Advances in Digital Forensics VII

1. Front Matter

   PDF

2. THEMES AND ISSUES

   1. Front Matter

      Pages 1-1

      PDF

   2. The State of the Science of Digital Evidence Examination

      • Fred Cohen, Julie Lowrie, Charles Preston

      Pages 3-21

   3. An Investigative Framework for Incident Analysis

      • Clive Blackwell

      Pages 23-34

   4. Cloud Forensics

      • Keyun Ruan, Joe Carthy, Tahar Kechadi, Mark Crosbie

      Pages 35-46

3. FORENSIC TECHNIQUES

   1. Front Matter

      Pages 47-47

      PDF

   2. Searching Massive Data Streams Using Multipattern Regular Expressions

      • Jon Stewart, Joel Uckelman

      Pages 49-63

   3. Fast Content-Based File Type Identification

      • Irfan Ahmed, Kyung-Suk Lhee, Hyun-Jung Shin, Man-Pyo Hong

      Pages 65-75

   4. Case-Based Reasoning in Live Forensics

      • Bruno Hoelz, Celia Ralha, Frederico Mesquita

      Pages 77-88

   5. Assembling Metadata for Database Forensics

      • Hector Beyers, Martin Olivier, Gerhard Hancke

      Pages 89-99

   6. Forensic Leak Detection for Business Process Models

      • Rafael Accorsi, Claus Wonnemann

      Pages 101-113

   7. Analyzing Stylometric Approaches to Author Obfuscation

      • Patrick Juola, Darren Vescovi

      Pages 115-125

4. FRAUD AND MALWARE INVESTIGATIONS

   1. Front Matter

      Pages 127-127

      PDF

   2. Detecting Fraud Using Modified Benford Analysis

      • Christian Winter, Markus Schneider, York Yannikos

      Pages 129-141

   3. Detecting Collusive Fraud in Enterprise Resource Planning Systems

      • Asadul Islam, Malcolm Corney, George Mohay, Andrew Clark, Shane Bracher, Tobias Raub et al.

      Pages 143-153

   4. Analysis of Back-Doored Phishing Kits

      • Heather McCalley, Brad Wardman, Gary Warner

      Pages 155-168

   5. Identifying Malware Using Cross-Evidence Correlation

      • Anders Flaglien, Katrin Franke, Andre Arnes

      Pages 169-182

   6. Detecting Mobile Spam Botnets Using Artificial immune Systems

      • Ickin Vural, Hein Venter

      Pages 183-192

5. NETWORK FORENSICS

   1. Front Matter

      Pages 193-193

      PDF

   2. An FPGA System for Detecting Malicious DNS Network Traffic

      • Brennon Thomas, Barry Mullins, Gilbert Peterson, Robert Mills

      Pages 195-207

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: Themes and Issues, Forensic Techniques, Fraud and Malware Investigations, Network Forensics, and Advanced Forensic Techniques. This book is the 7th volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of 21 edited papers from the 7th Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the National Center for Forensic Science, Orlando, Florida, USA in the spring of 2011. Advances in Digital Forensics VII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at theAir Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science at the University of Tulsa, Tulsa, Oklahoma, USA.

• artificial immune systems
• botnets
• cloud forensics
• obfuscation
• steganography
• algorithm analysis and problem complexity

• Air Force Institute of Technology, Wright-Patterson Air Force Base, USA

  Gilbert Peterson

• Department of Computer Science, University of Tulsa, Tulsa, USA

  Sujeet Shenoi

Policies and ethics