Advances in Digital Forensics

Contents

Contributing Authors

Preface

I THEMES AND ISSUES

Chapter 1 DEALING WITH TERABYTE DATA SETS IN DIGITAL INVESTIGATIONS

Chapter 2 FORENSICS AND PRIVACY-ENHANCING TECHNOLOGIES

Chapter 3 A NETWORK- BASED ARCHITECTURE FOR STORING DIGITAL EVIDENCE

Chapter 4 DIGITAL FORENSICS: MEETING THE CHALLENGES OF SCIENTIFIC EVIDENCE

II INVESTIGATIVE TECHNIQUES

Chapter 6 DETECTING SOCIAL ENGINEERING

Chapter 7 A FRAMEWORK FOR EMAIL INVESTIGATIONS

Chapter 8 THE MITNICK CASE: HOW BAYES COULD HAVE HELPED

Chapter 9 APPLYING FORENSIC PRINCIPLES TO COMPUTER-BASED ASSESSMENT

Chapter 10 EXPLORING FORENSIC DATA WITH SELF-ORGANIZING MAPS

III NETWORK FORENSICS

Chapter 11 INTEGRATING DIGITAL FORENSICS IN NETWORK INFRASTRUCTURES

Chapter 12 USING PEER-TO-PEER TECHNOLOGY FOR NETWORK FORENSICS

Chapter 13 FORENSIC PROFILING SYSTEM

Chapter 14 GLOBAL INTERNET ROUTING FORENSICS

Chapter 15 USING SIGNALING INFORMATION IN TELECOM NETWORK FORENSICS

IV PORTABLE ELECTRONIC DEVICE FORENSICS

Chapter 16 FORENSIC ANALYSIS OF MOBILE PHONE INTERNAL MEMORY

Chapter 17 IMAGING AND ANALYSIS OF GSM SIM CARDS

Chapter 18 EXTRACTING CONCEALED DATA FROM BIOS CHIPS

V LINUX AND FILE SYSTEM FORENSICS

Chapter 19 RECOVERING DIGITAL EVIDENCE FROM LINUX SYSTEMS

Chapter 20 DETECTING HIDDEN DATA IN EXT2/EXT3 FILE SYSTEMS

VI APPLICATIONS AND TECHNIQUES

Chapter 21 FORENSIC ANALYSIS OF DIGITAL IMAGE TAMPERING

Chapter 22 CONTENT- BASED IMAGE RETRIEVAL FOR DIGITAL FORENSICS

Chapter 23 MAKING DECISIONS ABOUT LEGAL RESPONSES TO CYBER ATTACKS

Chapter 24 APPLYING FILTER CLUSTERS TO REDUCE SEARCH STATE SPACE

Chapter 25 IN- KERNEL CRYPTOGRAPHIC EXECUTABLE VERIFICATION