Mithileysh Sathiyanarayanan
Digital Forensics
Agenda
- What is Digital Forensics?
- Types of computer crimes
- Tools
- Procedures
- Cases
- Problems
What is digital forensics?
- Also referred to as digital forensic science
- It is a branch of forensic science that
ecompasses the recovery and investigation
of material found in digital devices
- Growth of computers and computer crime in
the 80's
- The Computer Fraud and Abuse Act (1986)
- Today, 95% of crime involves
a digital device in some way
Types of Crimes
-Hacking
-Phishing
-Viruses
-Identity Theft
-Cyber Stalking
Focus
-Digital Forensics is focused on gathering
evidence that can include:
-Tracking Movements
-Discovering Data
-Recovering Data
-Also, can be used to recover text messages
and information from other devices.
Tools
Forensic Toolkit (FTK)
Encase
FTK vs Encase
- Both of these programs have similar functions
and accepted in court.
-FTK may be too simple and does not require
much knowledge of forensics.
-Encase costs around $3,600
-FTK costs around $3,000
Procedure
-Seizure must adhere to the fourth amendment
-All data must be collect with the use of a write
blocker
Enron
-Largest digital forensics investigation to date
-31 terabytes of data
-roughly 8 billion pages of text
-After 5 years, the search yielded enough
information to convict many of those involved
in fraud including members at the top of the
company
Love Bug Virus
-Created in Onel De Guzman in 2000
-Spread through emails
-Virus cost an estimated 7 billion dollars worth
of damage
-Guzman was from the Phillipines
-They got a search warrant but did not
prosecute him
United States vs Ivanov
-FBI was able to trace attacks on major US
businesses to Aleksey Ivanov
-They were unable to make the arrest due to
jurisdiction
-Ivanov was lured to the US by inviting him to
interview for a fake company
-He was then arrested
-Facing up to 90 years in prision if
found guilty on all charges
Casey Anthony
-Testimony by a computer science expert who
discovered searches for:
-"chloroform"
-"neck breaking"
-"how to make chloroform"
-Could not be linked to Anthony
-Considered Circumstantial and was dismissed
Conclusion
-The definition of digital forensics
-Focus
-Software and hardware used
-Procedures
-Cases and problems associated with them
References
http://en.wikipedia.org/wiki/Digital_forensics
http://boingboing.net/2013/02/18/understanding-the-computer-fra.html
http://www.slideshare.net/ferumxxl/types-of-computer-crime
http://en.wikipedia.org/wiki/Forensic_Toolkit
http://data-recovery-software.findthebest.com/compare/4-13/Forensic-Toolkit-v
s-EnCase-Forensic
http://www.forensicswiki.org/wiki/Write_Blockers
http://www.contactomagazine.com/computers/cybercrimes0507.htm
http://www.bbcpa.com/forensic/Computer-Forensics/casey-anthony-trial.html
http://en.wikipedia.org/wiki/United_States_v._Ivanov

Digital Forensics