introduction
play

Introduction Why is the Study of Digital Forensics Relevant? - PowerPoint PPT Presentation

Dec 09, 2022 •208 likes •509 views

Introduction to Digital Forensics Introduction Why is the Study of Digital Forensics Relevant? What is Digital/Computer Forensics? What do you Need for a Careers in Computer Digital Forensics? Educational Background

  1. Introduction to Digital Forensics Introduction  Why is the Study of Digital Forensics Relevant?  What is Digital/Computer Forensics?  What do you Need for a Careers in Computer Digital Forensics? Educational Background   Kinds of Cases a Computer/ Digital Forensics Expert Works on  Let’s Catch a Fake! You are the Computer Forensics Expert Email Headers  Fake Photos   Computer Forensic Resources for you Job prospects  Certifications  Journals  Conferences  Tools  Adapted for UNIV 103 Dr. Nazli Hardy

  2. Introduction to Digital Forensics Why is the Study of Digital Forensics Relevant?  Reality: Almost everything and anything we do online, can be and, probably is tracked … Social Networking (FB, Twitter, Pinterest …)  Information Retrieval (Google , Bing, Yahoo ….)  The Internet itself on PDAs (constant access online – smaller world) – iPhone, Android etc.  Communication (Email, IM, VoIP incl. Skype, Vonage etc. …)  GPS (we can track and … thus we are tracked)  Video games (games and fitness)  Stock market (the connected world economy, insider trading)   … and so much more … Adapted for UNIV 103 Dr. Nazli Hardy

  3. Introduction to Digital Forensics What is Digital Forensics? Adapted for UNIV 103 Dr. Nazli Hardy

  4. Introduction to Digital Forensics What is Computer/ Digital Forensics?  …. a branch of forensic science that pertains to evidence (criminal or civil) found in computers and digital storage media Particularly important to legal cases at the present time because …?   Examples of the many functions that a digital forensics expert are responsible: Analysis of computer systems belonging to defendants (in criminal cases) or litigants (in civil  cases) Recovering “deleted” data – using special software  Determining how an attacker (e.g. from E. Europe, Asia) hacked the company database  Investigate electronic data and evidence against an errant employee – conversely to uncover  information about a company carrying out illegal activities online Building algorithms to help catch electronic fakes  Adapted for UNIV 103 Dr. Nazli Hardy

  5. Introduction to Digital Forensics What do you Need for a Careers in Computer Digital Forensics?  For a computer/ digital forensics career, it is helpful to have: a degree related to computer science (CS) or information technology (IT) or  computer engineering (minor in criminal justice) . Or even a Minor in CS/ IT • understanding of broad range of computer storage devices, computer architecture, operating systems, programming languages, software applications, databases, networking (IP addresses), security (cryptology), reverse software engineering, algorithms … and other CS concepts computer forensics certifications (list at end of presentation)  • up-to date forensic investigative knowledge and techniques • latest computer forensic tools and software – EnCase , Forensic Toolkit (FTK) & many others • latest “attacking tools” – such as keyloggers, password crackers, spoofing software & many others Adapted for UNIV 103 Dr. Nazli Hardy

  6. Introduction to Digital Forensics Kinds of Cases a Digital Forensic Expert Works On  Child Pornography  Civil Litigation (between organizations or individuals) False emails (email headers …) – people who can no longer testify   Employee Termination Cases  Media Leak Investigations (esp. sensitive info and stock market…)  Industrial Espionage Investigations (Coca- Cola …)  Doctored images  Social networking – to track whereabouts of people (incl. GPS pics … ) Adapted for UNIV 103 Dr. Nazli Hardy

  7. Introduction to Digital Forensics Some Real Life Case Studies  Framed by a virus?  The Nigerian connection  Saved by Facebook  BTK killer: the depraved, egotist, and stupid  Cracking Stuxnet, a 21st-century cyber weapon (TED video) Adapted for UNIV 103 Dr. Nazli Hardy

