Computer Forensic Articles

Many of us now use wireless networking as part of our daily routine when it comes to using the Internet; so much so that we tend to use it also when we are away from our homes and offices. This process, known as using a WiFi Hotspot, is something that hundreds of thousands of us use every day in our major cities up and down the country...read more

USB flash devices, the small sticks used to store data, are becoming increasingly prevalent. Typically smaller than a pack of chewing gum and weighing around 15g, they can be easily carried in a pocket, hidden at the back of a PC or lost on the bus...read more

On 26 January 2009, Section 63 of the Criminal Justice and Immigration Act 2008 came into effect, making it an offence to possess certain extreme pornographic material. At the same time, Section 71 of the Act amended the Obscene Publications Act 1959, increasing the maximum penalty for offences under that Act to five years imprisonment...read more

Forensic analysis has long been an important tool in policing, but with the rise of the computer age, e-crime has become a growing problem and with it a new form of forensics has been developed. Computer forensics, also known as digital forensics, involves the analysis of computers and other electronic devices in order to produce legal evidence of a crime or unauthorised action...read more

When a person is suspected of possessing indecent images of children, the police will usually confiscate the suspect's computer for analysis. Where the suspect has deleted the images before the police reach them, forensic analysts can seek out the Thumbs.db file on Windows XP computers to reveal the presence of images, even after they have been 'deleted' by the user...read more

As the use of computer forensics becomes more commonplace, news reports have made many ordinary computer users aware that deleting a file does not truly destroy it, but public understanding of the methods for permanently deleting data is poor. This article looks at two of these methods - formatting the hard drive and using data wiping tools - and dispels some of the myths surrounding their use...read more

When a person is suspected of using a computer to commit an illegal activity, computer forensic experts can analyse the machine for evidence. In the last ten years, however, it has become common for an accused person to blame this evidence on a piece of malicious software known as a Trojan. Now, computer forensic experts must prove intention to download in order to help secure a conviction...read more

Most computer users make use of passwords to protect sensitive data from unauthorised access, but few are aware of how easily some passwords can be cracked by malicious users. In the corporate environment, where the protection of sensitive data is particularly vital, it is important to introduce password standards to ensure that users are not leaving your firm open to a security breach...read more

Five years ago, 100 GBP would have bought a hard drive with a capacity of 100GB, but today, the same money would buy a 1TB drive - over 10 times the storage space. In cases where a person is suspected of committing a crime involving a computer, this growth in storage capacity has correspondingly increased the time computer forensic analysts need to examine the hard drive for evidence...read more

Mass-distributed, unsolicited email is a growing problem, with a recent study estimating that 'spam' now represents 75% of all email sent. Many spammers use the unsecured servers of unwitting businesses to distribute mass mailings and the costs to affected businesses can be extensive and hard to recover from...read more

As businesses increase their online presence and dependency on IT, the number of incidents of computer misuse continues to rise. To limit the occurrence of such incidents, acceptable use policies and security measures must be implemented, but when controls are bypassed, either intentionally or unintentionally, organisations must be prepared to act quickly and effectively to minimise their impact...read more

As holders of client sensitive information, all businesses have a legal obligation to adhere to the Data Protection Act. For a company to be compliant with the DPA, they must ensure that appropriate measures are taken to guard against unauthorised or unlawful access to or use of personal data. As such, the implementation of a strong and well enforced data security policy is vital...read more

Two cyber-criminals were recently jailed for their involvement in an attempt to rob a UK bank using stolen staff passwords. Hugh Rodley, 61 was sentenced to eight years while David Nash, 47 was given three years for their part in an attempt to steal 229m GBP from the Sumitomo Mitsui Bank in London. The case highlights the threat to corporate security of keylogging software and USB storage devices....read more

Whenever a company engages a third party to provide a product or service, a vetting process should be undertaken to ensure that the contract will be performed with due prudence and responsibility and to an appropriate standard. Never is this more important than in the field of computer forensics, where the quality of the investigation can have a significant impact on the outcome of a case...read more

The process of law making is notoriously long and drawn out, with Bills taking months or even years to pass into to law. In the realms of computer crime, where technology develops apace, this sometimes means that the law is left flagging dangerously behind...read more

