Privacy protection and computer forensics / Michael A. Caloyannides.

By: Caloyannides, Michael A.

Material type: materialTypeLabel

BookSeries: Artech House computer security series.Publisher: Boston : Artech House, 2004Edition: 2nd ed.Description: xix, 345 p. : ill. ; 26 cm. + hbk.ISBN: 1580538304.Subject(s): Computer security

| Data protection

| Forensic sciences

DDC classification: 005.8

Contents:

Computer Forensics -- Locating Your Sensitive Data in Your Computer -- Specialized Forensics Applications -- How can Sensitive Data be Stolen from One's Computer? -- Why computer privacy and anonymity? -- Practical Measures for Protecting Sensitive Information -- Basic Protection from Computer Data Theft Online -- Practical Measures for Online Computer Activities -- Advanced Protection from Computer Data Theft Online -- Encryption -- Practical Encryption -- Link Encryption: VPNs -- Security of Wireless Connectivity: Wi-Fi and Bluetooth -- Other Computer-Related Threats to Privacy -- Biometrics: Privacy Versus Nonrepudiation -- Legal Issues.

Holdings
Item type	Current library	Call number	Copy number	Status	Barcode
General lending	MTU Bishopstown Library Lending	005.8 (Browse shelf(Opens below))	1	Available	00079168

Total holds: 0

Enhanced descriptions from Syndetics:

Going far beyond typical computer forensics books, this thoroughly revised edition of an Artech House bestseller is the only book on the market that focuses on how to protect one's privacy from data theft, hostile computer forensics, and legal action. It addresses the concerns of today's IT professionals, as well as many users of personal computers, offering more detailed how to guidance on protecting the confidentiality of data stored on computers. Moreover, the second edition has been updated to include specific information on the vulnerabilities of ancillary computing devices, such as PDAs, cellular telephones and smart cards. This cutting-edge book identifies the specific areas where sensitive and potentially incriminating data is hiding in computers and consumer electronics, and explains how to go about removing this data.

Rev. ed of: Computer forensics and privacy. 2001.

Includes bibliographical references and index.

