COMPUTER AND INTRUSION FORENSICS
COMPUTER CRIME, COMPUTER FORENSICS, AND COMPUTER SECURITY INTRODUCTION HUMAN BEHAVIOR IN THE ELECTRONIC AGE THE NATURE OF COMPUTER CRIME ESTABLISHING A CASE IN COMPUTER FORENSICS COMPUTER FORENSIC ANALYSIS WITHIN THE FORENSIC TRADITION THE NATURE OF DIGITAL EVIDENCE RETRIEVAL AND ANALYSIS OF DIGITAL EVIDENCE SOURCES OF DIGITAL EVIDENCE LEGAL CONSIDERATIONS COMPUTER SECURITY AND ITS RELATIONSHIP TO COMPUTER FORENSICS BASIC COMMUNICATIONS ON THE INTERNET COMPUTER SECURITY AND COMPUTER FORENSICS OVERVIEW OF THE FOLLOWING CHAPTERS REFERENCES CURRENT PRACTICE ELECTRONIC EVIDENCE SECURE BOOT, WRITE BLOCKERS AND FORENSIC PLATFORMS DISK ?LE ORGANIZATION DISK AND ?LE IMAGING AND ANALYSIS FILE DELETION, MEDIA SANITIZATION MOBILE TELEPHONES, PDAS DISCOVERY OF ELECTRONIC EVIDENCE FORENSIC TOOLS ENCASE ILOOK INVESTIGATOR CFIT EMERGING PROCEDURES AND STANDARDS SEIZURE AND ANALYSIS OF ELECTRONIC EVIDENCE NATIONAL AND INTERNATIONAL STANDARDS COMPUTER CRIME LEGISLATION AND COMPUTER FORENSICS COUNCIL OF EUROPE CONVENTION ON CYBERCRIME AND OTHER INTERNATIONAL ACTIVITIES CARNIVORE AND RIPA ANTITERRORISM LEGISLATION NETWORKS AND INTRUSION FORENSICS COMPUTER FORENSICS IN LAW ENFORCEMENT AND NATIONAL SECURITY THE ORIGINS AND HISTORY OF COMPUTER FORENSICS THE ROLE OF COMPUTER FORENSICS IN LAW ENFORCEMENT PRINCIPLES OF EVIDENCE JURISDICTIONAL ISSUES FORENSIC PRINCIPLES AND METHODOLOGIES COMPUTER FORENSICS MODEL FOR LAW ENFORCEMENT COMPUTER FORENSIC—SECURE, ANALYZE, PRESENT (CFSAP) MODEL FORENSIC EXAMINATION PROCEDURES ANALYSIS PRESENTATION FORENSIC RESOURCES AND TOOLS OPERATING SYSTEMS DUPLICATION AUTHENTICATION SEARCH FILE VIEWERS COMPETENCIES AND CERTI?CATION TRAINING COURSES CERTI?CATION COMPUTER FORENSICS AND NATIONAL SECURITY NATIONAL SECURITY CRITICAL INFRASTRUCTURE PROTECTION NATIONAL SECURITY COMPUTER FORENSIC ORGANIZATIONS COMPUTER FORENSICS IN FORENSIC ACCOUNTING AUDITING AND FRAUD DETECTION DETECTING FRAUD—THE AUDITOR AND TECHNOLOGY DE?NING FRAUDULENT ACTIVITY WHAT IS FRAUD? INTERNAL FRAUD VERSUS EXTERNAL FRAUD UNDERSTANDING FRAUDULENT BEHAVIOR TECHNOLOGY AND FRAUD DETECTION DATA MINING AND FRAUD DETECTION DIGIT ANALYSIS AND FRAUD DETECTION FRAUD DETECTION TOOLS FRAUD DETECTION TECHNIQUES FRAUD DETECTION THROUGH STATISTICAL ANALYSIS FRAUD DETECTION THROUGH PATTERN AND RELATIONSHIP ANALYSIS DEALING WITH VAGUENESS IN FRAUD DETECTION SIGNATURES IN FRAUD DETECTION VISUAL ANALYSIS