AI Forensics Across White-, Grey-, and Black-Box Access: A Process Model and Research Agenda for Post-Incident Investigation of AI Systems

arXiv:2608.03520 · cs.CR, cs.AI · Submitted 2026-08-04 · Read on arXiv

Ali Dehghantanha, Sajad Homayoun

cs.CR, cs.AI

Submitted: 2026-08-04

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Trace — 22× in this paper · explained in 2 episodes
• RAG — 19× in this paper · explained in 3 episodes
• Provenance — 14× in this paper · explained in 5 episodes
• Access Regimes — 13× in this paper · explained in 1 episode
• Cooperation — 7× in this paper · explained in 2 episodes
• Agentic System — 5× in this paper · explained in 2 episodes
• Admissibility — 4× in this paper · explained in 2 episodes
• Explainability — 3× in this paper · explained in 4 episodes
• Failure Modes — 3× in this paper · explained in 3 episodes
• Hyperparameters — 3× in this paper · explained in 2 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Fine-Tuning — 2× in this paper · explained in 5 episodes
• Fingerprinting — 2× in this paper · explained in 2 episodes
• Interpretability — 2× in this paper · explained in 15 episodes
• Multi-Agent System — 2× in this paper · explained in 7 episodes
• Surrogate Modeling — 2× in this paper · explained in 2 episodes
• Uncertainty Quantification — 2× in this paper · explained in 9 episodes
• Agentic AI — 1× in this paper · explained in 2 episodes
• Communications Security Establishment — 1× in this paper
• Embeddings — 1× in this paper · explained in 2 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 8 episodes
• Influence Functions — 1× in this paper · explained in 3 episodes
• KV cache — 1× in this paper · explained in 4 episodes
• Membership Inference — 1× in this paper · explained in 2 episodes
• Model Drift — 1× in this paper · explained in 4 episodes
• Scaffold — 1× in this paper · explained in 2 episodes
• Steering — 1× in this paper · explained in 2 episodes

Sources

• Founding The Domain of AI Forensics
• Foundations for Investigations of Agentic AI Systems from the Forensic Analysis of OpenClaw
• Model Provenance via Model DNA

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Estimating the Social Cost of Corporate Data Breaches
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills