Sean McKeown
Sean McKeown

Dr Sean McKeown

Lecturer

Biography

Sean McKeown is an early career academic at Âé¶¹ÉçÇø, focusing in the areas of Digital Forensic and Digital investigations, as well as general Cyber Security. Prior to joining Napier, Sean worked on Open-Source Intelligence (OSINT) investigations, while his PhD moved to focus on fast digital forensics processing techniques, particularly for non-mechanical media. His PhD research drew the attention of a local forensics spinout after a presentation at SICSA Demofest in 2017, resulting in talks about how such an approach may be incorporated in commercial products.

Sean is particularly interest in image file formats and their various use cases in digital forensics. Recent work has had a focus on the High Efficiency Image File Format (HEIF), used in modern Apple devices, and Perceptual Hashing. In the former case it was discovered that existing forensics tooling, even expensive commercial tooling available to law enforcement, isn’t particularly well equipped to handle it. He is in the process of releasing tooling that will help alleviate this deficit in capability, though he has already had conversations about the format with developers from Griffeye and Hansken. Similarly, noting that there is a dearth of evidence-based evaluation of Perceptual Hashing techniques, he is also in the process of expanding on the existing public evaluation and producing a framework to allow others to do the same.

The Perceptual Hashing work is forming the basis of an EPSRC New Investigator grant application, which is currently under development – the foundations of which were laid in the Safety Tech Challenge Fund award he was heavily involved in. The bid will seek to further develop public understanding and deployment of such technologies, particularly to understand their behaviour at scale.

Going forward, in addition to Perceptual Hashing evaluation, Sean is also keen to explore the forensics implications and tooling surrounding generative AI technologies, such as stable diffusion. Towards this end, he is taking on a PhD student to further explore this topic.

Events

Esteem

Conference Organising Activity

  • Organising Comittee - CMRiC Cyber 2024

 

Fellowships and Awards

  • Edinburgh Napier Researcher Development Fund
  • Edinburgh Napier 50th Anniversary PhD Scholarship

 

Invited Speaker

  • University of Glasgow - HATII SHAKE Seminar

 

Membership of Professional Body

  • Fellow of the Higher Education Academy

 

Reviewing

  • MDPI Applied Sciences Journal
  • IEEE Conference on Dependable and Secure Computing
  • 14th International Conference on Security of Information and Networks
  • MDPI Sensors Journal
  • CMRiC Cyber Science 202X
  • Programme Committee - IEEE International Conference on Cyber Science comprising Cyber Situational Awareness, Social Media, Cyber Security and Cyber Incident Response
  • Journal of Cyber Security Technology
  • Technical Comittee Member - IARIA Cyber 2019
  • Journal of Digital Forensics, Security and Law (JDFSL)

 

Date


27 results

Exploring Dataset Diversity for GenAI Image Inpainting Localisation in Digital Forensics

Presentation / Conference Contribution
Thomson, M., McKeown, S., Macfarlane, R., & Leimich, P. (2025, March)
Exploring Dataset Diversity for GenAI Image Inpainting Localisation in Digital Forensics. Presented at DFDS 2025: Digital Forensics Doctoral Symposium, Brno, Czech Republic
Generative Artificial Intelligence (GenAI) has significantly increased the sophistication and ease of image tampering techniques, posing challenges for digital forensics in id...

Beyond Hamming Distance: Exploring Spatial Encoding in Perceptual Hashes

Presentation / Conference Contribution
McKeown, S. (2025, April)
Beyond Hamming Distance: Exploring Spatial Encoding in Perceptual Hashes. Presented at DFRWS EU 2025, Brno, Czech Republic
Forensic analysts are often tasked with analysing large volumes of data in modern investigations, and frequently make use of hashing technologies to identify previously encoun...

