Advances in Digital Forensics

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Practically every crime now involves some digital evidence; digital forensics provides the techniques and tools to articulate this evidence. This book describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations.

Some Challenges in Digital Forensics.- File System Support for Digital Evidence Bags.- Applying Machine Trust Models to Forensic Investigations.- Exploring Big Haystacks: Data Mining and Knowledge Management.- Countering Hostile Forensic Techniques.- Collusion Detection Using Multimedia Fingerprints.- Linking Individuals to Digital Information.- Mac OS X Forensics.- Assessing Trace Evidence Left by Secure Deletion Programs.- Active Traffic Capture for Network Forensics.- Analysis of Web Proxy Logs.- An Architechture for SCADA Network Forensics.- Forensic Analysis of BIOS Chips.- Process Flow Diagrams for Training and Operations.- Criminal Regulation of Anti-Forensic Tools in Japan.