Hons project reading help

The topic is "Evaluating the securirt & digital implecations of IE 9"

*Security & Implications

What exactly is your topic on? What exactly are 'Digital Implications'?

Give a little bit more info and that might assist others in answering the question.

Sorry about the spelling corrections, but it does annoy me.

DM

Im sorry for the spelling mistakes, it was written late at night when i discovered the website.

I will be looking into how secure IE 9 is and how easy it is to do a digital investigation to find out things like browser history etc.

J

Im sorry for the spelling mistakes, it was written late at night when i discovered the website.

I will be looking into how secure IE 9 is and how easy it is to do a digital investigation to find out things like browser history etc.

J

Well, you do realize that they are two very different areas, don't you?

I mean any browser could be more or less secure/vulnerable (in connections, exploitability online, etc.) and more or less "verbose" (leaving behind LOTS of logs, temporary files, caches and what not) in a completely UNconnected manner.

For the first, the right place is somewhere "security oriented", as a first start check Secunia
http//secunia.com/advisories/vendor/1/
(though there isn't yet anything about IE 9 AFAIK)

As well, there isn't much around on the "forensics" side for the specific version 9, since it is still AFAIK in Beta
http//ie.microsoft.com/testdrive/
http//windows.microsoft.com/en-US/internet-explorer/products/ie-9/home?
I doubt that there are (yet) many papers/docs about the traces this specific new version may leave behind, you might have better luck searching for data about the now common version 8 and verify experimentally if IE 9 (beta) behaves the same as the previous version.

jaclaz

Im sorry for the spelling mistakes, it was written late at night when i discovered the website.

J

No dramas.

As Jaclaz said, they are two different things.

As a start I would suggest the new study that has come out of the US in regard to private browsing. AFAIK this is the only (published) study of its type. A link can be found here.

I think you will need to do a study with some known values and see what you get out of it. Or as has been suggested a side-by-side comparison with IE8. I haven't come across IE9 in the lab as yet…

Cheers,

DM

You might have better luck treating it as "privacy/confidentiality" vs "forensics", rather then security (as Jaclaz mentioned, browser security is a huge topic, and while it has some impact on forensics - it isn't necessarily a good comparison)

On the other hand, browser features that improve the users "privacy" and "confidentiality" (such as private browsing modes, default encryption on communications, etc) can have a direct relationship with the ability to recover forensic evidence from a browser. I would contrast IE9 with the other leading browsers in terms of privacy settings vs. the ability to recover forensically valuable information about a users browsing sessions.

I know they are different things, i am currently trying to work out what exactly to cut my project down too. I think i will end up with a side by side comparison.

thanks