Exploring Dataset Diversity for GenAI Image Tampering Localisation in Digital Forensics

Presentation / Conference Contribution
Thomson, M., McKeown, S., Macfarlane, R., & Leimich, P. (2025, April)
Exploring Dataset Diversity for GenAI Image Tampering Localisation in Digital Forensics. Presented at The Digital Forensics Research Conference Europe (DFRWS EU 2025) Digital Forensics Doctoral Symposium (DFDS), Brno, Czech Republic
Generative Artificial Intelligence (GenAI) has significantly increased the sophistication and ease of image tampering techniques, posing challenges for digital forensics in id...

Exploring DTrace as an Incident Response Tool for Unix Systems

Presentation / Conference Contribution
Duin, J., Mckeown, S., & Abubakar, M. (2024, June)
Exploring DTrace as an Incident Response Tool for Unix Systems. Presented at Cyber Science 2024, Edinburgh, Scotland
Critical National Infrastructure (CNI) is often the target of sophisticated and sustained cyber attacks perpetrated by advanced threat actors with considerable resources. Thes...

PHASER: Perceptual Hashing Algorithms Evaluation and Results -an Open Source Forensic Framework

Journal Article
Mckeown, S., Aaby, P., & Steyven, A. (2024)
PHASER: Perceptual Hashing Algorithms Evaluation and Results -an Open Source Forensic Framework. Forensic Science International: Digital Investigation, 48(Supplement), Article 301680
The automated comparison of visual content is a contemporary solution to scale the detection of illegal media and extremist material, both for detection on individual devices ...

A Bibliometric Analysis and Systematic Review of a Blockchain-Based Chain of Custody for Digital Evidence

Conference Proceeding
Onyeashie, B. I., Leimich, P., McKeown, S., & Russell, G. (2024)
A Bibliometric Analysis and Systematic Review of a Blockchain-Based Chain of Custody for Digital Evidence. In Big Data Technologies and Applications. BDTA 2023. https://doi.org/10.1007/978-3-031-52265-9_8
The effective management of digital evidence is critical to modern forensic investigations. However, traditional evidence management approaches are often prone to security and...

An Auditable Framework for Evidence Sharing and Management using Smart Lockers and Distributed Technologies: Law Enforcement Use Case

Conference Proceeding
Onyeashie, B., Leimich, P., McKeown, S., & Russell, G. (2024)
An Auditable Framework for Evidence Sharing and Management using Smart Lockers and Distributed Technologies: Law Enforcement Use Case. In Big Data Technologies and Applications (156-167). https://doi.org/10.1007/978-3-031-52265-9_11
This paper presents a decentralised framework for sharing and managing evidence that uses smart lockers, blockchain technology, and the InterPlanetary File System (IPFS). The ...

OPSEC VS Leaked Credentials: Password reuse in Large-Scale Data Leaks

Presentation / Conference Contribution
Uzonyi, D. G., Pitropakis, N., McKeown, S., & Politis, I. (2023, November)
OPSEC VS Leaked Credentials: Password reuse in Large-Scale Data Leaks. Presented at 2023 IEEE 28th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), Edinburgh, UK
Security and authentication are ubiquitous problems that impact all modern networked systems. Password-based authentication systems are still prevalent, and information leaked...

FitForensics: A Tool to Acquire Data from FIT-Compatible Wearables via the USB Mass Storage Interface

Journal Article
Perry, S., Levick, D., & Mckeown, S. (in press)
FitForensics: A Tool to Acquire Data from FIT-Compatible Wearables via the USB Mass Storage Interface. Journal of Digital Forensics, Security and Law,
Wearable and fitness tracking devices are commonplace, with global shipments forecast to continue rising in the future. These devices store a wealth of personal data that is u...

A forensic analysis of streaming platforms on Android OS

Journal Article
García Murias, J., Levick, D., & Mckeown, S. (2023)
A forensic analysis of streaming platforms on Android OS. Forensic Science International: Digital Investigation, 44, Article 301485. https://doi.org/10.1016/j.fsidi.2022.301485
This work builds on existing research in streamed video reconstruction on the Android OS, which previously demonstrated that caching occurs in most cases for the Chrome and Fi...

Pre-Napier Funded Projects

  • SICSA Elevate Business Accelerator Training
  • SICSA Postgraduate Industry Internship

Current Post Grad projects

Previous Post Grad projects