In March 2009, a BBC Wales investigation revealed that serious data security breaches have occurred at three of the four Wales police forces. The breaches revealed by BBC Wales highlight the importance of strong and well enforced data security guidelines for any firm dealing with sensitive data...read more

A new report released by brand protection firm MarkMonitor has revealed that online abuse of leading brands is growing more common, damaging brand reputations and upping the risk of unwitting users becoming the victims of malware and phishing attacks...read more

Social networking, where internet users share information, pictures and videos through specially designed websites, has proved a useful way for the modern worker to stay connected with friends. But for businesses, the use of social networking by employees can present a raft of problems if it is not properly addressed...read more

Small businesses lose an average of 800 GBP a year to online crimes, according to a survey by the Federation of Small Business. According to the report, such crimes typically cost small businesses 500 GBP to 5,000 GBP, yet the FSB revealed that around one third of small firms do not report online crime to the police or their banks because of "a lack of faith in the system"...read more

While most parents are aware of the potential dangers of allowing children to use chat rooms and social networking sites without supervision, many may be unaware of the danger posed by games consoles that connect to the web...read more

From intellectual property theft to the downloading of indecent images, investigations of computer crimes require the assistance of computer forensics specialists. Unfortunately, just as computer forensics experts are able to create tools to collect and analyse data, criminals are setting about creating 'anti-forensics' tools to frustrate criminal investigations...read more

For a person to call themselves a GP of medicine, they must adhere to the qualification and practice standards of the General Medical Council. But for computer forensics experts, no such regulation exists. If sub-standard 'experts' are involved in criminal investigations, this could result in contamination of evidence and poor testimony which could lead to a miscarriage of justice...read more

Electronic devices are being admitted as evidence in an increasingly large proportion of legal cases. As technology progresses apace, and analysis becomes more complex, the question arises: How 'computer literate' do a judge and jury need to be in order to ensure a safe verdict?...read more

The improper use of computer equipment by staff can represent a serious threat to any business, bringing potential costly losses in terms of productivity, reputation and copyright. For this reasons, it is important to introduce an auditing process to ensure that employee computer use is regularly monitored and controlled...read more

When a person is suspected of possessing illegal images, computer forensic analysts will search a suspect's computer for evidence. For Windows XP computers, analysts typically search for 'thumbs.db' files which store snapshots of the images files in each directory that may since have been deleted. In Vista, however all thumbnails are now stored in a central directory...read more

Instant Messaging services have become popular with many businesses as a way to collaborate on projects and keep in touch with remote employees. But in the corporate workspace, IM can pose a number of serious risks, including time-wasting and threats to security, many of which can be avoided with the introduction of an acceptable use policy...read more

In April 2009, IT security firm Symantec revealed that a complete identity, including name, address, date of birth and credit card details, could be purchased on the black market in 2008 for as little as fifty pence...read more

Once a device associated only with taxi drivers, satellite navigation (Sat Nav) systems, which provide directions to drivers as they travel, have become a popular purchase among road users worldwide. But despite a growing user base expected to reach 400 million by 2015, few people are aware of the level of data stored on such devices...read more

In April 2009, internet security firm revealed its discovery of a network of 1.9 million malware-infected computers, which included corporate, government and consumer computers throughout the world. Finjan's findings highlight the importance of maintaining up-to-date antivirus and firewall protection...read more

According to the Office of National Statistics, the number of unemployed people in Britain increased by 177,000 in the three months to February 2009, driven by a large numbers of redundancies. As businesses layoff staff in droves in a bid to survive the recession, many are failing to put adequate computer security measures in place to protect against abuse by disgruntled ex-employees...read more

In 2008, at least eight separate incidents of data loss by large public service organisations were reported. In the majority of these cases, data was lost in the process of being transported from one place to another but, in most cases, no encryption was in place to prevent the data being accessed by unauthorised persons in the event of loss...read more

In the last 20 years, computers have become a vital part of most business operations. But as storage capacity increases, so too does the length of time a computer can be in service, and the longer data is stored on a device, the more likely it is that errors will occur and data will be lost...read more