  8. Introduction to Digital Forensics Catching a Fake: the 2 most basic tools in CS forensics Put on your Digital Forensics Expert hats and let’s solve some digital forensic cases What is a header? To find email headers go to this link: http://mail.google.com/support/bin/answer.py?hl=en&answer=22454 What is an IP address? xxxx.xxxx.xxxx.xxxx e.g. IP address for Millersville University is: 166.66.64.xxxx To find your IP address or any IP address go to this link: http://www.hostip.info/ http://whatismyipaddress.com/ Adapted for UNIV 103 Dr. Nazli Hardy

  9. Introduction to Digital Forensics Catching Fakes: Investigating the Email Header Simple Scenario A: Sick Day Blues Details of Penny’s business meeting in California: Sunday: leave Millersville for California for the meeting Monday: meetings all day Tuesday evening: leave California and fly back to Millersville Questions to ask: Was Penny really sick? If she was sick – where would be physically? _________________________________ According to the header, where is she located? Anything else to know about her? Adapted for UNIV 103 Dr. Nazli Hardy

  10. Introduction to Digital Forensics Catching Fakes: Doctored Photos  Fraudulent photographs produced with powerful, commercial software appear constantly, spurring a new field of digital image forensics.  Algorithms are used (theory of Computer Science in practice)  Many fakes can be exposed because (non-trivial) algorithms can spot inconsistent lighting, including the specks of light reflected from 1. people’s eyeballs ( specular highlights) when an image has a “cloned” area or does not have the mathematical 2. properties of a raw digital photograph angle of eyes 3. repeating patterns 4. inconsistent graphics 5. direction of light source 6. Adapted for UNIV 103 Dr. Nazli Hardy

  11. Introduction to Digital Forensics 2008 Qinghai-Tibet Rail Line + Endangered Tibetan Antelopes Living in Harmony? Adapted for UNIV 103 Dr. Nazli Hardy Dr. Nazli Hardy

  12. Introduction to Digital Forensics The Fake Exposed (Environmental) Adapted for UNIV 103 Dr. Nazli Hardy Dr. Nazli Hardy

  13. Introduction to Digital Forensics 2008 Iranian Missile (War) “original” “edited” Forensic Expert: Hany Farid http://www.scientificamerican.com/article.cfm?id=is-that-iranian-missile Adapted for UNIV 103 Dr. Nazli Hardy Dr. Nazli Hardy

  14. Introduction to Digital Forensics LA Times March 31, 2003 Adapted for UNIV 103 Dr. Nazli Hardy Adapted from Computer Forensics and Investigations, Nelson, Phillips, Enfinger, Stewart

  15. Introduction to Digital Forensics 2003 LA Times (War) Adapted for UNIV 103 Dr. Nazli Hardy Dr. Nazli Hardy Adapted from Computer Forensics and Investigations, Nelson, Phillips, Enfinger, Stewart

  16. Introduction to Digital Forensics 1989 O No! (Societal) Adapted for UNIV 103 Dr. Nazli Hardy Hany Farid - Scientific American, Digital Forensics: How Experts Uncover Doctored Images CSCI 415: Computer and Network Security Adapted from Computer Forensics and Investigations, Nelson, Dr. Nazli Hardy Phillips, Enfinger, Stewart

  17. Introduction to Digital Forensics 4 Ways to Spot a Fake – 1. Eye Position  Because eyes have very consistent shapes, they can be useful for assessing whether a photograph has been altered  A person’s irises are circular in reality but will appear increasingly elliptical as the eyes turn to the side or up or down  An algorithm can approximate how eyes will look in a photograph by tracing rays of light running from them to a point called the camera center Adapted for UNIV 103 Dr. Nazli Hardy Hany Farid - Scientific American, Digital Forensics: How Experts Uncover Doctored Images

  18. Introduction to Digital Forensics 4 Ways to Spot a Fake – 2. Direction of Light Source  Were the ducks or the MPs added? Adapted for UNIV 103 Dr. Nazli Hardy Hany Farid - Scientific American, Digital Forensics: How Experts Uncover Doctored Images

