Upload File

it-forensics and information security - owaspfeb 28, 2013  · • security/ safety/ reliability •...

  • Home
  • Documents
  • IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,
35
För utveckling av verksamhet, produkter och livskvalitet. IT-forensics and information security (CC BY-SA) IT-forensics and information security (CC BY-SA)

Upload: others

Post on 28-Sep-2020

0 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

För utveckling av verksamhet, produkter och livskvalitet.

IT-forensics and information security

(CC BY-SA)

IT-forensics and information security

(CC BY-SA)

Page 2: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Locards kontamineringsprincip

Page 3: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Locards kontamineringsprincip

Page 4: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Locards kontamineringsprincip

Page 5: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Exempel

• Du träffar på en påslagen dator. • Ska du ta med den påslagen?• Ska du stänga ner den via operativsystemet?

• Båda metoderna kontaminerar.

Page 6: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensikern

Page 7: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensikern

Teknik -specialist

Page 8: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensikern

Teknik -specialist

Analytiker

Page 9: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensikern

Teknik -specialist

Analytiker

Juridisktkunnig

Page 10: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensikern

Teknik -specialist

Analytiker

Juridisktkunnig

Page 11: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensiska uppdrag

Page 12: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensiska uppdrag

Preventivteknik

Page 13: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensiska uppdrag

Preventivteknik Policy

Page 14: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensiska uppdrag

Strategi

Preventivteknik Policy

Page 15: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensiska uppdrag

Strategi

Preventivteknik Policy

Page 16: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

IT-forensik och informationssäkerhet, 120/180 hp

Page 17: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Methods

• Blended learning• Flipped classroom• Peer interaction• Hands on, lab intensive

Page 18: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Administration ofComputer Systems

• Computer fundamentals• Computer components• Installing OS• Configuring/ hardening• Troubleshooting

• Based on ”Cisco IT Essentials”• Practical test• Report• Presentation

Page 19: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Administration ofOperating Systems

• Linux fundamentals• Set up a typical linux environment, LAMP, mail

server, DNS• Practical test

Page 20: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Digital Storage Data Extraction

• Basics of evidence handling• Basics of data extraction from different media

types• Understanding of how to prevent data extraction• Understanding of limitations• Capability to make ”back of the envelope”

calculations

Page 21: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Advanced IT-Forensic Tools 1

• How to work with typical IT-forensic suites• Data extraction• Search, Mining, Recover, Windows specifics…

• Focus on EnCase / EnCE certification• Practical hands on ”live” case with role play

• Student selling exam drafts• Missing person scenario• Illegal surveilance

Page 22: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Advanced IT-Forensic Tools 2

• Focus on embedded systems• How to hack a modern car• Border scan protocol (JTAG)• Identifying data manipulation• Data extraction & mining

• Seminars, reading scientific papers• Paper• Workshop/ mini conference

Page 23: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Advanced IT-Forensic Tools 3

• Project based training• Standard cases• Two teams, alternating red/blue operation

• Create a case• Swap cases• Try to analyze• Report

• Increasing difficulty

Page 24: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

SCADA

• Industrial systems• Embedded systems• Security/ safety/ reliability• Real hands on project, risk analysis, modelling the

problem, creating a solution, reporting.• Water supply/ waste water handeling/ water

power plant• Note: half a year after the students analyzed

risks with water supply there was a major lyedischarge in the drinking water system.

Page 25: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Thesis work

• 20 weeks – C level• 10 weeks – B level

Page 26: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Optimizing using Triage

(CC BY 2.0) U.S. Army

Page 27: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

OSS vs. proprietary solutions

Copy left. Copy right.

