Thursday, September 10, 2009

The black art of digital forensics

What makes a good digital forensics specialist? Steve Gold looks at some of the latest applications and investigates how the forensic investigator’s role has evolved in order to comply with changing customer priorities

Digital data forensics – as a science – has been around for more than 25 years, with its first high-profile user being Dr Alan Solomon, who founded S&S International in 1983 to produce software for early MS-DOS-based PCs.

After founding S&S, Alan went on to develop his company’s expertise in data recovery and, as history tells us, PC viruses and defences against them.

By the late 1980s, Alan’s expertise had moved into digital forensics and, as a world renowned expert, he appeared as an expert witness in many legal cases of the day.

One of Doc Solly’s (as Alan Solomon was later to be become known) mainstay digital forensic building blocks was the PC system clock, the timestamp for which has become the central argument in many civil and criminal litigation cases throughout the years.

PC system clocks however, are not a reliable source of forensic data. In a 2007 study by Florian Buchholz and Brett Tjaden – two professors at the James Madison University in Virginia – more than a quarter of the web servers on the internet had their clocks off-beam (i.e. incorrect) by more than 10 seconds.

To Continue Reading: Click Here
-----------------------------------------
Source: infosecurity-magazine.com
By: Steve Gold

0 comments: