Advances in Digital Forensics IV

Practically every crime now involves some aspect of digital evidence. This is the most recent volume in the Advances in Digital Forensics series. It describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations.

This book contains a selection of twenty-eight edited papers from the Fourth Annual IFIP WG 11.9 Conference on Digital Forensics, held at Kyoto University, Kyoto, Japan in the spring of 2008.

The papers in this volume were peer-reviewed and carefully selected Much information in this series is published in advance of journal publication The contributors in this volume are world-renowned experts in their field

Texte du rabat

ADVANCES IN DIGITAL FORENSICS IV

Edited by: Indrajit Ray and Sujeet Shenoi

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems.

Advances in Digital Forensics IV describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include:

• Themes and Issues

• Evidence Recovery

• Evidence Integrity

• Evidence Management

• Forensic Techniques

• Network Forensics

• Portable Electronic Device Forensics

• Event Data Recorder Forensics

• Novel Investigation Techniques

• Forensic Tools

This book is the fourth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-eight edited papers from the Fourth Annual IFIP WG 11.9 Conference on Digital Forensics, held at Kyoto University, Kyoto, Japan in the spring of 2008.

Advances in Digital Forensics IV is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities.

Indrajit Ray is an Associate Professor of Computer Science at Colorado State University, Fort Collins, Colorado, USA.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

Contenu
Themes and Issues.- When is Digital Evidence Forensically Sound?.- Applying Traditional Forensic Taxonomy to Digital Forensics.- Evidence Recovery.- Recovering Data from Failing Floppy Disks.- Extracting Evidence Using Google Desktop Search.- Evaluation of Registry Data Removal by Shredder Programs.- Evidence Integrity.- Using Boot Control to Preserve the Integrity of Evidence.- Hypothesis-Based Investigation of Digital Timestamps.- Improving Disk Sector Integrity Using K-Dimension Hashing.- Evidence Management.- Class-Aware Similarity Hashing for Data Classification.- Applying Topic Modeling to Forensic Data.- Forensic Techniques.- Forensic Analysis of Volatile Instant Messaging.- Timely Rootkit Detection During Live Response.- Network Forensics.- Identifying and Analyzing Web Server Attacks.- Forensic Web Services.- Detecting Remote Exploits Using Data Mining.- Portable Electronic Device Forensics.- Using Sensor Dirt for Toolmark Analysis of Digital Photographs.- A New Feature-Based Method for Source Camera Identification.- Data Recovery from Windows CE Based Handheld Devices.- Legal Issues Pertaining to the Use of Cell Phone Data.- Event Data Recorder Forensics.- Protection and Recovery of Railroad Event Recorder Data.- Automobile Event Data Recorder Forensics.- Novel Investigative Techniques.- Reasoning About Evidence Using Bayesian Networks.- Inferring Sources of Leaks in Document Management Systems.- Image Background Matching for Identifying Suspects.- Forensic Tools.- An Evidence Acquisition Tool for Live Systems.- Time Analysis of Hard Drive Imaging Tools.- Fusion of Steganalysis Systems Using Bayesian Model Averaging.- A Virtual Digital Forensics Laboratory.