Table of contents provided by Syndetics

Introduction (p. xv)
1 Computer Forensics (p. 1)
1.1 What is computer forensics? (p. 1)
1.2 Why is computer forensics of vital interest to you? (p. 1)
1.2.1 As an employee (p. 1)
1.2.2 As an employer or corporate executive (p. 2)
1.2.3 As a law enforcement official (p. 3)
1.2.4 As an individual (p. 4)
1.2.5 As a lawyer for the defense (p. 5)
1.2.6 As an insurance company (p. 6)
1.2.7 As a user of others' computers (p. 6)
1.3 If you have done nothing illegal, you have nothing to fear: not true anywhere! (p. 6)
1.4 Computer forensics (p. 8)
1.4.1 User rights to privacy? (p. 8)
1.4.2 The forensics investigator must know up front (p. 9)
1.4.3 Forensics is deceptively simple but requires vast expertise (p. 9)
1.4.4 Computer forensics top-level procedure (p. 11)
1.4.5 Forensics specifics (p. 13)
1.4.6 Digital evidence is often evidence of nothing (p. 16)
Selected bibliography (p. 22)
2 Locating Your Sensitive Data in Your Computer (p. 23)
2.1 Deleting does not delete--what does? (p. 23)
2.1.1 General (p. 23)
2.1.2 Disk wiping (p. 26)
2.1.3 File- and disk-wiping software (p. 28)
2.1.4 Magnetic microscopy forensic examination of disks (p. 31)
2.2 Where is the sensitive data hiding? (p. 32)
2.2.1 Cluster tips or slack (p. 32)
2.2.2 Free space (p. 33)
2.2.3 The swap file (p. 34)
2.2.4 Spool and temporary files (p. 34)
2.2.5 Forensics on nonmagnetic disks (p. 35)
2.2.6 History files (p. 35)
2.2.7 Data in the registry files (p. 35)
2.2.8 Data from sloppy use of personal encryption software (p. 36)
2.2.9 Nonvolatile memory (p. 36)
2.3 The swap file as a source of forensic data (p. 36)
2.3.1 General (p. 36)
2.3.2 Securely wiping the swap file (p. 38)
2.4 The Registry as a source of forensic data (p. 39)
2.4.1 Why is the Registry a major source of forensic evidence? (p. 39)
2.4.2 Where is all this private information hiding in the Registry? (p. 41)
2.4.3 Backing up the Registry and restoring a corrupted one (p. 42)
2.4.4 Cleaning up sensitive data in the Registry (p. 42)
Reference (p. 44)
3 Specialized Forensics Applications (p. 45)
3.1 Digital watermarking (p. 45)
3.2 The British RIP Act and the US Carnivore (DCS1000) (p. 49)
Selected bibliography (p. 51)
4 How Can Sensitive Data Be Stolen from One's Computer? (p. 53)
4.1 Physical possession of one's computer (p. 53)
4.2 Temporary physical access to one's computer (p. 53)
4.3 Commercial hardware keystroke loggers (p. 54)
4.4 Commercial software keystroke loggers (p. 57)
4.5 Going online (p. 58)
4.5.1 By one's ISP or by anyone having compromised the ISP's security (p. 58)
4.5.2 By a legal or an illegal telephone tap (p. 59)
4.5.3 By remote Web sites that one accesses (p. 59)
4.6 Spyware in your computer (p. 60)
4.6.1 By commercial spyware and adware (p. 60)
4.7 van Eck radiation using commercially available systems (p. 64)
4.7.1 General (p. 64)
4.7.2 Protective measures (p. 65)
4.7.3 Optical emanations and their interception (p. 69)
4.8 Being on a network, cable modem, or xDSL modem (p. 69)
4.9 Other means (p. 70)
4.10 Insertion of incriminating data in your computer by others (p. 70)
4.11 Security protection steps that don't work well enough (p. 71)
4.11.1 The fallacy of CMOS password protection (p. 71)
4.11.2 The fallacy of password protection offered by popular commercial software (p. 71)
4.11.3 The fallacy of protection by hiding files from view (p. 72)
4.11.4 The fallacy of protection by hiding data in the slack (p. 72)
4.11.5 The fallacy of protection by placing data in normally unused locations of a disk (p. 72)
4.11.6 The fallacy of protecting data by repartitioning a disk for a smaller capacity than the disk really has (p. 72)
4.11.7 The fallacy of protection through password-protected disk access (p. 73)
4.11.8 The fallacy of protection through the use of booby-trap software (p. 73)
4.11.9 The fallacy that overwriting a file removes all traces of its existence (p. 73)
4.11.10 The fallacy of encryption protection (p. 74)
4.11.11 Other protection fallacies that don't deliver (p. 74)
Selected bibliography (p. 75)
References (p. 76)
5 Why Computer Privacy and Anonymity? (p. 77)
5.1 Anonymity (p. 79)
5.1.1 Practical anonymity (p. 81)
5.2 Privacy (p. 82)
5.2.1 You cannot trust TRUSTe? (p. 82)
5.2.2 Is privacy a right? (p. 83)
