COMPUTER
FORENSICS
GHOUSIA BEGUM
16L51A0551
WhatisComputer
Forensics?
“Computer Forensics is the process of
identifying, preserving, and presenting
thedigital evidenceinsucha manner that
theevidences are legallyacceptable”.
Objective of ComputerForensics
The main objectivei Is to
find the criminal which is directly or
indirectly relatedtocyberworld.
Tofind out the digital evidences.
Presentin evidences in a mannerthat
leadsto legal actionof thecriminal.
WhyComputerForensics?
Employeeinternet abuse.
Unauthorizeddisclosureof corporate
information.
Industrial espionage.
Damage assessment.
Criminalfraudand deception cases.
Countlessothers!
Historyof ComputerForensics
Bankruptcy inEnron InDecember2001.
Hundreds of employees were left jobless while
some executives seemed to benefit from the
company's collapse.
The United States Congress decided to investigate
and a specialized detective force beganto search
through hundreds of Enron employee computers
usingcomputerforensics.
WHO USE COMPUTER
FORENSICS?
CriminalProsecutors-Rely on evidence
obtainedfrom a computer to prosecute
us evidence.
CivilLitigations-Personal and business data
discovered on a computer can be used in
fraud, harassment, or discrimination
cases.
TYPEOF DIGITAL EVIDENCES
PERSISTANTDATA-Datathatremains
unaffected whenthecomputeris turned
off.
Example-HardDrives&storagemedia.
VOLATILE DATA-Datathatwouldbe
lost if the computeris turnedoff.
Example-Deletedfiles, computer history,
the computer's registry, temporary files and
Stepsof Collection of Evidence
Find the evidence;whereis it
stored.
Find data–recovery.
Create order of volatility.
Collect evidence–usetools.
Good documentation of all the
actions.
COMPUTER FORENSICS APPLICATION
Financial fraud
detection.
Corporatesecurity
policy.
Criminal
prosecution.
Advantages
Digital Forensicshelp toprotectfromandsolve
cases involving:
Theft of intellectual property- This is related
to any act that allows access to customer
dataandanyconfidential information.
Financial Fraud- This is related to anything
that uses fraudulent purchase of victims
information to conduct fraudulent
Disadvantages
Digital evidenceacceptedinto court
must provethatthereis notampering.
Costs- producing electronic records
& preservingthemis extremelycostly.
Legal practitioners must have
extensive computerknowledge.
Conclusion
This field will enable crucial electronic
evidence to be found, whether it was
lost, deleted,damaged,or hidden, and
usedtoprosecuteindividualsthat believe
they have successfully beaten the
system.
Thank You