Forensics Madli Kaju 104992IABM MSc in Business Information Technology Agenda Introduction Approach and process of Digital Forensics Digital Forensics tools State of play of Digital Forensics ID: 815256
Download The PPT/PDF document "An Introduction to Digital" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
An
Introduction to Digital
Forensics
Madli Kaju,
104992IABM
MSc in Business Information Technology
Slide2Agenda
Introduction
Approach and process of Digital Forensics
Digital Forensics tools
State of play of Digital Forensics
Conclusion
Slide3Digital
Forensics is processes of analysing and evaluating digital data as evidence
The science of
locating, extracting
and analysing different types of data from different devices, which specialists then interpret to server as legal evidence (Marcella, Menendez 2008)
T
he practice of
scientifically derived
and
proven technical methods
and
tools
toward the
preservation, collection, validation, identification, analysis, interpretation, documentation
and
presentation
of after-the-fact
digital information
derived from
digital sources
for the purpose of facilitating or furthering the
reconstruction of events
as forensic evidence (Willassen, Mjolsnes 2005)
Slide4After 40 years of history, Digital Forensics is
heading towards a crisis
Source: Garfinkel, SimsonL., „Digital Forensics Research: The Next 10 years“, 2010
Slide5Agenda
Introduction
Approach and process of Digital Forensics
Digital Forensics tools
State of play of Digital Forensics
Conclusion
Slide6Digital Forensics consists of various steps and techniques
The process of digital forensics is typically as follows:
Slide7Main techniques used are forensic duplication and live incident response
Forensic investigation
Forensic duplication
Live incident response
Slide8Agenda
Introduction
Approach and process of Digital Forensics
Digital Forensics tools
State of play of Digital Forensics
Conclusion
Slide9Several commercial and open source
tools for digital forensics are available
Slide10Agenda
Introduction
Approach and process of Digital Forensics
Digital Forensics tools
State of play of Digital Forensics
Conclusion
Slide11Digital Forensics
tools have not kept up
with technology
and cyber crime
Current digital forensics tools were designedto help examiners find specific evidence, not to assist in investigationsfor solving crimes committed against people where the evidence is located on a computer, not to assist in solving typical crimes committed with computers or against computers
Today's tools cannot deal with
increasing complexity
arising due to
the cloud era
Source: Garfinkel, SimsonL., „Digital Forensics Research: The Next 10 years“, 2010
Slide12Agenda
Introduction
Approach and process of Digital Forensics
Digital Forensics tools
State of play of Digital Forensics
Conclusion
Slide13Conclusion
Digital forensics is important for solving crimes
with digital
devices
against digitial devicesagainst people where evidence may reside in a device
Several sound tools and techniques exist to search and analyse digital
data
Regardless of existing tools, evolving
digital age and development of technology requires heavier research in digital forensics
Slide14Slide15Thank you for your attention!