Upload File

it-forensics and information security (cc by-sa) it-forensics and

  • Home
  • Documents
  • IT-forensics and information security (CC BY-SA) IT-forensics and
35
För utveckling av verksamhet, produkter och livskvalitet. IT-forensics and information security (CC BY-SA) IT-forensics and information security (CC BY-SA)

Upload: lyhanh

Post on 30-Jan-2017

218 views

Category:

Documents


1 download

Report

TRANSCRIPT

Page 1: IT-forensics and information security (CC BY-SA) IT-forensics and

För utveckling av verksamhet, produkter och livskvalitet.

IT-forensics and information security

(CC BY-SA)

IT-forensics and information security

(CC BY-SA)

Page 2: IT-forensics and information security (CC BY-SA) IT-forensics and

Locards kontamineringsprincip

Page 3: IT-forensics and information security (CC BY-SA) IT-forensics and

Locards kontamineringsprincip

Page 4: IT-forensics and information security (CC BY-SA) IT-forensics and

Locards kontamineringsprincip

Page 5: IT-forensics and information security (CC BY-SA) IT-forensics and

Exempel

• Du träffar på en påslagen dator. • Ska du ta med den påslagen?• Ska du stänga ner den via operativsystemet?

• Båda metoderna kontaminerar.

Page 6: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensikern

Page 7: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensikern

Teknik -specialist

Page 8: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensikern

Teknik -specialist

Analytiker

Page 9: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensikern

Teknik -specialist

Analytiker

Juridisktkunnig

Page 10: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensikern

Teknik -specialist

Analytiker

Juridisktkunnig

Page 11: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensiska uppdrag

Page 12: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensiska uppdrag

Preventivteknik

Page 13: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensiska uppdrag

Preventivteknik Policy

Page 14: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensiska uppdrag

Strategi

Preventivteknik Policy

Page 15: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensiska uppdrag

Strategi

Preventivteknik Policy

Page 16: IT-forensics and information security (CC BY-SA) IT-forensics and

IT-forensik och informationssäkerhet, 120/180 hp

Page 17: IT-forensics and information security (CC BY-SA) IT-forensics and

Methods

• Blended learning• Flipped classroom• Peer interaction• Hands on, lab intensive

Page 18: IT-forensics and information security (CC BY-SA) IT-forensics and

Administration ofComputer Systems

• Computer fundamentals• Computer components• Installing OS• Configuring/ hardening• Troubleshooting

• Based on ”Cisco IT Essentials”• Practical test• Report• Presentation

Page 19: IT-forensics and information security (CC BY-SA) IT-forensics and

Administration ofOperating Systems

• Linux fundamentals• Set up a typical linux environment, LAMP, mail

server, DNS• Practical test

Page 20: IT-forensics and information security (CC BY-SA) IT-forensics and

Digital Storage Data Extraction

• Basics of evidence handling• Basics of data extraction from different media

types• Understanding of how to prevent data extraction• Understanding of limitations• Capability to make ”back of the envelope”

calculations

Page 21: IT-forensics and information security (CC BY-SA) IT-forensics and

Advanced IT-Forensic Tools 1

• How to work with typical IT-forensic suites• Data extraction• Search, Mining, Recover, Windows specifics…

• Focus on EnCase / EnCE certification• Practical hands on ”live” case with role play

• Student selling exam drafts• Missing person scenario• Illegal surveilance

Page 22: IT-forensics and information security (CC BY-SA) IT-forensics and

Advanced IT-Forensic Tools 2

• Focus on embedded systems• How to hack a modern car• Border scan protocol (JTAG)• Identifying data manipulation• Data extraction & mining

• Seminars, reading scientific papers• Paper• Workshop/ mini conference

Page 23: IT-forensics and information security (CC BY-SA) IT-forensics and

Advanced IT-Forensic Tools 3

• Project based training• Standard cases• Two teams, alternating red/blue operation

• Create a case• Swap cases• Try to analyze• Report

• Increasing difficulty

Page 24: IT-forensics and information security (CC BY-SA) IT-forensics and

SCADA

• Industrial systems• Embedded systems• Security/ safety/ reliability• Real hands on project, risk analysis, modelling the

problem, creating a solution, reporting.• Water supply/ waste water handeling/ water

power plant• Note: half a year after the students analyzed

risks with water supply there was a major lyedischarge in the drinking water system.

Page 25: IT-forensics and information security (CC BY-SA) IT-forensics and

Thesis work

• 20 weeks – C level• 10 weeks – B level

Page 26: IT-forensics and information security (CC BY-SA) IT-forensics and

Optimizing using Triage

(CC BY 2.0) U.S. Army

Page 27: IT-forensics and information security (CC BY-SA) IT-forensics and

OSS vs. proprietary solutions

Copy left. Copy right.

