Digital Evidence and Computer Crime, Second Edition [Hardcover]

Eoghan Casey BS MA (Author)

Book Description

Publication Date: March 22, 2004 | ISBN-10: 0121631044 | ISBN-13: 978-0121631048 | Edition: 2

Digital evidence--evidence that is stored on or transmitted by computers--can play a major role in a wide range of crimes, including homicide, rape, abduction, child abuse, solicitation of minors, child pornography, stalking, harassment, fraud, theft, drug trafficking, computer intrusions, espionage, and terrorism.
Though an increasing number of criminals are using computers and computer networks, few investigators are well-versed in the evidentiary, technical, and legal issues related to digital evidence. As a result, digital evidence is often overlooked,
collected incorrectly, and analyzed ineffectively. The aim of this hands-on resource is to educate students and professionals in the law enforcement, forensic science, computer security, and legal communities about digital evidence and computer crime.
This work explains how computers and networks function, how they can be involved in crimes, and how they can be used as a source of evidence. As well as gaining a practical understanding of how computers and networks function and how they can be used as evidence of a crime, readers will learn about relevant legal issues and will be introduced to deductive criminal profiling, a systematic approach to focusing an investigation and understanding criminal motivations.
Readers will receive access to the author's accompanying Web site which contains simulated cases that integrate many of the topics covered in the text. Frequently updated, these cases teaching individuals about:
* Components of computer networks
* Use of computer networks in an investigation
* Abuse of computer networks
* Privacy and security issues on computer networks
* The law as it applies to computer networks

* Provides a thorough explanation of how computers and networks function, how they can be involved in crimes, and how they can be used as a source of evidence
* Offers readers information about relevant legal issues
* Features coverage of the abuse of computer networks and privacy and security issues on computer networks
* Free unlimited access to author's Web site which includes numerous and frequently updated case examples

Editorial Reviews

Review

Reviews for the previous edition: "Digital Evidence and Computer Crime provides an introduction to many concepts from computer science about networks, and in particular the Internet. It details the application of forensic science principles to the location, recovery, and examination of digital evidence...Each chapter in the book is fully supported by case examples to clarify particular points made. It also contains many references to specialized literature and on-line resources as well as a helpful glossary of terms...this book can be recommended mainly for people looking to expand their general knowledge and awareness of computer crime and the process of computer crime investigation, particularly those just entering the field of digital forensics." --Dr. L.W. Russell, Science & Justice "Many, perhaps most, of the police, lawyers or systems administrators and forensic scientists involved in investigation or prosecution of computer-related crimes do not know the answer to these questions [of digital evidence handling]. This book will tell them. It should, of course, be equally interesting to lawyers with the task of defending alleged computer criminals." --Robert L Dunne, JD, The Center for Internet Studies, Yale University, USA "...an excellent book that details the elements of digital crime. Author Eoghan Casey does a superb job of applying forensic science to computers. The information presented here is critical to a diverse audience: law enforcement, attorneys, forensic scientists, and systems administrators, for instance...In all, the book and CD are an excellent introduction to an increasingly important area of law enforcement." -- Ben Rothke, SecurityManagement I would very highly recommend this book to all those professionals who want to venture into the new and exciting branch of computer forensics. This book is good value for money, and should adorn the bookshelves of all computer experts, especially those who are in computer forensics. - Internet Journal of Forensic Medicine Reviews for 2nd Edition: This behemoth of a book offers more than 680 pages of useful information on digital forensics and computer crime. There's something for everyone - law enforcement agencies that collect and process evidence, forensic analysts, lawyers and other information security professionals. ...Casey does a great job making difficult concepts easy to understand. The tools and methodology described are up to date and relevant, and the case studies are detailed perfectly. This book is a great reference for any security professional facing issues in this area. - ComputerWorld

"Eoghan Casey's work will be music to the ears of computer-crime investigators. Remarkably thorough in scope, this book offers something no other textbook does: a stable set of standards to achieve and surpsass.. Remarkably, given the short lifespan of today's tech books, this book is likely to have lasting value."--Security Management

Book Description

Required reading for anyone involved in computer investigations or computer administration!

