Ebook: Advances in Digital Forensics VIII: 8th IFIP WG 11.9 International Conference on Digital Forensics, Pretoria, South Africa, January 3-5, 2012, Revised Selected Papers

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, mobile phone forensics, cloud forensics, network forensics, and advanced forensic techniques. This book is the eighth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-two edited papers from the Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the University of Pretoria, Pretoria, South Africa in the spring of 2012. Advances in Digital Forensics VIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.

---

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, mobile phone forensics, cloud forensics, network forensics, and advanced forensic techniques. This book is the eighth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-two edited papers from the Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the University of Pretoria, Pretoria, South Africa in the spring of 2012. Advances in Digital Forensics VIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.

---

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, mobile phone forensics, cloud forensics, network forensics, and advanced forensic techniques. This book is the eighth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-two edited papers from the Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the University of Pretoria, Pretoria, South Africa in the spring of 2012. Advances in Digital Forensics VIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.
Content:
Front Matter....Pages -
Front Matter....Pages 1-1
On the Creation of Reliable Digital Evidence....Pages 3-17
Managing Terabyte-Scale Investigations with Similarity Digests....Pages 19-34
Visualizing Information in Digital Forensics....Pages 35-47
Front Matter....Pages 49-49
XML Conversion of the Windows Registry for Forensic Processing and Distribution....Pages 51-65
Context-Based File Block Classification....Pages 67-82
A New Approach for Creating Forensic Hashsets....Pages 83-97
Reasoning about Evidence using Bayesian Networks....Pages 99-113
Data Visualization for Social Network Forensics....Pages 115-126
Front Matter....Pages 127-127
Forensic Analysis of Pirated Chinese Shanzhai Mobile Phones....Pages 129-142
Comparing Sources of Location Data from Android Smartphones....Pages 143-157
An Open Framework for Smartphone Evidence Acquisition....Pages 159-166
Front Matter....Pages 167-167
Finding File Fragments in the Cloud....Pages 169-185
Isolating Instances in Cloud Forensics....Pages 187-200
Key Terms for Service Level Agreements to Support Cloud Forensics....Pages 201-212
Front Matter....Pages 213-213
Evidence Collection in Peer-to-Peer Network Investigations....Pages 215-230
Validation of Rules Used in Foxy Peer-to-Peer Network Investigations....Pages 231-245
A Log File Digital Forensic Model....Pages 247-259
Implementing Forensic Readiness Using Performance Monitoring Tools....Pages 261-270
Front Matter....Pages 271-271
Reconstruction in Database Forensics....Pages 273-287
Data Hiding Techniques for Database Environments....Pages 289-301
Front Matter....Pages 271-271
Forensic Tracking and Mobility Prediction in Vehicular Networks....Pages 303-317
Using Internal Depth to Aid Stereoscopic Image Splicing Detection....Pages 319-333

---

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance -- investigations of security breaches yield valuable information that can be used to design more secure systems. Advances in Digital Forensics VIII describes original research results and innovative applications in the discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include: themes and issues, forensic techniques, mobile phone forensics, cloud forensics, network forensics, and advanced forensic techniques. This book is the eighth volume in the annual series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-two edited papers from the Eighth Annual IFIP WG 11.9 International Conference on Digital Forensics, held at the University of Pretoria, Pretoria, South Africa in the spring of 2012. Advances in Digital Forensics VIII is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities. Gilbert Peterson is an Associate Professor of Computer Engineering at the Air Force Institute of Technology, Wright-Patterson Air Force Base, Ohio, USA. Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma, USA.
Content:
Front Matter....Pages -
Front Matter....Pages 1-1
On the Creation of Reliable Digital Evidence....Pages 3-17
Managing Terabyte-Scale Investigations with Similarity Digests....Pages 19-34
Visualizing Information in Digital Forensics....Pages 35-47
Front Matter....Pages 49-49
XML Conversion of the Windows Registry for Forensic Processing and Distribution....Pages 51-65
Context-Based File Block Classification....Pages 67-82
A New Approach for Creating Forensic Hashsets....Pages 83-97
Reasoning about Evidence using Bayesian Networks....Pages 99-113
Data Visualization for Social Network Forensics....Pages 115-126
Front Matter....Pages 127-127
Forensic Analysis of Pirated Chinese Shanzhai Mobile Phones....Pages 129-142
Comparing Sources of Location Data from Android Smartphones....Pages 143-157
An Open Framework for Smartphone Evidence Acquisition....Pages 159-166
Front Matter....Pages 167-167
Finding File Fragments in the Cloud....Pages 169-185
Isolating Instances in Cloud Forensics....Pages 187-200
Key Terms for Service Level Agreements to Support Cloud Forensics....Pages 201-212
Front Matter....Pages 213-213
Evidence Collection in Peer-to-Peer Network Investigations....Pages 215-230
Validation of Rules Used in Foxy Peer-to-Peer Network Investigations....Pages 231-245
A Log File Digital Forensic Model....Pages 247-259
Implementing Forensic Readiness Using Performance Monitoring Tools....Pages 261-270
Front Matter....Pages 271-271
Reconstruction in Database Forensics....Pages 273-287
Data Hiding Techniques for Database Environments....Pages 289-301
Front Matter....Pages 271-271
Forensic Tracking and Mobility Prediction in Vehicular Networks....Pages 303-317
Using Internal Depth to Aid Stereoscopic Image Splicing Detection....Pages 319-333
....