E-Book Overview
Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Practically every crime now involves some digital evidence; digital forensics provides the techniques and tools to articulate this evidence. This book describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations.
E-Book Content
ADVANCES IN DIGITAL FORENSICS II IFIP - The International Federation for Information Processing IFIP was founded in 1960 under the auspices of UNESCO, following the First World Computer Congress held in Paris the previous year. An umbrella organization for societies working in information processing, IFIP's aim is two-fold: to support information processing within its member countri es and to encourage technology transfer to develop ing nations. As its mission statement clearly states, IFlrs mission is to be the leading, truly international, apolitical organization which encourages and assists in the development, exploitation and application of inf ormation technology for the benefit ofall people. IFIP is a non-profitmaking organization, run almost solely by 2500 volunteers . It operates through a number of technical committees , which organize events and publications. IFIP's events range from an international congres s to local seminars, but the most important are: • The IFIP World Computer Congress, held every second year; • Open conferences ; • Working conferences . The flagship event is the IFIP World Computer Congress , at which both invited and contributed papers are presented . Contributed papers are rigorously refereed and the rejection rate is high. As with the Congress, participation in the open conferences is open to all and papers may be invited or submitted . Again, submitted papers are stringently refereed. The working conferences are structured differently . They are usually run by a working group and attendance is small and by invitation only. Their purpose is to create an atmosphere conducive to innovation and development. Refereeing is less rigorous and papers are subjected to extensive group discussion . Publications arising from IFIP events vary. The papers presented at the IFIP World Computer Congress and at open conferences are published as conference proceedings, while the results of the working conferences are often published as collections of selected and edited papers. Any national society whose primary activity is in information may apply to become a full member of IFIP, although full membership is restricted to one society per country. Full members are entitled to vote at the annual General Assembly , National societies preferring a less committed involvement may apply for associate or corresponding membership. Associate members enjoy the same benefits as full members, but without voting rights . Corresponding members are not represented in IFIP bodies. Affiliated membership is open to non-national societies, and individual and honorary membership schemes are also offered. ADVANCES IN DIGITAL FORENSICS II IFIP International Conference on Digital Forensics, National Center for Forensic Science, Orlando, Florida, January 29- February 1, 2006 Edited by Martin S. Olivier University of Pretoria, Pretoria, South Africa Sujeet Shenoi University of Tulsa, Tulsa, Oklahoma, USA ~ Springer Library of Congress Control Number : 2006929911 Advances in Digital Forensics11 Edited by M. Olivier and S. Shenoi p. em. (lFIP International Federation for Information Processing, a Springer Series in Computer Science) ISSN: 1571-5736 / 1861-2288 (Internet) ISBN: 10: 0-387-36890-6 ISBN: 13: 9780-387-36890-6 eIS