See all Editorial Reviews

Product Details

• Hardcover: 688 pages
• Publisher: Academic Press; 2 edition (March 22, 2004)
• Language: English
• ISBN-10: 0121631044
• ISBN-13: 978-0121631048
• Product Dimensions: 9.5 x 7.5 x 1.3 inches
• Shipping Weight: 3 pounds
• Average Customer Review: 4.7 out of 5 stars  See all reviews (15 customer reviews)
• Amazon Best Sellers Rank: #284,801 in Books (See Top 100 in Books)
  • #50 in Books > Computers & Technology > Business & Culture > Digital Law

More About the Author

Eoghan Casey is founding partner of cmdLabs.com, specializing in digital forensics and incident response. Over the past decade, he has consulted with many attorneys, agencies, and police departments in the United States, South America, and Europe on a wide range of digital investigations, including fraud, violent crimes, identity theft, and on-line criminal activity. In addition, Eoghan has helped organizations investigate and manage security breaches, including network intrusions with international scope. He has delivered expert testimony in civil and criminal cases, and has submitted expert reports and prepared trial exhibits for computer forensic and cyber-crime cases.

Eoghan has performed thousands of forensic acquisitions and examinations, including Windows and UNIX systems, Enterprise servers, smart phones, cell phones, network logs, backup tapes, and database systems. He has performed vulnerability assessments, deployed and maintained intrusion detection systems, firewalls and public key infrastructures, and developed policies, procedures, and educational programs for a variety of organizations.Eoghan has authored numerous books in his areas of expertise that are used by practitioners and universities around the world, and he is Editor-in-Chief of Elsevier's International Journal of Digital Investigation. In addition, he conducts research and teaches graduate students at Johns Hopkins University Information Security Institute.

Customer Reviews

Most Helpful Customer Reviews

15 of 15 people found the following review helpful:

5.0 out of 5 stars Best computer forensic book available, June 28, 2001

By 

Ben Rothke "Author of 'Computer Security: 20 ... (USA) - See all my reviews
(REAL NAME)   

This review is from: Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet (Hardcover)

Sometimes, defense attorneys have it easy: one slip-up by the prosecution and evidence is thrown out. Knowing that, law enforcement goes to great lengths to ensure that evidence is appropriately collected and protected. That works well in the physical world, where law enforcement has many generations' worth of experience. But in the modern world of computers and digital networks, where the simple act of rebooting a computer is enough to wipe out large amounts of evidence, law enforcement clearly needs thorough guidance.

Such a resource is here: Digital Evidence and Computer Crime, an excellent book that details the elements of digital crime. Author Eoghan Casey does a superb job of applying forensic science to computers. The information presented here is critical to a diverse audience: law enforcement, attorneys, forensic scientists, and systems administrators, for instance.

While cybercrime law is in some ways similar to other aspects of criminal law, it nonetheless has its own language and categories. For instance, jurisdiction is a key element in both the physical and digital realms, but it is a much trickier concept in the latter. Casey develops this topic and many more. Those new to computers and networks need not worry: the book begins with an explanation of how they function. With the basics out of the way, Casey details how computers can be used in crime and how the evidence created from these activities can be used for later analysis....The accompanying CD-ROM contains simulated cases that integrate many of the topics covered in the text. In all, the book and CD are an excellent introduction to an increasingly important area of law enforcement.

12 of 12 people found the following review helpful:

5.0 out of 5 stars Great Primer - foundational, May 13, 2001

By 

"mahakala" (Metro-Atlanta) - See all my reviews

This review is from: Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet (Hardcover)

The author gives basic understanding for everyone. The law enforcement professional will find it rudimentary on issues of edvidence seizure and chain of custody, but then he gives some insight into the technical aspects (the OSI and so forth) which is probably new material. Then for the technical professional, the opposite is true.

Not for the more experience InfoSec/forensic professional. But an outstanding introduction for those wishing to get into the practice - in the Atlanta ISSA, we use this as our primer training text book.

10 of 10 people found the following review helpful:

5.0 out of 5 stars University Text Book, June 8, 2001

By 

yendred - See all my reviews

This review is from: Digital Evidence and Computer Crime: Forensic Science, Computers, and the Internet (Hardcover)

This text was used for the digital evidence and computer crime class that I just completed. The book is clear and easy to understand. It goes into detail only when needed. I was concerned that this information would quickly become out of date, but the ideas presented are current and provide a solid background for understanding any newer technologies that come down the road. I usually sell my books after the semester ends, but I have decided to keep this one.