TECHNIQUES LINK OR RELATIONSHIP ANALYSIS TIME-LINE ANALYSIS CLUSTERING BUILDING A FRAUD ANALYSIS MODEL STAGE 1: DE?NE OBJECTIVES STAGE 2: ENVIRONMENTAL SCAN STAGE 3: DATA ACQUISITION STAGE 4: DE?NE FRAUD RULES STAGE 5: DEVELOP ANALYSIS METHODOLOGY STAGE 6: DATA ANALYSIS STAGE 7: REVIEW RESULTS APPENDIX 4A CASE STUDIES THE CASE OF ‘‘LITTLE NICKY’’ SCARFO THE LEGAL CHALLENGE KEYSTROKE LOGGING SYSTEM THE CASE OF ‘‘EL GRITON’’ SURVEILLANCE ON HARVARD’S COMPUTER NETWORK IDENTI?CATION OF THE INTRUDER: JULIO CESAR ARDITA TARGETS OF ARDITA’S ACTIVITIES MELISSA A WORD ON MACRO VIRUSES THE VIRUS TRACKING THE AUTHOR THE WORLD TRADE CENTER BOMBING (1993) AND OPERATION OPLAN BOJINKA OTHER CASES TESTING COMPUTER FORENSICS IN COURT THE CASE OF THE TENDER DOCUMENT INTRUSION DETECTION AND INTRUSION FORENSICS INTRUSION DETECTION, COMPUTER FORENSICS, AND INFORMATION WARFARE INTRUSION DETECTION SYSTEMS THE EVOLUTION OF IDS IDS IN PRACTICE IDS INTEROPERABILITY AND CORRELATION ANALYZING COMPUTER INTRUSIONS EVENT LOG ANALYSIS TIME-LINING NETWORK SECURITY DEFENSE IN DEPTH MONITORING OF COMPUTER NETWORKS AND SYSTEMS ATTACK TYPES, ATTACKS, AND SYSTEM VULNERABILITIES INTRUSION FORENSICS INCIDENT RESPONSE AND INVESTIGATION ANALYSIS OF AN ATTACK A CASE STUDY—SECURITY IN CYBERSPACE FUTURE DIRECTIONS FOR IDS AND INTRUSION FORENSICS RESEARCH DIRECTIONS AND FUTURE DEVELOPMENTS FORENSIC DATA MINING—?NDING USEFUL PATTERNS IN EVIDENCE TEXT CATEGORIZATION AUTHORSHIP ATTRIBUTION: IDENTIFYING E-MAIL AUTHORS ASSOCIATION RULE MINING—APPLICATION TO INVESTIGATIVE PRO?LING EVIDENCE EXTRACTION, LINK ANALYSIS, AND LINK DISCOVERY EVIDENCE EXTRACTION AND LINK ANALYSIS LINK DISCOVERY STEGOFORENSIC ANALYSIS IMAGE MINING CRYPTOGRAPHY AND CRYPTANALYSIS THE FUTURE—SOCIETY AND TECHNOLOGY INTRODUCTION COMPUTERS UNDENIABLY MAKE A LARGE PART OF HUMAN ACTIVITY FASTER, SAFER, AND MORE INTERESTING THEY CREATE NEW MODES OF WORK AND PLAY THEY CONTINUALLY GENERATE NEW IDEAS AND OFFER MANY SOCIAL BENE?TS, YET AT THE SAME TIME THEY PRESENT INCREASED OPPORTUNITIES FOR SOCIAL HARM THE SAME TECHNOLOGIES POWERING THE INFORMATION REVOLUTION ARE NOW DRIVING THE EVOLUTION OF COMPUTER FORENSICS: THE STUDY OF HOW PEOPLE USE COMPUTERS TO IN?ICT MISCHIEF, HURT, AND EVEN DESTRUCTION PEOPLE SAY THAT THE INFORMATION REVOLUTION IS COMPARABLE WITH THE INDUSTRIAL REVOLUTION, AS IMPORTANT AS THE ADVENT OF PRINT MEDIA, PERHAPS EVEN AS SIGNI?CANT AS THE INVENTION OF C H A P T E R