Advances in Digital Forensics VIII

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, mobile phone forensics, cloud forensics, network forensics, and advanced forensic techniques. This book is the eighth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-two edited papers from the Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the University of Pretoria, Pretoria, South Africa in the spring of 2012. Advances in Digital Forensics VIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.

Inhalt

On the Creation of Reliable Digital Evidence.- Managing Terabyte-Scale Investigations with Similarity Digests.- Visualizing Information in Digital Forensics.- XML Conversion of the Windows Registry for Forensic Processing and Distribution.- Context-Based File Block Classification.- A New Approach for Creating Forensic Hashsets.- Reasoning about Evidence Using Bayesian Networks.- Data Visualization for Social Network Forensics.- Forensic Analysis of Pirated Chinese Shanzhai Mobile Phones.- Comparing Sources of Location Data from Android Smartphone.- An Open Framework for Smartphone Evidence Acquisition.- Finding File Fragments in the Cloud.- Isolating Instances in Cloud Forensics.- Key Terms for Service Level Agreements to Support Cloud Forensics.- Evidence Collection in Peer-to-Peer Network Investigations.- Validation of Rules Used in Foxy Peer-to-Peer Network Investigations.- A Log File Digital Forensic Model.- Implementing Forensic Readiness Using Performance Monitoring Tools.- Reconstruction in Database Forensics.- Data Hiding Techniques for Database Environments.- Forensic Tracking and Mobility Prediction in Vehicular Networks.- Using Internal Depth to Aid Stereoscopic Image Splicing Detection.