book

Digital Evidence and Computer Crime, 3rd Edition

by Eoghan Casey

February 2011

Intermediate to advanced

840 pages

27h 33m

English

Academic Press

Read now

Unlock full access

1.1 Digital Evidence1.2 Increasing Awareness of Digital Evidence1.3 Digital Forensics: Past, Present, and Future1.4 Principles of Digital Forensics1.5 Challenging Aspects of Digital Evidence1.6 Following the Cybertrail1.7 Digital Forensics Research1.8 Summary

2.1 Language of Computer Crime Investigation2.2 The Role of Computers in Crime2.3 Summary
3.1 Duty of Experts3.2 Admissibility3.3 Levels of Certainty in Digital Forensics3.4 Direct versus circumstantial evidence3.5 Scientific Evidence3.6 Presenting Digital Evidence3.7 Summary
4.1 Federal Cybercrime Law4.2 State cybercrime law4.3 Constitutional law4.4 Fourth Amendment4.5 Fifth Amendment and encryption
5.1 The European and National Legal Frameworks5.2 Progression of Cybercrime Legislation in Europe5.3 Specific Cybercrime Offenses5.4 Computer-Integrity Crimes5.5 Computer-Assisted Crimes5.6 Content-Related Cybercrimes5.7 Other Offenses5.8 Jurisdiction5.9 Summary
6.1 Digital Investigation Process Models6.2 Scaffolding for Digital Investigations6.3 Applying the Scientific Method in Digital Investigations6.4 Investigative Scenario: Security Breach6.5 Summary
7.1 Published Guidelines for Handling Digital Crime Scenes7.2 Fundamental Principles7.3 Authorization7.4 Preparing to Handle Digital Crime Scenes7.5 Surveying the Digital Crime Scene7.6 Preserving the Digital Crime Scene7.7 Summary
8.1 Equivocal Forensic Analysis8.2 Victimology8.3 Crime Scene Characteristics8.4 Threshold Assessments8.5 Summary
9.1 Axes to Pathological Criminals and Other Unintended Consequences9.2 Modus Operandi9.3 Technology and Modus Operandi9.4 Motive and Technology9.5 Current Technologies9.6 Summary
10.1 The Role of Computers in Violent Crime10.2 Processing The Digital Crime Scene10.3 Investigative Reconstruction10.4 Conclusions
11.1 Investigating an Alibi11.2 Time as Alibi11.3 Location as Alibi11.4 Summary
12.1 Old Behaviors, New Medium12.2 Legal Considerations12.3 Identifying and Processing Digital Evidence12.4 Investigating Online Sexual Offenders12.5 Investigative Reconstruction12.6 Case Example: Scott Tyree312.7 Case Example: Peter Chapman612.8 Summary
13.1 How Computer Intruders Operate13.2 Investigating Computer Intrusions13.3 Forensic Preservation of Volatile Data13.4 Post-Mortem Investigation of a Compromised System13.5 Investigation of Malicious Computer Programs13.6 Investigative Reconstruction13.7 Summary
14.1 How Cyberstalkers Operate14.2 Investigating Cyberstalking14.3 Cyberstalking case example314.4 Summary
15.1 A Brief History of Computers15.2 Basic Operation of Computers15.3 Representation of Data15.4 Storage Media and Data Hiding15.5 File Systems and Location of Data15.6 Dealing with Password Protection and Encryption15.7 Summary
16.1 Preparation16.2 Survey16.3 Documentation16.4 Preservation16.5 Examination and Analysis16.6 Reconstruction16.7 Reporting16.8 Summary
17.1 File Systems17.2 Data Recovery17.3 Log Files17.4 Registry17.5 Internet Traces17.6 Program Analysis17.7 Summary
18.1 UNIX Evidence Acquisition Boot Disk18.2 File Systems18.3 Overview of Digital Evidence Processing Tools18.4 Data Recovery18.5 Log Files18.6 File System Traces18.7 Internet Traces18.8 Summary
19.1 File Systems19.2 Overview of Digital Evidence Processing Tools19.3 Data Recovery19.4 File System Traces19.5 Internet Traces19.6 Summary
21.1 A brief history of computer networks21.2 Technical Overview of Networks21.3 Network Technologies21.4 Connecting Networks Using Internet Protocols21.5 Summary
22.1 Preparation and Authorization22.2 Identification22.3 Documentation, Collection, and Preservation22.4 Filtering and Data Reduction22.5 Class/Individual Characteristics and Evaluation of Source22.6 Evidence Recovery22.7 Investigative Reconstruction22.8 Reporting Results22.9 Summary
23.1 Role of the internet in criminal investigations23.2 Internet Services: Legitimate Versus Criminal Uses23.3 Using the Internet as an Investigative Tool23.4 Online Anonymity and Self-Protection23.5 E-mail Forgery and Tracking23.6 Usenet Forgery and Tracking23.7 Searching and Tracking on IRC23.8 Summary
24.1 Ethernet24.2 Linking the Data-Link and Network Layers: Encapsulation24.3 Ethernet versus ATM Networks24.4 Documentation, Collection, and Preservation24.5 Analysis Tools and Techniques24.6 Summary
25.1 TCP/IP25.2 Setting Up a Network25.3 TCP/IP-Related Digital Evidence25.4 Summary

Overview

Digital Evidence and Computer Crime, Third Edition provides the knowledge necessary to uncover and use digital evidence effectively in any kind of investigation. The widely-adopted first and second editions introduced thousands of students to this field and helped them deal with digital evidence. This completely updated edition provides the introductory materials that new students require, and also expands on the material presented in previous editions to help students develop these skills. The textbook teaches how computer networks function, how they can be involved in crimes, and how they can be used as a source of evidence. Additionally, this third edition includes updated chapters dedicated to networked Windows, Unix, and Macintosh computers, and Personal Digital Assistants. Ancillary materials include an Instructor's Manual and PowerPoint slides.

* Provides a thorough explanation of how computers & networks function, how they can be involved in crimes, and how they can be used as evidence
* Features coverage of the abuse of computer networks and privacy and security issues on computer networks