Hey, im a newbie considering a career in forensic computing, i find it extremely interesting, so for my 3rd year degree project i thought what better way to learn more about it than to do my disso in some area of it, but there is a hell of a lot of topics included in the whole area, could anyone give me any advice or ideas that would be degree level to perhaps investigate for my 3rd year dissertation?
Depends how many words you have to play with -
1. Data mining, the Windows Regsitry
2. CD/DVD data structures and data recovery, tools, etc.
3. Instant message communication (MSN, Yahoo, - new technologies - Voice over IP). Artefacts & traces.
4. COTS vs Open Source, tools comparisons.
5. Web Browser artefacts and their use in forensics. History, Cache, server/browser requests, leaks, redirects.
1. Encryption - implications and challenges for the forensic investigator
2. Mobile forensics
thanks guys! hope you wont if i probe you with more questions if i have any D
1. Data mining, the Windows Regsitry
Ah, I've got some good info on that…check out my blog for the link to my GMU2005 presentations.
2. CD/DVD data structures and data recovery, tools, etc.
There's some good info out there on this topic, as well.
3. Instant message communication (MSN, Yahoo, - new technologies -
Voice over IP). Artefacts[sic] & traces.
I've done some work in this area, but the thing I'm finding is that there's no one place that holds definitive, credible info. Something along these lines would be extremely useful.
4. COTS vs Open Source, tools comparisons.
There have been some of these available…tools like Sleuthkit/TCT/Autopsy/PyFlag have been put up against EnCase/FTK.
5. Web Browser artefacts[sic] and their use in forensics. History, Cache, server/browser requests, leaks, redirects.
This another one of those areas where there's some information out there, but its not centrally located, nor is all of it entirely credible. Again…great area for a project.
H. Carvey
"Windows Forensics and Incident Recovery"
http//
http//windowsir.blogspot.com
You might want to check out Anders Svensson's Msc dissertation (focused on NTFS aspects) for comparative purposes
http//
Good luck.
Justin.