Investigation of white-collar crime using Mobile Forensics Analysis
Dr. Max MustermannReferat Kommunikation & Marketing Verwaltung
•
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
▪
▪
▪
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
´
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
a = 0
b = 0
a = 1
b = 0
a = 0
b = 1
a = 1
b = 1
p1action1
p1action2
p1action2
p1action1
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
▪ ℵ
▪
▪
▪
𝐴 → 𝐵
ℵ
𝑅
Investigation of white-collar crime using Mobile Forensics Analysis
Information System (IS)
Application System
ClientServer
ERP Database Server
Microsoft Windows Server
2008 R2 SP 1
Persons
(AutoIt)GUI
ERP Client
Component
Microsoft Windows 7
SP 1
KVM (Hypervisor)
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
Investigation of white-collar crime using Mobile Forensics Analysis
➢
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
▪
193.174.122.141 - - [13/Feb/2015:14:10:00 +0100] "GET / HTTP/1.1" 200 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:35.0) Gecko/20100101 Firefox/35.0"193.174.122.141 - - [13/Feb/2015:14:18:53 +0100] "GET / HTTP/1.1" 200 39 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:35.0) Gecko/20100101 Firefox/35.0"193.174.122.141 - - [13/Feb/2015:14:20:27 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"193.174.122.141 - - [13/Feb/2015:14:21:42 +0100] "GET / HTTP/1.1" 304 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"
Investigation of white-collar crime using Mobile Forensics Analysis
Acquisition Examination Analysis Presentation
Decide which evidence/data is relevant to the case
Secure and collect digital evidence from the crime scene
Interpretation of data
Correlate evidence
Handle uncertainty
assess likelihood of events
Write a Report
Present evidence in a court of law
Investigation of white-collar crime using Mobile Forensics Analysis
Acquisition Examination Analysis Presentation
Investigation of white-collar crime using Mobile Forensics Analysis
▪
Acquisition Examination Analysis Presentation
▪
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
Acquisition Examination Analysis Presentation
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
Acquisition Examination Analysis Presentation
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
▪
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Digital forensics
Urgent measures
Normaloperation
Incidentresponse
Emergencymode
Normaloperation
Restart
Restoring
Investigation of white-collar crime using Mobile Forensics Analysis
n = 59
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
Towards a Capability Maturity Model for Digital Forensic Readiness
Investigation of white-collar crime using Mobile Forensics Analysis
▪
▪
▪
Investigation of white-collar crime using Mobile Forensics Analysis
Investigation of white-collar crime using Mobile Forensics Analysis
51
Contact details
Ludwig Englbrecht, [email protected]
@LJESec
Chair of Information Systems I (Prof. Dr. Günther Pernul)
University of Regensburg
http://www-ifs.uni-regensburg.de
Investigation of white-collar crime using Mobile Forensics Analysis