5.2.3 The impact of technology on privacy (p. 86)
Selected bibliography (p. 88)
6 Practical Measures For Protecting Sensitive Information (p. 91)
6.1 Installing secure Windows (p. 91)
6.2 Recommended best practices (p. 91)
6.2.1 If using Windows NT (p. 96)
6.2.2 If using Windows 2000 (p. 98)
6.2.3 If using Windows XP (p. 102)
6.2.4 Heroic protective measures regardless of the version of Windows (p. 104)
6.2.5 Last but not least (p. 105)
6.3 Additional privacy threats and countermeasures (p. 106)
6.3.1 Individually serial-numbered documents (p. 106)
6.3.2 Online activation and online snooping by software (p. 106)
6.3.3 Microsoft documents that call home (p. 108)
6.3.4 The NetBIOS and other threats from unneeded network services (p. 109)
6.3.5 TCPA/Palladium (p. 109)
6.3.6 The vulnerability of backups (p. 110)
6.4 Protecting sensitive data on hard disks (p. 111)
6.4.1 Full disk encryption (p. 112)
6.4.2 Encrypting disk partitions (p. 114)
Reference (p. 114)
7 Basic Protection from Computer Data Theft Online (p. 115)
7.1 Protection from which of many online threats? (p. 117)
7.2 Installation of Windows for secure online operation (p. 117)
7.3 Online security threats and issues (p. 118)
7.3.1 Web browser hijacking (p. 118)
7.3.2 The romantic e-card and related con schemes (p. 121)
7.3.3 E-mail bombs (p. 121)
7.4 Software to enhance online security (p. 122)
7.4.1 Junkbuster (p. 122)
7.4.2 SurfSecret (p. 122)
7.4.3 Assorted cleaners of browsers (p. 122)
7.5 Basic do's and don'ts (p. 124)
7.5.1 Don't's (p. 124)
7.5.2 Do's (p. 125)
8 Practical Measures for Online Computer Activities (p. 127)
8.1 Netscape Navigator/Communicator (p. 128)
8.2 Microsoft Internet Explorer (p. 133)
8.3 Desirable e-mail software configuration and modifications (p. 138)
8.3.1 Free Web-based e-mail offers that require JavaScript: don't! (p. 138)
8.3.2 Outlook and Outlook Express (p. 139)
8.3.3 Eudora e-mail software (p. 139)
8.4 Secure e-mail conduct online (p. 141)
8.4.1 Self-protecting e-mail (p. 144)
8.4.2 Accessing e-mail from anywhere on Earth (p. 148)
8.5 E-mail forensics and traces: the anonymity that isn't (p. 149)
8.5.1 Tracking suspect e-mail (p. 152)
8.5.2 Sending anonymous e-mail: anonymous remailers (p. 154)
8.5.3 General network tracing tools (p. 158)
9 Advanced Protection from Computer Data Theft Online (p. 159)
9.1 Virus/Trojan/worm protection (p. 159)
9.2 Protection from keyloggers (p. 160)
9.2.1 Protection from keystroke-capturing software (p. 160)
9.2.2 Protection from keystroke-capturing hardware (p. 161)
9.3 Protection from commercial adware/spyware (p. 161)
9.4 Protection from Web bugs: an insidious and far-reaching threat (p. 163)
9.5 Using encrypted connections for content protection (p. 164)
9.6 Using proxy servers for anonymity (p. 167)
9.7 Using encrypted connections to ISPs for content protection (p. 169)
9.7.1 SSL (p. 170)
9.8 SSH (p. 171)
9.9 The failed promise of peer-to-peer clouds (p. 172)
9.10 Caller ID traps to avoid (p. 173)
9.11 Traps when connecting online from a cellular phone (p. 174)
9.12 Traps when using FTP (p. 174)
9.13 Using instant messaging schemes (p. 175)
9.14 Pitfalls of online banking (p. 175)
9.15 Secure Usenet usage (p. 176)
9.15.1 Anonymity from other Usenet readers (p. 178)
9.15.2 Anonymity from one's in-country ISP (p. 179)
9.15.3 Usenet privacy in oppressive regimes (p. 180)
9.16 Ports to protect from (p. 181)
9.17 Sniffers (p. 184)
9.18 Firewalls (p. 185)
9.18.1 Personal software-based firewalls (p. 187)
9.19 Software that calls home (p. 188)
Reference (p. 189)
10 Encryption (p. 191)
10.1 Introduction (p. 191)
10.2 Availability and use of encryption (p. 193)
10.2.1 Old-fashioned encryption (p. 195)
10.2.2 Conventional (symmetric) encryption (p. 195)
10.2.3 Public-key encryption (p. 197)
10.2.4 Elliptic-curve encryption (p. 200)
10.2.5 Voice encryption online (p. 200)
10.3 Attempts to control against encryption (p. 201)
10.4 Legal issues (p. 202)
10.4.1 Crypto laws around the world (p. 203)
10.4.2 Can encryption bans work? (p. 204)
10.5 Societal issues (p. 208)
10.6 Technical issues (p. 209)
10.7 Countermeasures (p. 210)
10.8 State support for encryption (p. 211)
10.9 The future of encryption (p. 212)
10.10 Quantum cryptography (p. 213)
10.10.1 Quantum computing (p. 214)
10.11 DNA-based encryption (p. 215)
