29. Improving Data Forensic Analysis and Reverse Engineering Through Augmented Reality

Abstract

The field of computational forensic science, including malware reverse engineering, is growing exponentially to combat the ever-increasing threat of digital crime. With the development of the field, the number of tools vital to completing the required tasks is also increasing. This growth is approaching a point of concern at which individuals cannot work effectively due to the various tools, hardware, and software required to get the job done. This is where the need for augmented reality environments, like the Microsoft HoloLens, can be of assistance.

The Microsoft HoloLens is a device used to implement augmented reality that lets you see, hear, and interact with holograms in nearly any environment. This fills a critical gap in the need for constant changes in hardware as various systems can be digitized or be remotely accessed using the HoloLens. In addition, the individual’s virtual workspace can be fully tailored to suit their projects’ needs, by presenting multiple virtual desktops and associated tools within reach of the subject without the need for half a dozen physical monitors and computer workstations in a single location. This level of customization has not been possible before due to being limited by physical space and the cost associated with constant customization of a workspace. Our goal is to create a custom reverse engineering and computer forensics multi-workstation interface that will allow an expert user to interact with as many as five remote virtual machines or workstations, and as many as five to ten virtual monitors in a normal office environment using the HoloLens.