Digital Evidence and Computer Crime

Rating:
Summary: A Prepublication Review
Review: "I had the enjoyable task of reviewing the galley proofs for Eoghan Casey's fine introductory book: "Digital Evidence and Computer Crime" (Academic Press, December 1999) recently, and I highly recommend it for anybody who is just entering the field of digital forensics." This book has many fine features, including coverage of the basics of criminal investigation, legal issues in digital forensics, and of course, the technical information you need to get started in the field and understand what the experts are talking about. It covers the who, what, why, when, where, and how of digital evidence, addresses means, motive, and opportunity, and addresses the big picture issues very well. While I wouldn't take it on-scene, I think it is a valuable resource and well suited as a text for a first courses in digital forensics, or as a general reference for the field as it exists today. Regardless of whether your background is in the law, criminal investigation, or computers, this book is a useful resource." I was particularly enamored with the number of examples included in the book. These case studies and situational demonstrations bring the book to life and add meaning that you can't get from a dry academic book, regardless of its coverage of details. The notions of remembering the victim and their link to the crime, the descriptions of complexities associated with Internet crime and globalization, and the concepts of investigation and sleuthing help the reader understand the difference between investigation and academics. But Casey doesn't stop there. He goes on to include an extensive glossary, excellent citations, a useful index, sample printouts, URLs of well known sites, and a multimedia supplement (which was not available at the time of my review). All told, this book does a fine job of introducing the area and provides a useful resource for the active practitioner." --Fred Cohen Sandia National Laboratories Livermore, California, USA

Rating:
Summary: A must-have book for those working to solve computer crime.
Review: Digital evidence-evidence that is stored on or transmitted by computers-can play a major role in a wide range of crimes, including homicide, rape, abduction, child abuse, solicitation of minors, child pornography, stalking, harassment, fraud, theft, drug trafficking, computer intrusions, espionage and terrorism.

Though an increasing number of criminals are using computers and computer networks, few investigators are well-versed in the evidentiary, technical, and legal issues related to digital evidence. As a result, digital evidence is often overlooked, collected incorrectly and analyzed ineffectively. Digital Evidence and Computer Crime provides a hands-on resource that will educate students and professionals in the law enforcement, forensic science, computer security and legal communities about digital evidence and computer crime.

This work explains how computers and networks function, how they can be involved in crimes and how they can be used as a source of evidence. As well as gaining a practical understanding of how computers and networks function and how they can be used as evidence of a crime, readers will learn about relevant legal issues and will be introduced to deductive criminal profiling, a systematic approach to focusing an investigation and understanding criminal motivations.

The accompanying CD-ROM contains simulated cases that integrate many of the topics covered in the text, teaching individuals:

· Components of computer networks · The use of computer networks in an investigation · Abuse of computer networks · Privacy and security issues on computer networks · The law as it applies to computer networks

Rating:
Summary: Rosetta Stone for computer science and criminal justice
Review: I have reviewed several digital forensics books for use in a class I teach. I found this one to be vastly superior to others. It provides an exellent integration of technical, procedural, and legal concepts. A standard forensics text that taught only laboratory procedure would be worthless for all but the most specialized classes. Other digital forensics books haven't realized the whole picture regardless of the quality of their 'lab procedures.' This text reinforces the application of existing knowledge to computer forensics by showing it in context of the system.

I recommend this book for investigators looking to expand their expertise to computer crime, forensics specialists with the same goal, for course adoption, and for anyone interested in the process of computer crime investigation.

Rating:
Summary: The book of digital crime
Review: If you are new to this world this is where you should begin. Digital Evidence contains all the knowledge one could amass by obtaining PHD in computing. Especially when you don't have time for a Diploma. I have bought 5 books pertain to digital crime from USA and UK. But this is the one and only book I am recommending to any one in any continent who want to learn or new to this arena. All the other books in this field for Attorneys or with similar requirements are some what academic and may be boring. The CD-ROM accompanying the book gives you much needed hands on training, otherwise which will cost you at least US $ 4000, if you are to go to a training centre to do the same.

Rating:
Summary: Serious About CyberCrime?
Review: If you are serious about learning how to combat CyberCrime, this book is for you! I highly recommend this book to any investigator, whether in the public or private sector. Add it to your reference library...

Rating:
Summary: Best computer forensic book available
Review: Sometimes, defense attorneys have it easy: one slip-up by the prosecution and evidence is thrown out. Knowing that, law enforcement goes to great lengths to ensure that evidence is appropriately collected and protected. That works well in the physical world, where law enforcement has many generations' worth of experience. But in the modern world of computers and digital networks, where the simple act of rebooting a computer is enough to wipe out large amounts of evidence, law enforcement clearly needs thorough guidance.

Such a resource is here: Digital Evidence and Computer Crime, an excellent book that details the elements of digital crime. Author Eoghan Casey does a superb job of applying forensic science to computers. The information presented here is critical to a diverse audience: law enforcement, attorneys, forensic scientists, and systems administrators, for instance.

While cybercrime law is in some ways similar to other aspects of criminal law, it nonetheless has its own language and categories. For instance, jurisdiction is a key element in both the physical and digital realms, but it is a much trickier concept in the latter. Casey develops this topic and many more. Those new to computers and networks need not worry: the book begins with an explanation of how they function. With the basics out of the way, Casey details how computers can be used in crime and how the evidence created from these activities can be used for later analysis....The accompanying CD-ROM contains simulated cases that integrate many of the topics covered in the text. In all, the book and CD are an excellent introduction to an increasingly important area of law enforcement.

Rating:
Summary: Great Primer - foundational
Review: The author gives basic understanding for everyone. The law enforcement professional will find it rudimentary on issues of edvidence seizure and chain of custody, but then he gives some insight into the technical aspects (the OSI and so forth) which is probably new material. Then for the technical professional, the opposite is true.

Not for the more experience InfoSec/forensic professional. But an outstanding introduction for those wishing to get into the practice - in the Atlanta ISSA, we use this as our primer training text book.

Rating:
Summary: Great Primer - foundational
Review: The author gives basic understanding for everyone. The law enforcement professional will find it rudimentary on issues of edvidence seizure and chain of custody, but then he gives some insight into the technical aspects (the OSI and so forth) which is probably new material. Then for the technical professional, the opposite is true.

Not for the more experience InfoSec/forensic professional. But an outstanding introduction for those wishing to get into the practice - in the Atlanta ISSA, we use this as our primer training text book.

Rating:
Summary: Excellent book from a real expert
Review: This is an excellent book from a real expert.

Everyone and their brother are writing books about computer security and digital forensics.

The difference here is that Eoghan Casey knows what he is talking about.

Excellent book!

Rating:
Summary: Recommended for law enforcement people
Review: This isn't a novel. It isn't an easy read. It IS a good resource for learning about forensic analysis of computer systems. Topics like search and seizure, logging and others will be quite useful to the professional investigator.

Note: this is not a book aimed at network security personnel. You need to know something about law and about investigations to get the most out of it.