Cyber warfare defended through forensics

Cyber warfare is considered by many to be the most serious homeland security threat of our time and solutions seem intractable. Many experts believe scrapping the Internet altogether and rebuilding with draconian safeguards is the only answer. If not to

Law enforcement needs to get smart about collecting digital evidence

The time has come to empower frontline law enforcement officers to make better decisions when seizing digital evidence, says forensic analyst Andrew Sheldon. The number of computer forensic specialists is growing, but there will never be enough to cope with

Forensics in the Cloud: 5 Hot Skills

When it comes to collecting forensic evidence from cloud providers and determining whether a data breach has occurred, what used to take two weeks now takes a month for Greg Thompson, vice president of enterprise security services at Scotia Bank.

Publishing articles at Forensic Focus

Forensic Focus is always keen to publish articles, papers or blog posts of interest to the digital forensics community. Articles are published not only online but also included in the monthly newsletter (sent to over 12,00 subscribers) and promoted via

What is “good enough” information security?

by Simon Biles "I have, occasionally in the past, mentored people in (on?) Information Security – once for money (this is not a revenue stream that I’ve mastered by any stretch of the imagination!), but more often than not, informally

What is “good enough” information security?

by Simon Biles I have, occasionally in the past, mentored people in (on?) Information Security – once for money (this is not a revenue stream that I’ve mastered by any stretch of the imagination!), but more often than not, informally

2011 European Digital Forensics and Incident Response Summit

SANS Institute has announced its final roster of speakers presenting at the annual European Digital Forensics and Incident Response Summit this September over the 21st and 22nd at the Thistle Hotel Marble Arch. SANS has added Andrew Sheldon, a pioneer

Cyber Crime: Big, but not Bigger than Drugs

An attention-grabbing report by an Internet security company plays with figures to declare that cyber crime is bigger than drug trafficking, but the numbers don’t add up. The report from security firm Norton estimates the size of cyber crime last

13 Percent of Brits are ‘Casual Hackers’

Hacking and computer crime are not just the business of shady, anonymous criminals in lawless underground forums; according to new research, 13 percent of the British have admitted to ‘casual’ hacking: accessing someone else’s online account details without their permission.

Google History Forensics

by Craig Ball In my last Forensic Focus column, I touched on migration to handhelds and the cloud, mushrooming drive capacities and encryption-by-default as just some of the factors auguring the eventual extinction of conventional digital forensics. But an end

Time and Forensics

by Simon Biles Time fascinates me, it has an amazing history and it has some great “toys”. One of my favourite quotes of all time is from Groucho Marx: “Time flies like an arrow, fruit flies like a banana.” I

Digital forensics: The inside story

Jelle Niemantsverdriet is the Principal Consultant, Forensics and Investigative Response EMEA, Verizon Business Security Solutions. In this interview he introduces the reader to the world of digital forensics and talks about computer forensics tools, privacy concerns, the fundamental differences in

Obtaining Information from Mobile Devices in Criminal Investigations

by David W. Bennett "Mobile device forensics has expanded significantly over the past few years. Older model mobile phones could store a limited amount of data that could be easily obtained by the forensics investigator. With the development of the

The cold boot attack: Can it be used for forensic memory acquisition?

by Richard Carbone "The purpose of this technical memorandum is to examine the technical characteristics behind the cold boot attack technique and to understand when and how this technique should be applied to the field of computer forensic investigations. Upon