For small files, email is often the most practical medium via which to send and receive information, but for those wishing to share large files such as audio and video on a mass scale, peer to peer (P2P) file sharing has become a popular choice. In cases where possession of indecent images of children is suspected, evidence of P2P activity can be extremely useful...read more

Every time a computer user views a web page, uses instant chat or sends an email, details about their physical location are revealed to the host or recipient's server via their Internet Protocol (IP) address. In instances of crimes involving computers, this can be a vital clue in tracking down the perpetrators...read more

With remote working becoming more common, many businesses are looking for ways to help workers stay connected on the move. A common solution is to provide workers with a 'Smartphones' which allows users to send email, surf the internet and manage online task lists and calendars direct. But as such devices become ubiquitous, the security risk they pose is all too often overlooked...read more

As broadband becomes ubiquitous, many businesses are looking for ways to grant staff remote access via an internet connection to their office computers. 'Remote desktop' services such as LogMeIn and GoToMyPC allow staff to edit files, access software and send emails from anywhere in the world, but is their use compromising workplace security?...read more

If you are a computer user, you are probably viewing this article using a PC with a recent version of Microsoft Windows. In fact, approximately 90% of internet users run the Windows operating system but the majority are unaware of the potential holes in their security created by the default accounts present within their installation...read more

For computer users wishing to keep certain online activities away from prying eyes, the most popular internet browsers have now introduced 'In Private' browsing which offers users a way to stop the most obvious traces of activity from being stored. But just how private is 'In Private' Browsing?...read more

The music and film industries have tried largely in vain to prosecute those who drive the unauthorised sharing of copyright content, but April 2009 saw the successful conviction of a key player in the file-sharing industry - an outcome that could have significant implications for the future of file-sharing...read more

For many but the most well-versed in the world of computer based evidence, the terms 'electronic discovery' and 'computer forensics' may seem synonymous but in fact, they fulfil very different roles, and involve a very different level of expertise...read more

In recent years, home internet access has become ubiquitous and the majority of users now connect 'wirelessly' via a central 'router'. This method has become extremely convenient for families with multiple devices capable of connecting to the internet, but it has also left many homes open to invasion from nearby hackers who attempt to access the network without authorisation...read more

Computer forensics involves the analysis of computers and other electronic devices in order to produce legal evidence. Such investigations are typically long and complex, so as the average forensic caseload grows, so too does the need for an effective method to manage the dissemination of information between the many authorised personnel involved in an investigation...read more

Virtualisation software allows a complete operating system to run from within another. Able to fit on a USB storage device, it allows the user to effectively take an entire user environment with them wherever they go. But where it is suspected that a computer has been used in the commission of a crime, these benefits can become barriers to a successful computer forensic investigation...read more

The Government has announced the creation of a dedicated Office of Cyber Security to protect the UK and British citizens from the growing threats posed in cyberspace. The new measures announced by the Prime Minister are designed to help the Government reshape the way Britain responds to these cyber challenges that threaten UK security interests...read more

Landline telephone calls are slowly being replaced by Voice over Internet Protocol (VoIP) communications, a technology which allows voice calls to be carried via the web. While VoIP can offer several benefits for users - including free calls between computers - for law enforcers wishing to intercept the communications of suspected criminals, VoIP poses a series of problems...read more

At present, there is no foolproof, universal method for extracting evidence in an admissible fashion from cloud-based applications, and in some cases, very little evidence is available to extract. As such, cloud computing represents just one of the fast-paced technological developments that is presenting an ongoing challenge to legislators, law enforcement officials and computer forensic analysts...read more

With new and increasingly small methods of storing data appearing on the market all time, the world of computer crime prevention has naturally focused on keeping up with new technologies. However, for computer forensic analysts, there is an increasing danger that they will not be prepared to cope with old media that has all but fallen out of usage...read more

The rate of fraud growth in Britain has nearly doubled in the past six months, according to the latest BDO Stoy Hayward report, which identifies a serious problem of internal fraud threatening the survival of corporate and public sector entities. As management level employees face pay freezes and redundancy threats, some are straying off the path to keep their jobs and salaries in tact...read more