(CC BY 2.0) cheetah100

Page 28: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Portabel UPS

Page 29: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

RAM contaminationduring data extraction

(CC BY-SA 2.0) Daniel Dionne

Page 30: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Identification ofTrueCrypt-containers

Page 31: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Wardriving

• Mapping of three major cities• Focus on the WPS bug (121231)• Image not related

Page 32: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Pen-test of medium sized ISP

Page 33: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

Collaboration

• Program comity• Thesis topics• Thesis supervision• Project topics• Guest lectures

Page 34: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

UT-EXPO

• 30/5 - 1/6

Page 35: IT-forensics and information security - OWASPFeb 28, 2013  · • Security/ safety/ reliability • Real hands on project, risk analysis, modelling the problem, creating a solution,

[email protected]


Cyber Forensics and Information Security

Information Forensics and Security › ... › TCs › ifs › docs › booklet_wif… · Keynote Lectures ... Transactions on Information Forensics and Security (2013-2015). S.

Security Forensics - T3DD15

Security Monitoring for Wireless Network Forensics

CYBER SECURITY / FORENSICS - TulsaTech.edu...CYBER SECURITY / FORENSICS COURSES, SCHEDULING INFORMATION & ESTIMATED TUITION » Courses (First Year) Fundamentals of Technology Principles

ENCASE CYBER-SECURITY FORENSICS Email Investigation Recovering

REQUIREMENTS FOR THE DIGITAL FORENSICS AND CYBER SECURITY MINOR DIGITAL FORENSICS · 2018-10-01 · DIGITAL FORENSICS AND CYBER SECURITY PROGRAM REQUIREMENTS FOR THE DIGITAL FORENSICS

Network Security Forensics

Journal of Digital Forensics, Security and Law

Stability, Reliability & Security

Cloud Computing : Security and Forensics

IT-forensics and information security (CC BY-SA) IT-forensics and

SAFETY, SECURITY AND FORENSICS

Information Technology, Forensics, Security and Business Improvement

Android– forensics and security testing

FORENSICS & SECURITY - Elsevierscitechconnect.elsevier.com/.../forensics-security... · SEP 2014 • ISBN: 9780124052130 FORENSIC SCIENCE Introduction to Environmental Forensics,

Syllabus M.Tech (Cyber Forensics & Information Security)

Digital Forensics: Tools and Techniques · Challenges of Digital Forensics From a legal and technical standpoint, there are several challenges of digital forensics The reliability

Improving mobile security with forensics, app analysis · PDF fileImproving Mobile Security with forensics, app analysis and big data. ... Author of two mobile forensics + security

Layer 2, routing protocols, router security & forensics

Computer)Forensics - Computing Science and Mathematics ... · Computer)Security)&)Forensics Autumn)2014 Computer)Forensics! Computer)Forensics)is)the)process)of)analysing)digital)media)to)determine)if)

Malware Forensics Field Guide for Linux Systems: Digital Forensics …cdn.ttgtmedia.com/rms/security/Malware Forensics Field... · 2014-09-02 · 164 MALWARE FORENSICS FIELD GUIDE

Security Incident Response and Forensics on AWS

Android Forensics and Security Testing Course_PUBLIC_RELEASE

Statistical Tools for Digital Forensics Multimedia Security

National Security, Forensics and Mobile Communications

Topic : Antiforensics AKA Digital Security...Anti Forensics Your book uses label “anti forensics” – Most people use the word “security” – Its anti-forensics when you're

Cyber ID Sleuth Data Security Forensics

Multimedia in Forensics, Security, and Intelligence Face ...biometrics.cse.msu.edu/...ApplicationsForensics_IEEEMultimedia11.… · Multimedia in Forensics, Security, and Intelligence

Promoting International Security through Nuclear Forensics

Computer Forensics – Mobile Forensics –Cyber … SESSION 1...4/7/16 1 Computer Forensics – Mobile Forensics –Cyber Security – Lit Support Training Module Objectives • User

Network Forensics, Physical Security & Managed Applications

Desktop Forensics: Windows - ULisboa · Desktop Forensics: Windows Part II.A. Techniques and Tools: Computer Forensics CSF: Forensics Cyber-Security Fall 2015 Nuno Santos

Observer Platform Network Security Forensics. Agenda Introduction o Today’s security challenges o Observer Platform network forensics benefits Five Steps

B.Sc. Information Security & Digital Forensics-2017 ...syllabus.b-u.ac.in/ccii/1718/ug_info_security_digi_forensic_1718.pdfB.Sc. Information Security & Digital Forensics-2017-18onwards