Computer Forensics: Cybercriminals, Laws, and Evidence

Description

An Updated Edition of the Definitive Computer Forensics Text Updated to include the most current events and information on cyberterrorism, the second edition of Computer Forensics: Cybercriminals, Laws, and Evidence continues to balance technicality and legal analysis as it enters into the world of cybercrime by exploring what it is, how it is investigated, and the regulatory laws around the collection and use of electronic evidence. Students are introduced to the technology involved in computer forensic investigations and the technical and legal difficulties involved in searching, extracting, maintaining, and storing electronic evidence, while simultaneously looking at the legal implications of such investigations and the rules of legal procedure relevant to electronic evidence. Significant and current computer forensic developments are examined, as well as the implications for a variety of fields including computer science, security, criminology, law, public policy, and administration. Title Page Copyright Dedication Brief Contents Contents Preface Acknowledgments Chapter 1 Entering the World of Cybercrime Cybercrime: Defined Cybercrime Versus Traditional Crime Cybercrime Categories Combating Cybercrime Chapter Summary Key Terms Practical Exercise Critical Thinking Question Review Questions Footnotes Chapter 2 An Introduction to Computer Forensics Investigations and Electronic Evidence Computer Forensics: What Is It? Computer Forensics Investigations: The Basics Computer Forensics Investigations: A Four-Step Process Electronic Evidence: What Is It? Types of Evidence Authentication of Evidence Standards of Evidence Chapter Summary Key Terms Practical Exercise Review Questions Footnotes Chapter 3 Laws Regulating Access to Electronic Evidence Telecommunications and Electronic Communications Data The Statutory Background of Privacy Protection and Government Access to Data Chapter Summary Key Terms Critical Thinking Questions Review Questions Footnotes Chapter 4 Searches and Seizures of Computers and Electronic Evidence What Is Privacy and Why Is It Important? Constitutional Source of Privacy Protection: The Fourth Amendment Search Warrants Searching a Computer for Evidence Chapter Summary Key Terms Critical Thinking Questions Review Questions Footnotes Chapter 5 Cybercrime Laws: Which Statute for Which Crime? Computer Threats and Intrusions Financial Crimes and Fraud Intellectual Property Theft and Economic Espionage Personal Crimes Chapter Summary Key Terms Critical Thinking Question Review Questions Footnotes Chapter 6 Understanding the Computer-Networking Environment: Beware of the Scam Artists, Bullies, and Lurking Predators! The Art of Deceiving: Social Engineering Scams and Scam Artists Identity Theft Cyberbullying Child Exploitation Online Chapter Summary Key Terms Practical Exercise Review Questions Footnotes Chapter 7 Cyberterrorism: What It Is, What It Isn’t, Why It Matters, and What to Do About It Defining Cyberterrorism Criminalizing Cyberterrorism Combating Cyberterrorism Chapter Summary Key Terms Critical Thinking Questions Review Questions Footnotes Chapter 8 Where Is the Electronic Evidence, and Which Tools Can We Use to Find It? The Location of Electronic Evidence Tools Used to Search and Collect Electronic Evidence Chapter Summary Key Terms Practical Exercises Critical Thinking Question Review Questions Footnotes Chapter 9 Crime and Incident Scene: What Should an Investigator Do? Conducting an Investigation Special Considerations for Cybercrime Investigations Identifying Evidence Analysis of Evidence How to Handle Evidence in an Investigation Hypothetical Criminal Investigation Extracting Electronic Evidence Chapter Summary Key Terms Critical Thinking Questions Review Questions Footnotes Chapter 10 Corporate Crimes and Policy Violations Involving Computers: How to Conduct a Corporate Investigation Corporate Investigations Corporate Criminal Activities and Policy Violations Preparing for the Investigation Conducting the Investigation Chapter Summary Key Terms Review Questions Footnotes Chapter 11 Email Forensics The Importance of Email Investigations Email: The Basics How to Conduct an Email Investigation Problems Encountered by Computer Forensics Investigators Chapter Summary Key Terms Practical Exercise Critical Thinking Question Review Questions Footnotes Chapter 12 Network Forensics: An Introduction Stand-Alone Versus Networked Devices Computer Networks Network Components Where Can Network-Related Evidence Be Found? Network Forensics Analysis Tools Special Issues When Conducting Investigations in a Networked Environment Preliminary Analysis Documentation and Collection Analysis and Preservation Chapter Summary Key Terms Review Questions Footnotes Chapter 13 Mobile Devices in Computer Forensics Investigations Role of Mobile Devices Mobile Phones and PDAs Versus Other Electronic Devices Which Tools Can Be Used to Retrieve Evidence? Mobile Device Investigations Chapter Summary Key Terms Practical Exercises Critical Thinking Questions Review Questions Footnotes Chapter 14 The Pretrial and Courtroom Experiences of a Computer Forensics Investigator Pretrial Procedures Testimony and Rules of Evidence The Role of the Computer Forensics Investigator in Pretrial Proceedings and Court Chapter Summary Key Terms Critical Thinking Question Review Questions Footnotes Glossary Index