Cyber Fingerprinting for Digital Forensics (CyberFP)

Cyber Forensic Fingerprinting (CyberFP) has emerged as a critical tool for verifying the authenticity and origin of digital devices and evidence in forensic investigations. This paper presents a novel CyberFP verification framework based on the Chain & Hash evidences analysis, which leverages cryptographic hashes, digital signatures, and behavioral patterns to establish ownership and integrity. A multi-layered approach was developed to integrate Trusted Platform Module (TPM) data, sector watermarks, and timing signatures, validated through a probabilistic model achieving higher success rates across diverse scenarios. The framework enhances tamper resistance with redundant embeddings and cryptographic roots of trust, addresses scalability through hierarchical key management and cloud-based databases, and ensures legal admissibility via standardized protocols and blockchain custody logs.