., Ali I., Abonazel M.R. Investigating the Effectiveness of Novel Support Vector Neural Network for Anomaly Detection in Digital Forensics Data / U. Islam, H.S. Alwageed, M.M.U. Farooq [et al.] // Sensors. – 2023. – Vol. 23, iss. 12, art. no. 5626. – DOI: 10.3390/s23125626.
Россинская Е.Р. Нейросети в судебной экспертологии и экспертной практике: проблемы и перспективы / Е.Р. Россинская // Вестник Университета имени О.Е. Кутафина (МГЮА). – 2024. – № 3 (115). – С. 21–33. – DOI: 10.17803/2311-5998.2024.115.3.021-033.
Кокин А.В., Денисов Ю.Д. Искусственный интеллект в криминалистике и судебной экспертизе: вопросы правосубъектности и алгоритмической предвзятости / А.В. Кокин, Ю.Д. Денисов // Теория и практика судебной экспертизы. – 2023. – Т. 18, № 2. – С. 30–37. – DOI: 10.30764/1819-2785-2023-2-30-37.
Kartal E. A Comprehensive Study on Bias in Artificial Intelligence Systems: Biased or Unbiased AI, That's the Question! / E. Kartal // International Journal of Intelligent Information Technologies. – 2022. – Vol. 18, no. 1. – P. 1–23. – DOI: 10.4018/IJIIT.309582.
Billah M. Explainable AI for Digital Forensics: Ensuring Transparency in Legal Evidence Analysis / M. Billah // Journal of Forensic Science and Research. – 2025. – Vol. 9, iss. 2. – P. 109–116. – DOI: 10.29328/journal.jfsr.1001089.
Wickramasekara A., Scanlon M. A Framework for Integrated Digital Forensic Investigation Employing AutoGen AI Agents / A. Wickramasekara, M. Scanlon // Conference: 2024 12th International Symposium on Digital Forensics and Security (ISDFS). – DOI: 10.1109/ISDFS60797.2024.10527235.
