Computer And Intrusion Forensics
1st Edition
Published on 1. January 2002
420 pages
978-1-58053-630-1 (ISBN)
Description
A comprehensive and broad introduction to computer and intrusion forensics, this practical book helps you master the tools, techniques and underlying concepts you need to know, covering the areas of law enforcement, national security and the private sector. The book presents case studies from around the world, and treats key emerging areas such as stegoforensics, image identification, authorship categorization, link discovery and data mining. You also learn the principles and processes for effectively handling evidence from digital sources and law enforcement considerations in dealing with computer-related crimes, as well as how the effectiveness of computer forensics procedures may be influenced by organizational security policy. The book opens with a comprehensive introduction to computer and intrusion forensics and relates them to computer security in general and computer network security. It details the current practice of computer forensics and its role in combating computer crime, and examines the relationship between intrusion detection and intrusion forensics. What's more, the book explores the most important new areas for future research in computer forensics. This leading-edge resource is an indispensable reference for working professionals and post-graduate students alike.
More details
Other editions
Additional editions
George Mohay | Alison Anderson | Byron Collie
Computer and Intrusion Forensics
Book
03/2003
Artech House Publishers
€100.50
Shipment within 10-20 days
Content
- Intro
- Contents
- Foreword
- Preface
- Acknowledgements
- 1. Computer Crime, Computer Forensics, and Computer Security
- 1.1 Introduction
- 1.2 Human behavior in the electronic age
- 1.3 The nature of computer crime
- 1.4 Establishing a case in computer forensics
- 1.5 Legal consideratons
- 1.6 Computer security and its relationship to computer forensics
- 1.7 Overview of the following chapters
- References
- 2. Current Practice
- 2.1 Introduction
- 2.2 Electronic evidence
- 2.3 Forensic tools
- 2.4 Emerging procedures and standards
- 2.5 Computer crime legislation and computer forensics
- 2.6 Networks and intrusion forensics
- References
- 3. Computer Forensics in Law Enforcement and National Security
- 3.1 The orgins and history of computer forensics
- 3.2 The role of computer forensics in law enforcement
- 3.3 Principles of evidence
- 3.4 Computer forensics model for law enforcement
- 3.5 Forensic examination
- 3.6 Forensic resources and tools
- 3.7 Competencies and certification
- 3.8 Computer forensics and national security
- References
- 4. Computer Forensics in Forensic Accounting
- 4.1 Auditing and fraud detection
- 4.2 Defining fradulent activity
- 4.3 Technology and fraud detection
- 4.4 Fraud detection techniques
- 4.5 Visual analysis techniques
- 4.6 Building a fraud analysis model
- References
- Appendix 4A
- 5. Case Studies
- 5.1 Introduction
- 5.2 The case of "Little Nicky" Scarfo
- 5.3 The case of "El Griton
- 5.4 Melissa
- 5.5 The World Trade Center bombing (1993) and Operation Oplan Bojinka
- 5.6 Other Cases
- References
- 6. Intrusion Detection and Intrusion Forensics
- 6.1 Intrusion detection, computer forensics, and information warfare
- 6.2 Intrusion detection systems
- 6.3 Analyzing computer intrusions
- 6.4 Network security
- 6.5 Intrusion forensics
- 6.6 Future directions for IDS and intrusion forensics
- References
- 7. Research Directions and Future Developments
- 7.1 Introduction
- 7.2 Forensic data mining-finding useful patterns in evidence
- 7.3 Text catagorization
- 7.4 Authorship attribution: identifying e-mail authors
- 7.5 Association rule mining-application to investigate profiling
- 7.6 Evidence extraction, link analysis, and link discovery
- 7.7 Stegoforensic analysis
- 7.8 Image mining
- 7.9 Cryptography and cryptanalysis
- 7.10 The future-society and technology
- References
- Acronyms
- About the Authors
- Index
