Computer Forensics: Essentials of Incident Response

Author: (USA) Warren G. Kruse II
Publisher:
Publish Date: 2003-08-01
Features: The author of this book combines years of experience in the field of information security with the needs of students in computer forensics training courses, providing a detailed introduction to computer forensics-related topics such as the tracking of crimes, cryptography, data hiding, malicious code, and forensic techniques for mainstream operating systems. The book also elaborates on various effective tools required for computer forensics and briefly outlines the U.S. judicial process. Computers are increasingly involved in criminal activities, either as targets of attacks or as tools for committing crimes. Computer forensics is a new branch of the computer security field, involving legal, procedural, and technical issues related to the acquisition, preservation, analysis, and presentation of evidence in computer crime incidents. The author of this book, combining years of experience in the field of information security with the needs of students in computer forensics training courses, provides a detailed introduction to computer forensics-related topics such as the tracking of crimes, cryptography, data hiding, malicious code, and forensic techniques for mainstream operating systems. The book also elaborates on various effective tools required for computer forensics and briefly outlines the U.S. judicial process. This book is suitable for engineering and technical personnel in the fields of computer networks and information security. For computer crime investigators in law enforcement agencies and personnel responsible for handling computer security incidents, this book is a rare and valuable reference.