Mobile Digital Evidence And Forensics

17
Radar Mobile Enterprise Summit Mobile Digital Evidence

description

CY4ORs Laboratory Manager John Young discusses the challenges and opportunities concerning mobile enterprise and the disclosure of electronic evidence.

Transcript of Mobile Digital Evidence And Forensics

Page 1: Mobile Digital Evidence And Forensics

E Radar Mobile Enterprise Summit

Mobile Digital Evidence

Page 2: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Agenda

Understanding the goals of forensic readiness

Magnitude of information

Preservation of evidence

Page 3: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Understanding the goals of

forensic readiness

Page 4: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

To gather admissible evidence legally and without interfering

with business processes

Page 5: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

To gather evidence targeting the potential crimes and

disputes that may adversely impact the organisation

Page 6: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

To allow an investigation to proceed at a cost in proportion

to the incident

Page 7: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

To minimise interruption to the business from any

investigation and to ensure that evidence makes a positive impact on the outcome of any

legal action

Page 8: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

The magnitude of information

Page 9: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

• A4 sheet with 1” margin contains 3600 characters at 12pt

• 500sheets of A4 80gsm = 2.25”• 500 x 3600 = 1.8M bytes• ~1Mbytes = 1.25” (2.25/1.8)• 40GB = 4,166ft high (40x1000x1.25”)

1062

.9 f

eet

Page 10: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

‘Big Data’

Every time we travel with smartphones, make card

purchases online and use social media we contribute to 'big data'

Page 11: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Where is data stored?

Page 12: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

EDRM

Source: www.edrm.net

Page 13: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Preservation of evidence

Page 14: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Detecting computer misuse

Page 15: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

What is digital evidence?

Page 16: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Incident response – do’s and don’ts

Page 17: Mobile Digital Evidence And Forensics

cy4or.co.uk 3 March 2014

Thank you for your timeAny questions?

www.cy4or.co.uk www.cy4or.co.uk/news

[email protected]