Journal of Digital Forensics, Security and Law

Number 3, 2009

5-16
Insecurity by Obscurity: A Review of SoHo Router Literature from a Network Security Perspective

Authors: Craig Valli, Patryk Szewczyk

Abstract

View in PDF

Number of views: 360

Because of prevalent threats to SoHo based ADSL Routers, many more devices are compromised. Whilst an end-user may be at fault for not applying the appropriate security mechanisms to counter these threats, vendors should equally share the blame. This paper reveals that the lack of security related content and poor overall design could impact on end-users interpretation and willingness to implement security controls on their ADSL router. It argues that whilst the number of threats circulating the Internet is increasing, vendors are not improving their product literature.

17-34
Electronic Forms-Based Computing for Evidentiary Analysis

Authors: Andy Luse, Brian Mennecke, Anthony M. Townsend

Abstract

View in PDF

Number of views: 278

The paperwork associated with evidentiary collection and analysis is a highly repetitive and time-consuming process which often involves duplication of work and can frequently result in documentary errors. Electronic entry of evidence related information can facilitate greater accuracy and less time spent on data entry. This manuscript describes a general framework for the implementation of an electronic tablet-based system for evidentiary processing. This framework is then utilized in the design and implementation of an electronic tablet-based evidentiary input prototype system developed for use by forensic laboratories which serves as a verification of the proposed framework. The manuscript concludes with a discussion of implications and recommendations for the implementation and use of tablet-based computing for evidence analysis.

35-56
To License or Not to License Revisited: An Examination of State Statutes Regarding Private Investigators and Digital Examiners

Authors: Thomas Lonardo, Doug White, Alan Rea

Abstract

View in PDF

Number of views: 324

In this update to the previous year's study, the authors examine statutes that regulate, license, and enforce investigative functions in each US state. After identification and review of Private Investigator licensing requirements, the authors find that very few state statutes explicitly differentiate between Private Investigators and Digital Examiners. After contacting all state agencies the authors present a distinct grouping organizing state approaches to professional Digital Examiner licensing. The authors conclude that states must differentiate between Private Investigator and Digital Examiner licensing requirements and oversight.

57-60
Book Review: Cyber Security and Global Information Assurance: Threat Analysis and Response Solutions

Authors: Gary Kessler

Abstract

View in PDF

Number of views: 338

Knapp, K.J. (Ed.) (2009). Cyber Security and Global Information Assurance: Threat Analysis and Response Solutions. Hershey, NY: Information Science Reference. 434 + xxii pages, ISBN: 978-1-60566-326-5, US$195. Reviewed by Gary C. Kessler (gck@garykessler.net) I freely admit that this book was sent to me by the publisher for the expressed purpose of my writing a review and that I know several of the chapter authors. With that disclosure out of the way, let me say that the book is well worth the review (and I get to keep my review copy). The preface to the book cites the 2003 publication of The National Strategy to Secure Cyberspace by the White House, and the acknowledgement by the U.S. government that our economy and national security were fully dependent upon computers, networks, and the telecommunications infrastructure. This may have come as news to the general population but it was a long overdue public statement to those of us in the industry. The FBI's InfraGard program and the formation of the National Infrastructure Protection Center (NIPC) pre-dated this report by at least a half-dozen years, so the report was hardly earth shattering. And the fact that the bulk of the telecom infrastructure is owned by the private sector is a less advertized fact. Nonetheless, reminding the community of these facts is always a Good Thing and provides the raison d’être of this book.