Where it is suspected that a computer has been used in the commission of a crime, the equipment is usually passed by law enforcement officials to computer forensic experts for analysis. In the event that any of the evidence extracted is successfully used to secure a conviction, the question then arises as to how long the evidence should be stored...read more

Internet criminals are becoming increasingly organised, with some adopting strategies from the corporate world to further their illicit gains, according to the Cisco 2009 Midyear Security Report, which details the tactics used by modern internet criminals in the commission of a variety of attacks such as the breach of corporate computer network and web site security...read more

The investigation of computer crimes is not a simple process. In the vast majority of cases, the assistance of a computer forensic expert is required to extract information without contaminating the original data. To do this, they use a process known as forensic disc imaging, or forensic imaging, which involves creating an exact copy of the computer hard drive in question...read more

Britain is set to become one of the first countries to introduce full body scanning technology, able to produce a naked image. Now, concern has arisen that the technology may violate laws prohibiting the creation and possession of indecent images of children. Where such images fell into the wrong hands, the assistance of Computer Forensic Experts would be vital...read more

Travis Marc Martel stands accused of the murder of Sarah Nicole Rae. In January 2010, the court heard that his mobile phone had been recovered and Mobile Phone Forensic Experts were able to recover a deleted video, which appears to show Ms Rae's final moments following the attack...read more

For computers running Microsoft Windows, a common method for recovering evidence of deleted images is to analyse the thumbnails that are created for each image when the folder they are stored in is viewed. This article looks at how this method differs across Windows XP, Windows Vista and Windows 7...read more

In January 2010, four years after his wife was found dead after an apparent overdose, 38-year-old Matt Baker, an ex-pastor from Texas was convicted of murder and sentenced to 65 years in prison. The evidence, which eventually secured Mr Baker's conviction, included data recovered by Computer Forensic Analysts from a laptop hard drive released by his church...read more

The family of Blake Robbins, a 15-year-old student from Pennsylvania has launched a civil lawsuit after it emerged that his school may have been using his school-issued laptop to spy on him without his knowledge...read more

Each year scams cost three million UK consumers 3.5 billion GBP, with scam emails plaguing 73% of adults every year. The UK Government today announced the formation of a new specialist cyber enforcement team, as well as extra funding for Trading Standards...read more

The Solid-State Drive (SSD) is a storage medium that uses 'solid state' technology to record data on its circuitry without the need for any moving parts. More significant to the security expert, data recovery team or computer forensic analyst, however, is how data is deleted...read more

Windows 7 is the latest operating system from Microsoft and while it's proving a big hit with consumers and corporations alike, it is also presenting a new and potential highly damaging vulnerability through its new SoftAp feature...read more

A New York man has been charged with obstruction after attempting to destroy evidence by swallowing an USB flash drive. At the time of writing, it is not known whether the data on the device survived, but it is fully expected that it will be possible for computer forensic experts to recover the data for use as evidence, should the case come to trial...read more

The use of computer forensics has helped to track down the origin of a school shooting threat. In the midst of this crisis, computer forensic experts were able to quickly track the origin of the threat to an IP address in Australia, some 10,000 miles away...read more

A man in Weston-super-Mare, UK has been reunited with his stolen Sat Nav by the police, despite not reporting the crime to them. Sat Nav users can learn a valuable lesson from the story - with vast amounts of personal data being stored on Sat Nav devices, it is more vital than ever to ensure that they are kept out of sight and safe whenever a vehicle is left unattended...read more

The internet is becoming an increasingly significant venue for fraud, according to research released on 10th March 2010 by The UK Cards Association. In fact, whilst total fraud losses on UK cards and cheques fell last year, there was a 14% rise in online banking losses...read more

A new technology is changing the way computer-based evidence is identified. Launched in August 2009, Project EVE has enabled the New Zealand Police Force to collect evidence from electronic devices far quicker than they had been able to previously...read more

Did you know that your snazzy, modern photocopier, like your computer, has a hard drive that can log all of your activity and store it? It's a little known fact that many photocopiers don't just copy your documents onto paper, they create a digital image which is then stored on the copier's internal drive. Dispose of it carelessly, and your sensitive information could end up in the wrong hands...read more