(CC BY 2.0) cheetah100

Page 28: IT-forensics and information security (CC BY-SA) IT-forensics and

Portabel UPS

Page 29: IT-forensics and information security (CC BY-SA) IT-forensics and

RAM contaminationduring data extraction

(CC BY-SA 2.0) Daniel Dionne

Page 30: IT-forensics and information security (CC BY-SA) IT-forensics and

Identification ofTrueCrypt-containers

Page 31: IT-forensics and information security (CC BY-SA) IT-forensics and

Wardriving

• Mapping of three major cities• Focus on the WPS bug (121231)• Image not related

Page 32: IT-forensics and information security (CC BY-SA) IT-forensics and

Pen-test of medium sized ISP

Page 33: IT-forensics and information security (CC BY-SA) IT-forensics and

Collaboration

• Program comity• Thesis topics• Thesis supervision• Project topics• Guest lectures

Page 34: IT-forensics and information security (CC BY-SA) IT-forensics and

UT-EXPO

• 30/5 - 1/6

Page 35: IT-forensics and information security (CC BY-SA) IT-forensics and

[email protected]


MOSIMA IT SOLUTIONS cc

Introduction to IT Forensics and Forensics Process 1

Memory Forensics - publish.illinois.edupublish.illinois.edu/.../files/2014/03/acc-forensics.pdfWhat is Computer Forensics? Mobile Device Forensics Network Forensics Memory & Data Forensics

Cc &It Sector

Cc change it - Licencing sample applications

125 cc-125 cc Compressor 250 cc-300 cc-400 cc-500 cc cc-125 cc Compressor 250 cc-300 cc-400 cc-500 cc FR Notice d utilisation GB Owner s manual DE Bedienungsanleitung IT Libretto d

Cullum - I'm All Over It...cc cc A AAA Subscribe! 5 1'm All Over It 5 Like! DDDD BBB B GGGG DDDD GGGF GGGF DDDD BBB B GGGG DDDD DDDD cc cc AAA A cc A AAA Subscribe! 61'm All Over It

Forensics & Anti- Forensics - Power Of Communitypowerofcommunity.net/poc2007/casper.pdf · Anti-Forensics • Wipe can reply all Host Forensics Tools • Counterfeit Evidence •

IT, Forensics, Security and Business Improvement Newsletter

Windows 8 Forensics & Anti Forensics

Forensics & Anti- Forensics

Big Bend CC IT presentation

Forensics · Disk Forensics Mobile Forensics E-mail investigations Questioned document Cryptography, examination Steganography Live Forensics and Network Forensics Audio/video authentication

Live Forensics Investigations Computer Forensics 2013

Cloud Storage Forensics - SANS Computer Forensics

ISSUE 2 Forensics / Toxicology and more...It is my great pleasure to unveil Shimadzu Journal Vol.6, Issue 2, which focuses on Forensics/Toxicology. The field of Forensics/Toxicology

Acquisizione Laboratorio Disk forensics Network forensics

COE589: Digital Forensics - ccse.kfupm.edu.saahmadsm/coe589-122/00_Overview_Logisti… · Digital Forensics computer forensics mobile forensics network forensics ... COE589 - Ahmad

© The Forensics Files Lincoln-Douglas Debate The Forensics Files The Forensics Files

Preventive Digital Forensics: Creating Preventive Digital Forensics

Alabama Computer Forensics Institute - … Computer Forensics Institute 110University#Park#•#Troy,#Alabama#36082#•334=670=3134# Overview The Troy University IT department manages

PPB Forensics – May 2010 IP Theft IT Forensic Solutions Chris Hatfield Senior Manager, IT Forensics

Hands-On Computer Forensics - Tech Daystechdays.org/.../Hands-On-Computer-Forensics-Pac-IT... · You will not be ready to practice computer forensics after this ... ¥ Adroit (digital-assembly

Digital Evidence and Computer Forensics Oct 7-8 2013/Tab 02 Oct 7-8... · Digital Evidence and Computer Forensics COMPUTER FORENSICS FORENSICS FORENSICS

ICAI-WIRC Trends in Business & IT Forensics · 2012-01-23 · ICAI-WIRC Trends in Business & IT Forensics Presented by, ... – Payroll fraud ... correlate with operating cycle •

Implementation of Forensic Analysis Procedures for ...Android Forensics, Instant Messenger Forensics, Viber Forensics, WhatsApp Forensics. 1. INTRODUCTION ... communication medium

Aradhana Pandey Saumya Tripathi - 123seminarsonly.com€¦ · COMPUTER FORENSICS & WINDOWS REGISTRY Aradhana Pandey Saumya Tripathi. STEP 1 In initial forensics analysis , it is important

Computer Forensics Peter Caggiano. Outline My Background What is it? What Can it do and not do? Goals Evidence Types of forensics Future problems How

Computer forensics - Jordan University of Science and ...tawalbeh/aabfs/presentations/computer_forensics.pdf · 29.08.2006 Computer forensics 2 Computer forensics Definitions: Forensics

Anti-Forensics and Anti-Anti-Forensics

Network Forensics PPrinciples of Network Forensics

network forensics - APRICOT Forensics …what does it mean? • network forensics is the analysis of network events in order to discover the source of problem incidents

Password Recovery Solutions Forensics Investigation IT ... · Password Recovery Solutions Forensics & Investigation IT ... • Instant Messengers, E‐mail Clients • … more solutions

USB FORENSICS -PRODISCOVER USB FORENSICS –ENCASE V7csc.csudh.edu/cae/.../2013/11/All-is-not-Lost-Forensics-on-a-USB-Ale… · USB FORENSICS -PRODISCOVER USB FORENSICS -PRODISCOVER

Do-It-Yourself Mobile Forensics - Semantic Scholar · Do-It-Yourself Mobile Forensics CSE 7339 – Fall 2012 Lewis Sykalski ID#26718371 SMU D.E. Software Engineering Student Lockheed