Author(s) Name: Fred Cohen
The book is a monograph about how the seemingly perfect evidence from computers, networks, and other automated mechanisms goes wrong, and how it can be challenged successfully in a legal set.
Digital forensic evidence is identified, collected, transported, stored, analyzed, interpreted, attributed, reconstructed, presented, and destroyed through a set of processes. Challenges to this evidence may come through challenges to elements of this process. These processes, like all other processes and the people and systems that carry them out, are imperfect. That means that there are certain types of faults that can occur in these processes.
The emerging cloud-computing environment has three distinct features of note related to these issues: (1) distributed computing implies that evidence may exist in and reflect activities on many computers, (2) those computers may be at many locations, and (3) the computers may not be owned by the same entities as the content at issue. This chapter covers these differences in context of the previous work in the digital forensics area.
Table of Contents
ISBN: 9781878109415
Publisher: Fred Cohen and Associates
Year of Publication: 2008
Book Link: Home Page Url
