Digital Forensics Ryan Lord
Road Map - What is Digital Forensics? - Types of computer crimes - Tools - Procedures - Cases - Problems
What is digital forensics? - Also referred to as digital forensic science - It is a branch of forensic science that ecompasses the recovery and investigation of material found in digital devices - Growth of computers and computer crime in the 80's - The Computer Fraud and Abuse Act (1986) - Today, 95% of crime involves a digital device in some way
Types of Crimes -Hacking -Phising -Virsuses -Identity Theft -Cyber Stalking
Focus -Digital Forensics is focused on gathering evidence that can include: -Tracking Movements -Discovering Data -Recovering Data -Also, can be used to recover text messages and information from other devices.
Tools
Forensic Toolkit (FTK)
Encase
FTK vs Encase - Both of these programs have similar functions and accepted in court. -FTK may be too simple and does not require much knowledge of forensics. -Encase costs around $3,600 -FTK costs around $3,000
Procedure -Seizure must adhere to the fourth amendment -All data must be collect with the use of a write blocker
Enron -Largest digital forensics investigation to date -31 terabytes of data -roughly 8 billion pages of text -After 5 years, the search yielded enough information to convict many of those involved in fraud including members at the top of the company
Love Bug Virus -Created in Onel De Guzman in Spread through s -Virus cost an estimated 7 billion dollars worth of damage -Guzman was from the Phillipines -They got a search warrant but did not prosecute him
United States vs Ivanov -FBI was able to trace attacks on major US businesses to Aleksey Ivanov -They were unable to make the arrest due to jurisdiction -Ivanov was lured to the US by inviting him to interview for a fake company -He was then arrested -Facing up to 90 years in prision if found guilty on all charges
Casey Anthony -Testimony by a computer science expert who discovered searches for: -"chloroform" -"neck breaking" -"how to make chloroform" -Could not be linked to Anthony -Considered Circumstantial and was dismissed
Conclusion -The definition of digital forensics -Focus -Software and hardware used -Procedures -Cases and problems associated with them
References s-EnCase-Forensic