Digital forensics deals with the acquisition, preservation, examination,
analysis and presentation of electronic evidence. Networked computing,
wireless communications and portable electronic devices have expanded
the role of digital forensics beyond traditional computer crime investigations.
Practically every type of crime now involves some aspect of digital
evidence; digital forensics provides the techniques and tools to articulate
this evidence in legal proceedings. Digital forensics also has myriad
intelligence applications; furthermore, it has a vital role in information
assurance – investigations of security breaches yield valuable information
that can be used to design more secure and resilient systems.
This book, Advances in Digital Forensics VII, is the seventh volume
in the annual series produced by IFIP Working Group 11.9 on Digital
Forensics, an international community of scientists, engineers and
practitioners dedicated to advancing the state of the art of research and
practice in digital forensics. The book presents original research results
and innovative applications in digital forensics. Also, it highlights some
of the major technical and legal issues related to digital evidence and
electronic crime investigations.
This volume contains twenty-one edited papers from the Seventh IFIP
WG 11.9 International Conference on Digital Forensics, held at the
National Center for Forensic Science, Orlando, Florida, January 31 –
February 2, 2011. The papers were refereed by members of IFIP Working
Group 11.9 and other internationally-recognized experts in digital
The chapters are organized into five sections: themes and issues, forensic
techniques, fraud and malware investigations, network forensics and
advanced forensic techniques. The coverage of topics highlights the richness
and vitality of the discipline, and offers promising avenues for future
research in digital forensics.