Technical Questions On Technical Threats

What are some of the considerations that forensic scientists need to take when examining computers for evidence? Why are these important?

For this reason, it is imperative that the information gathered is reliable and accurate to ensure the evidence collected can be utilized by the digital forensic investigator for the current case (Ingalls & Rodriguez, 2011). Additionally, cyber incidents require digital forensic investigators to interview various individuals regarding the information needed for the case. According to the National Institute of Justice (2004), interviewing the system administrator, users, and employees of an organization regarding a cyber incident would provide investigators with valuable information; for example, user accounts, email accounts, network configuration, logs, and passwords. Furthermore, for digital forensic investigators to conduct an effective interview, they must have the proper tools and training to employ the interview process. For instance, formal procedures or instructions should be developed and implemented to ensure that the investigator follows a standard during all investigations. Additionally, training should be provided to ensure that digital forensic investigators comprehend by what means to prepare, conduct, and evaluate an interview. Furthermore, resources should be made available for digital forensic investigators to accomplish their tasks; for example, recording devices and references. Also, definitions should be provided to the digital forensic investigators for

Description: Computer forensics investigators may provide services, from investigating computer systems and data in order to present information for legal cases to help catch hackers and cyber criminals. They are the law enforcement agents in the cyber world. They also work closely with detectives to help convict criminals who have left a digital trail during their crimes.

The world used to be a place filled with questions and answers that could not be found. As the years have gone by, evidence at a crime scene has become progressively more understood and the world is now a place filled with questions that there are answers to. To get where detectives are today, it took years of experiments, building and knowledge of technology that expanded the mind to places that are hard to believe. Technology is the basis of what it takes to find the vastest amount of information that evidence can provide. It can hold, prove and find information that in past years, could not. Due to the advances in technology, specifically through DNA, fingerprinting and lighting systems, crime scene evidence collection has grown tremendously.

As the lead forensic investigator for XYZ, Inc. my goal is to prepare before the investigation starts, this involves knowing the nature of the assignment and activities, prepare the tools and personnel needed to properly investigate the incident. Additionally, understanding the skill-sets required to extract digital evidence will help build the appropriate team, assign roles to staff and supervisor, and ensure the forensic investigators have appropriate background to perform the extractions needed.

It is indisputable that the advancement in technology and knowledge has greatly improved the capability to catch criminals. Forensics of the past did not include the tools or knowledge that we now have. Although forensics is not a perfect science nor has it ever been, we are closer to perfecting it than ever. Every criminal leaves behind some traces of evidence; it is up to the professionals to find and analyze it to solve cases. Looking at the timeline of forensics technology of the past to the present it is evident that it has evolved dramatically and will continue to do so.

I think that the top boss and the company techniology security group should be responsible for a company's intranet. I think that they should have an option where employees and consumers can give ideas and they take a look into it to see if it will work. Having a strong firewall, installing antivirus protection, update your programs regularly, use number and letters in passwords can help ensure proper use of passwords. I think access levels show be determine by how much protection the consumer wants. For example, with iPhones people have mutiple options on how they can to set up their passwords. Like 4 digit code, finger print, they can set up additional password as backup just in case they phone does not read their finger print.

Having digital forensic capabilities is very important in this era we are in. At our company, we have an in house forensics team that consists of a senior forensic investigator, project manager, computer forensic examiner, legal counsel, IT specialist, and three lab assistants.

When building a computer forensics lab, especially when there is a budget to be adhered to, there are many aspects of design that must be considered. These include but are not limited to, hardware, software, number and type of machines, network type, physical security, network security (Denmark & Mount, 2010). Assessing what type of information processing will take place in the lab, will also help determine what type of equipment should be installed.

In a world where technology is increasingly becoming the way of life, it was only a matter of time before crime was no longer just in the streets but happening online as well. Criminals now get a new approach to carry out their crimes with the use of computers. Since technology is more like a murder mystery than catching the bad guy in the act, a new discipline of forensics needed to be put into place. This is known as computer forensics. Forensic science is any science used for the purpose of law. In the case of computer forensics it is “the discipline that combines elements of law and computer science to collect and analyze data from computer systems, networks, wireless communications, and storage devices in a way that is admissible as evidence in a court of law” (U.S. Cert, 2008). Meaning if you do something illegal on the Internet it can be found.

As cited from Wikipedia, ”Vulnerability disclosure is the practice of publishing information about a computer security problem, and a type of policy that stipulates guidelines for doing so”. Who benefits from the security problems? First thought will be attackers. But it is not so. There is also a community of professionals in the security industry earning a living by reporting security flaws.

item The forensic investigator should discover all the required files for forensic investigation. These files can be the server logs, server

Since SSL was introduced in 1990s, security professionals and malicious attackers have exploited a lot of security flaws resides in the SSL and TLS protocols. And because that users could choose different cryptosystems, different cipher algorithms, and other variances for their SSL or TLS implementation, there are so many types of attacks toward SSL and TLS targeted at different algorithms. In this paper, I will focus on introducing several attacks through flaws in RC4, RSA, and Diffie-Hellman.

“Computer forensics is the equivalent of surveying a crime scene or performing an autopsy on a victim” (James Borek 2001). We need to ask ourselves a question, how many people in our organization had or will have any law enforcement training, anyone would have the qualifications and the skill to present enough evidence that can and will be acceptable in any court of law. No matter what kind of incident there is, the analysis should not be treated differently. Any manager or supervisor knows how to examine the incident? Is the company going to do their own examination of the incident by using their own personal, should the owner/s bring extra support from the police

There is a rapidly evolving set of challenges that IT professionals are being presented with. Beginning with security threats, IT professionals are constrained with the current technology that their organizations are investing in. There is a need to reexamine the risks, such as leakage of confidential information. While this is escalating, performance issues are developing with the current applications to deal with the secure infrastructure and functions. IT professionals are struggling to find a cost effective way to store, recover and secure data under current