10.12 Comments (p. 215)
Selected bibliography (p. 216)
References (p. 218)
11 Practical Encryption (p. 219)
11.1 Introduction (p. 219)
11.2 Entire-disk encryption (p. 220)
11.3 Encrypting for e-mail: PGP (p. 221)
11.3.1 How PGP works (p. 224)
11.3.2 Do's and don'ts of PGP installation and use (p. 226)
11.3.3 The need for long public keys (p. 233)
11.3.4 The man-in-the-middle problem (p. 234)
11.3.5 DH or RSA? (p. 235)
11.3.6 DSS? (p. 235)
11.3.7 Selecting the Symmetric Encryption Algorithm (p. 236)
11.3.8 A minor flaw in PGP (p. 236)
11.3.9 PGP weaknesses (p. 238)
11.3.10 Other uses of PGP (p. 239)
11.4 Encrypting one's own files: encrypted disk partitions (p. 239)
11.5 Steganography (p. 243)
11.5.1 Practical considerations in steganography (p. 246)
11.5.2 Detecting steganography: steganalysis (p. 246)
11.5.3 Other ways that steganography can be detected (p. 247)
11.5.4 Recommendations for maintaining privacy through steganography (p. 248)
11.6 Password cracking (p. 249)
11.7 File integrity authenticity: digital digests (p. 252)
11.8 Emergencies (p. 253)
11.8.1 Protecting sensitive data from a repressive regime (p. 253)
11.8.2 A word of caution (p. 254)
11.8.3 Getting discovered as a desirable persona (p. 254)
Selected bibliography (p. 255)
References (p. 256)
12 Link Encryption: VPNs (p. 259)
12.1 Split tunneling (p. 261)
12.2 IPsec (p. 262)
12.3 Summary (p. 263)
Selected bibliography (p. 264)
13 Security of Wireless Connectivity: Wi-Fi and Bluetooth (p. 265)
13.1 Background (p. 265)
13.2 The 802.11 technologies (p. 266)
13.2.1 WEP insecurity (p. 268)
13.2.2 War driving and war chalking (p. 270)
13.2.3 Using Wi-Fi while traveling (p. 271)
13.2.4 WPA (p. 272)
13.2.5 Securing 802.11 (p. 273)
13.3 Bluetooth wireless link security issues (p. 274)
13.3.1 Bluetooth security threats (p. 275)
13.3.2 Recommended steps for enhancing security of Bluetooth devices (p. 277)
Selected bibliography (p. 278)
14 Other Computer-Related Threats to Privacy (p. 279)
14.1 Commercial GPS devices (p. 279)
14.2 RF ID devices (p. 281)
14.3 Modern vehicles' black boxes (p. 283)
14.4 Cell phones (p. 285)
14.5 Prepaid calling cards (p. 286)
14.6 Credit cards (p. 287)
14.7 Intelligent mail (p. 288)
14.8 Fax machines and telephone answering machines (p. 288)
14.9 Office and home copiers (p. 289)
14.10 Frequent-anything clubs (p. 289)
14.11 Consumer electronics (p. 290)
References (p. 290)
15 Biometrics: Privacy Versus Nonrepudiation (p. 291)
15.1 Are they effective? It depends (p. 291)
15.2 Biometrics can be easily spoofed (p. 293)
15.3 Identification is not synonymous with security (p. 298)
15.4 Societal issues (p. 299)
References (p. 300)
16 Legal Issues (p. 301)
16.1 Software agreements that shift the legal liability to the user (p. 301)
16.2 Cyber-SLAPP suits (p. 303)
16.3 E-mail (p. 303)
16.4 Copyright (p. 305)
16.4.2 TheáUniform Computer Information Transactions Act (p. 308)
16.5 Can one be forced to reveal a decryption key? (p. 309)
16.6 Why is electronic evidence better than paper evidence? (p. 312)
16.7 Civil legal discovery issues (p. 315)
16.8 International policy on computer-related crime (p. 318)
16.9 What is computer crime? (p. 319)
16.10 What can a business do to protect itself? (p. 320)
16.11 Criminal evidence collection issues (p. 320)
16.11.1 Collection (p. 320)
16.11.2 Handling (p. 321)
16.12 Federal guidelines for searching and seizing computers (p. 321)
16.13 Destruction of electronic evidence (p. 326)
16.14 U.S.-European data-privacy disputes (p. 327)
16.15 New international computer crime treaty (p. 327)
16.16 The post-September 11 reality (p. 328)
16.17 The sky is the limit--or is it the courts? (p. 331)
References (p. 332)
About the Author (p. 333)
Index (p. 335)

Author notes provided by Syndetics

Michael A. Caloyannides received his M.Sc. in electrical engineering and his Ph.D. in electrical engineering, applied mathematics and philosophy from California Institute of Technology.

Mr. Caloyannides is a senior fellow at Mitretek Systems in McLean, VA.

050

Privacy protection and computer forensics / Michael A. Caloyannides.

By: Caloyannides, Michael A.

Enhanced descriptions from Syndetics:

Table of contents provided by Syndetics

Author notes provided by Syndetics

Cork Libraries

Kerry Libraries