Forensic Data Recovery and Anti-Forensics Tools For Digital CCTV Systems

I’ve developed two forensic tools.

1)      DDCT – DVR Data Carving Tool

2)      DDET – DVR Data Eraser Tool

The second tool…DDET…mmm…digital forensic practitioners would not be able to recover the video files!

Interesting talk by Simson Garfinkel

Simson L. Garfinkel is an Associate Professor at the Naval Postgraduate School in Monterey, California. Garfinkel is regarded as a leader in the fields of Digital forensics and Usable Security. In addition to his academic work, Garfinkel is a journalist, an entrepreneur, and an inventor, his work in all three concerned with computer security, privacy and information technology.

http://en.wikipedia.org/wiki/Simson_Garfinkel

Digital forensics as a career

I’ve received some emails from my Linkedin colleagues asking me whether digital forensics is good for their career.

Well, if you ask me about digital forensics, I will tell you that it is the best for you.

Most probably, I’m bias here, but I can’t help it.

Apart from family, I’m devoting my life to digital forensics. Almost everyday I’ve to read about digital forensics.

For those who are thinking to pursue their career in digital forensics, you can ask digital forensic experts (general or specific questions) or you can read digital forensics magazines to get more information; and of course literatures.

There are two new publications by eforensics magazines for you to read and loads of digital forensic literatures.

-       An ebook: Real life computer forensics

-       A magazine: Let’s play forensic tools

http://eforensicsmag.com/category/news/

My research is more towards data recovery and there are two good articles for you to read.

Hopefully you'll get some ideas if digital forensics is good for you.

Good luck!

Memory Forensics

I’ve done a bit of work on memory forensics and found it interesting but complex. And, as a researcher and practitioner, I need to read and write a lot. Same goes to you out there, my dear colleagues. The least that you need to do is to read in order to keep yourself informed. Apart from the Advances in Digital Forensics book by IFIP Working Group 11.9, eForensics Magazine is another good resource for you (I’ve been interviewed by them and I’ve also contributed an article to them).

http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2012/09/interview-with-aswami-ariffin-by.html

http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2012/12/an-analytical-framework-for-digital.html

If you are interested in memory forensics, you can refer,

http://eforensicsmag.com/memory-forensics-step-by-step-special-package-in-preorder/

iOS Forensics: How can we recover deleted image files with timestamp in a forensically sound manner?

For further info, http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2013/05/ios-forensics-framework-for.html

http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=6657266&url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D6657266

More digital forensics research papers in the future :) for practitioners and researchers.

iOS Forensics Framework For Practitioners

Digital forensics practitioners are welcome to discuss with me on iOS forensics framework (especially those from LEAs). You will need it, the framework, as an expert witness in the court of law and I've developed a framework that was accepted by a reputable digital forensics conference in Germany!

The report of your commercial tool...mmm...you might have tough time to explain it to the judge/jury on how you recovered the digital evidence from the device.

Publication of Digital Forensics and Cyber Security Research Paper

Dear fellow Malaysian digital forensic and cyber security researchers,

I have to say that I’m proud with some of your work. I know this development because I’m reviewing some of your papers (i.e., thanks to UKM for inviting me).

http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2013/02/intelligent-computation-on-pattern.html

If you plan to do a research (or already doing it), I’m interested to work with you and publish/present paper at local or international conferences (such as IFIP Working Group 11.9 Digital Forensics).

http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2012/11/digital-cctv-forensics-data-recovery-of.html

In fact, some of you have been communicating with me.

I hope to be back in Malaysia (and CyberSecurity Malaysia) soon and perhaps we could plan something in the future.

Most probably, I’m able to contribute and share my experience as a reviewer (thanks to ARES for inviting me a few times) and author.

http://aswamiariffin-cybercsimalaysia.blogspot.com.au/2013/01/the-sixth-international-workshop-on.html

Also, to my colleagues from other countries, I’m interested to work with you as well.