Computer Forensics and Privacy (Artech House Computer Security Series) (Hardcover)

by Michael A. Caloyannides (Author) "In any country's court of law, physical evidence is as compelling as-and often more compelling than-personal testimony by a credible eyewitness..." (more)
Key Phrases: potent encryption, shot reprint, hostile computer forensics, United States, Selected Bibliography, United Kingdom (more...)

Editorial Reviews

Product Description
As society has become increasingly reliant on computers for document creation and information storage and transmittal, the amount of unauthorized theft of sensitive information stored in computers has increased correspondingly. This cutting-edge new book delivers a comprehensive treatment of the emerging field of computer forensics, making it a valuable resource for IT professionals in private businesses and government organizations, lawyers and law enforcement professionals, as well as the typical user of personal computers. It identifies the specific areas where sensitive and potentially incriminating data is hiding in personal computers, and explains how to go about truly removing this data. The book provides a systematic process for installing operating systems and application software that will help to minimize the possibility of security compromises, and numerous specific steps that need to be taken to prevent the hostile exploitation of one's computer.

From the Back Cover
Computer Forensics and Privacy delivers a comprehensive treatment of the threats to data confidentiality posed both by the emerging field of computer forensics and by connecting a computer to the Internet. It is a valuable resource for IT professionals in private businesses and government organizations, lawyers and law enforcement professionals, and the typical personal computer user. This unique resource provides critical information that helps you:

• Identify the specific areas where sensitive and potentially incriminating data is hiding in personal computers, and explains how to go about truly removing this data
• Install operating systems and application software that will help to minimize the possibility of security compromises
• Ensure computers that are connected to the Internet are protected from malicious mobile code and the new fashion of "adware/spyware"
• Detect whether advanced investigative tools, such as keystroke storing and relaying hardware and software, are in use in a computer

Other key topics include the pitfalls of encryption and how to use it effectively, the practical aspects of online anonymity, and the current legal issues that pertain to the use of computers. Over 70 illustrations emphasize major points throughout the book.

Product Details

• Hardcover: 392 pages
• Publisher: Artech House Publishers (December 2001)
• Language: English
• ISBN-10: 1580532837
• ISBN-13: 978-1580532839
• Product Dimensions: 9.4 x 6.4 x 1.2 inches
• Shipping Weight: 1.8 pounds
• Average Customer Review: 4.2 out of 5 stars See all reviews (4 customer reviews)
• Amazon.com Sales Rank: #378,792 in Books (See Bestsellers in Books)

  Popular in this category: (What's this?)

  #45 in

  Books > Computers & Internet > Security & Encryption > Forensics

Customer Reviews

Most Helpful Customer Reviews

7 of 7 people found the following review helpful:

4.0 out of 5 stars Good book w/ a few holes, September 17, 2002

By A Customer

This book occupies a unique place in the literature of computer
forensics. Most works in the field, such as Kruse and Heiser's
"Computer Forensics" (cf. BKCMPFRN.RVW), concentrate on documentation
of the investigation with a view to presentation in court. The actual
mechanics of data recovery tend to be left to commercial tools.
Caloyannides demonstrates how to delve into corners of the computer in
order to actually get the data out.

At the same time, this work is inconsistent, on at least two levels.
The perspective flips back and forth between forensics and privacy,
alternately emphasizing how to find evidence, and how to hide
evidence. The technology involved is the same, but the shifts in
viewpoint can be jarring to the reader. At the same time, the depth
of technical detail can vary wildly. At one point the book stops shy
of telling you how to undelete files with a sector editor (an activity
that could be useful to every computer user), while other sections
list lengthy and extraordinary measures to secure personal computers.

Part one concentrates on the data recovery aspect of computer
forensics. Chapter one is entitled an introduction, but seems to be
more of an editorial on privacy, with the added statement that the
book is intended both for law enforcement personnel needing details of
computer forensic techniques and those wishing to preserve the privacy
of data. The use of, and factors related to the use of, computer
forensics is supported by specific cases (rather than vague
suppositions) in chapter two. One has to agree with the author's
statement, in chapter three, that "computer forensics can be done--
and, sadly, is often done--by persons with a minimal amount of either
education or experience." Therefore it is unfortunate that the
forensic tools list and book structure are both difficult at this
point, although there is good material and writing, and Caloyannides
is not afraid to tackle the social and political aspects of the field.
Chapter four outlines various places (primarily in Windows) from which
data may be recovered. It is an odd mix of little known and very
valuable information, and extremely poor explanations of basic
functions like manual undeletion and file overwriting. A strange and
terse look at steganography, US and UK surveillance systems,
cryptography, and anonymity makes up chapter five. Data acquisition,
from sources such as key logging and Van Eck radiation, is reviewed in
chapter six. Chapter seven debunks a short list of measures falsely
believed to provide privacy protection.

Part two turns to privacy and security. Chapter eight is a discussion
of legal and commercial protections of privacy (mostly in the US) and
their failings. Installing and configuring a privacy protected
configuration of Windows is covered in chapter nine, in considerable
detail. Chapter ten's review of basic online privacy is heavy on
additional software packages. Intermediate online privacy, in chapter
eleven, looks at browser and email configurations, more packages, and
has a section on tracing email that would be helpful in dealing with
spam. (An unfortunate typesetting error seems to have deleted what
might have been valuable information about PGP [Pretty Good Privacy].)
Chapter twelve is more advanced, dealing with anonymizing services and
personal firewalls, but may be beyond the average user. A general
opinion piece on cryptography, chapter thirteen nevertheless provides
a good, basic background, albeit with a social and political emphasis.
Chapter fourteen looks at more practical encryption, detailing PGP and
specialized cryptographic programs, with a detour into biometrics.

Part three is a brief look at legal and other issues. Chapter fifteen
is a brief look at laws, mostly in the US. Chapter sixteen touches on
security aspects of VoIP (Voice over Internet Protocol) and GSM
(Global System for Mobility) wireless services.

Despite the ragged organization and style, and some glaring gaps in
coverage, this book does contain a wealth of information for both the
computer forensic examiner, and the user concerned with privacy. For
anyone beyond the most basic user it is well worth a read.

3 of 3 people found the following review helpful:

5.0 out of 5 stars Pleasantly Surprised, January 2, 2002

By	Stephen Moretti (Phoenix, Arizona USA) - See all my reviews

Very well written. Showed a different side to Computer Forensics that I had not considered. All my research has been on the side of the Computer Forensic Investigator and not on the issues of citizens rights to keep data private from Computer Forensic Hackers. Of the 25 books on Securtiy/Encryption/Forenscis purchased by myself this is the most unbiased and informative.

2 of 2 people found the following review helpful:

5.0 out of 5 stars A long overdue practical and readable book on privacy., December 9, 2001

By A Customer

This is a long overdue book. It is readable, gives specific practical advice on online and offline computer privacy, and does not mince words.
With book in hand, I found numerous holes in my own setup which I promptly closed. This book is a bible in its field.