Xem mẫu
Chapter 13: Advanced Security and Beyond
Security+ Guide to Network Security Fundamentals
Second Edition
Objectives
• Define computer forensics
• Respond to a computer forensics incident
• Harden security through new solutions
• List information security jobs and skills
Understanding Computer Forensics
• Computer forensics can attempt to retrieve information—even if it has been altered or erased— that can be used in the pursuit of the criminal
• The interest in computer forensics is heightened:
– High amount of digital evidence
– Increased scrutiny by legal profession
– Higher level of computer skills by criminals
Forensics Opportunities and Challenges
• Computer forensics creates opportunities to uncover evidence impossible to find using a manual process
• One reason that computer forensics specialists have this opportunity is due to the persistence of evidence
– Electronic documents are more difficult to dispose of than paper documents
Forensics Opportunities and Challenges (continued)
• Ways computer forensics is different from standard investigations:
– Volume of electronic evidence
– Distribution of evidence
– Dynamic content
– False leads
– Encrypted evidence
– Hidden evidence
...
- tailieumienphi.vn
nguon tai.lieu . vn