  19. Introduction to Digital Forensics 4 Ways to Spot a Fake – 3. Specular Highlights Q. Were these 4 hanging out together for the photograph? Surrounding lights reflect in eyes to form small white dots called specular highlights. The shape, color and location of these highlights give us info about the lighting Adapted for UNIV 103 Dr. Nazli Hardy Hany Farid - Scientific American, Digital Forensics: How Experts Uncover Doctored Images

  20. Introduction to Digital Forensics Doctored?   The highlight position indicates where Many cases, however, require a the light source is located. mathematical analysis. To determine light position precisely requires taking into account the shape of the eye and  As the direction to the light source the relative orientation between the ( yellow arrow ) moves from left to right, eye, camera and light so do the specular highlights. light source A: American Idol judges’ specular highlights Adapted for UNIV 103 Dr. Nazli Hardy Hany Farid - Scientific American, Digital Forensics: How Experts Uncover Doctored Images

Recommend

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION

TRAINING COURSE ON SOCIAL PROTECTION & FORMALIZATION TRINIDAD AND TOBAGO MARCH 15, 2017 INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION INTRODUCTION Design of the NIS Assistance from the

547 views • 23 slides
INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

INTRODUCTION Introduction 2/42 INTRODUCTION Alternations I am giving bread to the

Patterns of variation in the expression of case and agreement Andrs Brny Leiden University Centre for Linguistics 9 November 2019, BaSIS Workshop a.barany@hum.leidenuniv.nl INTRODUCTION Introduction 2/42 INTRODUCTION

1.37k views • 42 slides
Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures

Introduction Introduction Introduction Introduction Outline Motivation Failures Definition and concepts Process and product properties Principles SE Approaches Motivation Software and the economy The economies of

1.03k views • 49 slides
Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1

Introduction Introduction Introduction Nationwide Cause for Concern 1 https://www.cdc.gov/std/stats17/infographic.htm Introduction Epidemiology in Western Colorado CPHE Surveillance Data Report, May 2018 Chlamydia Epidemiology in Western

977 views • 39 slides
DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every

DAQ introduction Purpose of this talk : (1) Introduction for those who have not been in every meeting (2) Some ideas of diagrams for section 7.1 (Introduction) of TP. Giles Barr 25 Jan 2018, Pembroke College On DUNE, the reality is there is a

474 views • 10 slides
INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT

ADVANCED COMPUTER SECURITY INTRODUCTION cf. Schneider, Chapter 1 INTRODUCTION THEY ARE OUT TO GET YOU INTRODUCTION WHAT IS SECURITY? A systems security policies describe What the system is supposed to do Store and provide access

479 views • 16 slides
Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL

Overview Introduction to SMIL Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout World Wide

387 views • 14 slides
14 Introduction Introduction Bad guys can put malware into Example: hosts

14 Introduction Introduction Bad guys can put malware into Example: hosts

Introduction Introduction source Encapsulation ISO/OSI reference model message M application segment H t H t M transport network datagram H n H n H t M presentation: allow applications to frame link H l H n H t M interpret

583 views • 4 slides
Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL

Previous Lecture Introduction to SMIL 2 Introduction to W3C and XML Introduction to SMIL Writing a SMIL file Adding Media Objects Martin Halvey Clipping media files January 2008 Timing and Synchronising Layout

322 views • 8 slides
Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL

Introduction Zynq Lecture 1 Andreas Habegger Introduction Zynq Introduction Zynq Introduction Zynq PS vs. PL Processing System Processor Peripherals Data Buses AXI Bus Conclusion BTE5380 - Embedded Systems Octobre 2014 Andreas Habegger

1.81k views • 30 slides
2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04

2018.06 01 SMILE5 Introduction S E 5 02 Alpha Cloud M I L 03 Company Introduction 04 Project References S E 5 PART.1 SMILE5 Introduction M I L Introduction STORION-SMILE5 Residential Energy Storage System Inverter 5kW Output Input

