Digital forensics : digital evidence in criminal investigation

The vast majority of modern criminal investigations involve some element of digital evidence, from mobile phones, computers, CCTV and other devices. Digital Forensics: Digital Evidence in Criminal Investigations provides the reader with a better understanding of how digital evidence complements "traditional" scientific evidence and examines how it can be used more effectively and efficiently in a range of investigations.

Taking a new approach to the topic, this book presents digital evidence as an adjunct to other types of evidence and discusses how it can be deployed effectively in support of investigations. The book provides investigators/SSMs/other managers with sufficient contextual and technical information to be able to make more effective use of digital evidence sources in support of a range of investigations. In particular, it considers the roles played by digital devices in society and hence in criminal activities. From this, it examines the role and nature of evidential data which may be recoverable from a range of devices, considering issues relating to reliability and usefulness of those data.

Includes worked case examples, test questions and review quizzes to enhance student understanding Solutions provided in an accompanying website Includes numerous case studies throughout to highlight how digital evidence is handled at the crime scene and what can happen when procedures are carried out incorrectly Considers digital evidence in a broader context alongside other scientific evidence Discusses the role of digital devices in criminal activities and provides methods for the evaluation and prioritizing of evidence sources Includes discussion of the issues surrounding modern digital evidence examinations, for examp≤ volume of material and its complexity Clear overview of all types of digital evidence

Digital Forensics: Digital Evidence in Criminal Investigations is an invaluable text for undergraduate students taking either general forensic science courses where digital forensics may be a module or a dedicated computer/digital forensics degree course. The book is also a useful overview of the subject for postgraduate students and forensic practitioners.

Author Notes

Angus McKenzie Marshall , Senior Lecturer in Forensic Science, School of Science & Technology, University of Teesside, Middlesbrough, UK.

Preface	p. vii
Acknowledgments	p. xi
List of Tables	p. xii
List of Figures	p. xiii
1 Introduction	p. 1
1.1 Key developments	p. 1
1.2 Digital devices in society	p. 5
1.3 Technology and culture	p. 6
1.4 Comment	p. 7
2 Evidential Potential of Digital Devices	p. 9
2.1 Closed vs. open systems	p. 10
2.2 Evaluating digital evidence potential	p. 17
3 Device Handling	p. 19
3.1 Seizure issues	p. 21
3.2 Device identification	p. 31
3.3 Networked devices	p. 36
3.4 Contamination	p. 40
4 Examination Principles	p. 43
4.1 Previewing	p. 43
4.2 Imaging	p. 47
4.3 Continuity and hashing	p. 48
4.4 Evidence locations	p. 49
5 Evidence Creation	p. 55
5.1 A seven-element security model	p. 56
5.2 A developmental model of digital systems	p. 60
5.3 Knowing	p. 61
5.4 Unknowing	p. 63
5.5 Audit and logs	p. 68
6 Evidence Interpretation	p. 69
6.1 Data content	p. 69
6.2 Data context	p. 83
7 Internet Activity	p. 85
7.1 A little bit of history	p. 85
7.2 The ISO/OSI model	p. 86
7.3 The internet protocol suite	p. 90
7.4 DNS	p. 94
7.5 Internet applications	p. 96
8 Mobile Devices	p. 109
8.1 Mobile phones and PDAs	p. 109
8.2 GPS	p. 116
8.3 Other personal technology	p. 118
9 Intelligence	p. 119
9.1 Device usage	p. 119
9.2 Profiling and cyberprofiling	p. 121
9.3 Evaluating online crime: automating the model	p. 124
9.4 Application of the formula to case studies	p. 126
9.5 From success estimates to profiling	p. 129
9.6 Comments	p. 129
10 Case Studies and Examples	p. 131
10.1 Introduction	p. 131
10.2 Copyright violation	p. 131
10.3 Missing person and murder	p. 133
10.4 The view of a defence witness	p. 137
Appendix A The "Aircraft Carrier" PC	p. 141
Appendix B Additional Resources	p. 145
B.1 Hard disc and storage laboratory tools	p. 145
B.2 Mobile phone/PDA tools	p. 146
B.3 Live CDs	p. 146
B.4 Recommended reading	p. 146
Appendix C SIM Card Data Report	p. 149
References	p. 157
Index	p. 161

Available:*

On Order

Summary

Summary

Author Notes

Table of Contents