1.06k views • 25 slides
Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an

Introduction to CICS Course introduction Course introduction What is CICS? What is an application server? Why use an application server? Course introduction Services provided by CICS How CICS applications are defined Scaling CICS to meet

1.84k views • 146 slides
Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic

Network Visualization Introduction Presented by Shahed Introduction Introduction Basic building blocks Node Links (relationship between nodes) Spatial information Network data

584 views • 9 slides
Introduction Introduction (1) Main argument of the paper: universities are not only

Introduction Introduction (1) Main argument of the paper: universities are not only

Le jugement des pairs comme outil de management des universits Peer-review as a management tool Christine Musselin (CSO, Sciences Po et CNRS) Avril 2013, Lirrsistible ascension du capitalisme acadmique Introduction Introduction (1)

590 views • 28 slides
Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Introduction Introduction to storage and to storage and filesystems filesystems Introduction

Moreno Baricevic Gilberto Daz Axel Kohlmeyer Stefano Cozzini ULA ICTP CNR-IOM DEMOCRITOS Merida, VENEZUELA Trieste, ITALY Trieste, ITALY Introduction Introduction to storage and to storage and filesystems filesystems Introduction

1.19k views • 51 slides
JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of

JABLOTRON JA-100 introduction November 2011 Introduction Todays goals First introduction of the brand new JA-100 alarm system Visions Basic architecture System components Setting Help us with final validations You are the FIRST ones

1.69k views • 111 slides
1 Introduction Introduction Communication System Baseband an adjective that describes

1 Introduction Introduction Communication System Baseband an adjective that describes

Introduction Introduction Physical Layer Mobile network Global ISP Provides the means to transmit bits Basic Concepts of from sender to receiver, Data Transmission Defines the mechanical, electrical, and Home network timing

463 views • 7 slides
Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical

Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical

INFOGR Computer Graphics Jacco Bikker - April-July 2015 - Lecture 1: Introduction Welcome! Todays Agenda: Topic Introduction Course Introduction Team Practical Details Assignments Field Study State of

869 views • 62 slides
Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction

Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction

Virtual and Augmented Reality Introduction (00) RNDr. Martin Madaras, PhD. madaras@skeletex.xyz Introduction Introduction Who am I? What do I do here? 2 About me Short research bio: - 2014 - finished PhD at FMFI UK - 2014 2016 -

1.3k views • 39 slides
PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience

PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience

PRESENTATION The Introduction What is the Introduction ? The introduction prepares the audience for your presentation. It tells them what your presentation is about, why it is important, and finally, what to listen for in your speech. Get the

505 views • 3 slides
How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer

How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer

Introduction to Beamer Hafida Benhidour How to make a presentation with L A T EX? Introduction to L A T EX Introduction to Beamer Introduction to Beamer Hafida Benhidour Department of computer science King Saud University November

732 views • 49 slides
Shenzhen Cuilu jewelry Co., Ltd was founded in 1996 and its a large private enterprise

Shenzhen Cuilu jewelry Co., Ltd was founded in 1996 and its a large private enterprise

Introduction Introduction - - Brief Brief Introduction Introduction of of Cuilu Cuilu Group Group Introduction Introduction - - Brief Brief Introduction Introduction of of Cuilu Cuilu Group Group Shenzhen Cuilu jewelry Co., Ltd

147 views • 14 slides
Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

V olunteer C ommunications N etwork (V-C-N.org) Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org Academy Course - 2012-02.24-2208 262: Introduction to ICS-214 : V-C-N.org : Slide: 1 V olunteer C

735 views • 34 slides
Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org

V olunteer C ommunications N etwork (V-C-N.org) Introduction to ICS- -214 214 Introduction to ICS Official Unit / Incident Log - A V-C-N.org Academy Course - 2012-02.24-2208 262: Introduction to ICS-214 : V-C-N.org : Slide: 1 V olunteer C

558 views • 18 slides

More recommend