Computer Forensics - Science topic

Can you clarify the description of the problem? Your question was asked in a very general way.

You have a general topic, now think about the skills you want to use. What skills and knowledge do you want to sharpen for your next job? What have you mastered? Do you like playing with data or writing and explaining models? Are your interests interdisciplinary?

At the end of your thesis, for one hot minute, you will be the world's expert in answering one question. What do you want that question to be?

I propose a topic: Analysis of the possibility of using Blockchain technology to improve the level of cybersecurity of online banking and reduce the risk of cybercrime developing thanks to the use of ransomware viruses.

Best wishes,

Dariusz Prokopowicz

Below I briefly described the issues related to cybercrime and cybersecurity, which I researched and described in scientific publications that are available on the Research Gate portal. Over the past few years, the scale of cybercrime attacks on the IT systems of various institutions, including government institutions, on the databases of social media portals, on the ICT systems of banks, on electronic banking systems has been growing. Cybercriminals are increasingly attacking mobile online banking systems made available to Internet users and bank customers through mobile devices, mainly via smartphones. Research shows that the scale of cybercrime attacks on the IT systems of banks, institutions, etc. using social engineering combined with perfidiously created malicious software such as ransomware, i.e. encrypting access to data on disks or redirecting users to fake websites of banks and institutions on the Internet to phishing personal data, access passwords to electronic banking accounts and, as a result, to steal money. For several years, many mailbox users have appeared strange emails of unknown origin, which are sent as spam from private other email accounts or others with false information. Attachments containing false information are attached to many of these suspicious emails, usually sent by cybercriminals and hackers. Attachments are usually of the WORD * .doc document type, the Acrobat Reader * .pdf format, image files or other formats, and often contain Ransomware-type viruses. These are very dangerous viruses that encrypt access to a computer's disk. In addition, cyber criminals are increasingly using mailboxes set up on the e-mail portal to send infected e-mails to subsequent Internet users by generating fake emails so that they look like a specific user of the mailbox would send e-mails prepared by cybercriminals to their friends. These types of cybercrime techniques are becoming more common. Why are Internet technology companies that dominate the market and offer e-mail services do not improve the security of e-mail communication systems using e-mail boxes to significantly reduce cybercriminals' activity harmful to citizens? This question is still valid. On the other hand, internet banks and technology internet companies, technology fintechs are constantly improving cyber security techniques. The development of Business Intelligence business intelligence, Blockchain technology, data analysis in Big Data database systems, artificial intelligence to track movements and attacks made by cybercriminals, for prognostic analyzes, etc. can be helpful in the process of improving IT systems risk management. Therefore, the skilful and efficient use of data science technology can be helpful in combating cybercrime, but it all depends on how these technologies will be used and, as a consequence, who will win in the following years in this IT, information "arms race". I conduct research in this area. Conclusions from the research I published in scientific publications that are available on the Research Gate website. I invite you to scientific cooperation.

Greetings,

Dariusz Prokopowicz

Hi Osama, I am also working on this topic as you did before. I just want to know that what can be implications with the rise of smartphones

Read these articles for finding the answer of your question, please

It depends on what are you looking for, commercial or open source. However, here is a wiki list that contains both categories with a brief description for each software/tool.

You might be also interested in the IoT Forensics Challenge provided by DFRWS. Have a look here.

ACPO guidline. ISO, NIST etc guidelines shows metadata forensic is important but it depends upon case requirements...

On a website the last-modified information should appear when you make a HEAD http request on the resource. In linux you can do

Type (replacing both "grussell.org" with the name of the server and "/" with the file details):

(then type 2 returns)

HTTP/1.1 200 OK

...

Last-Modified: Fri, 13 Jan 2012 10:36:12 GMT

ETag: "a5f-4b6666eff7f00"

Content-Length: 2655

The last-modified data should reflect the last modified of the file. Additionally if the file changes the ETag should change along with the length of the file. Sometimes some of the information may not be present, but at least the content-length is almost always there and will likely change, and usually the last-modified is present in a well-written system.

Simple enough to write a little program to do that.

I hope that helps.

Gordon.

From one side you confuse me, from the other side I confuse you, so we are ok :p.

Well, I think I understand what you mean. That the email clients, when you add an attachment at email, they don't keep the fullpath, only the filename, due to security reasons.

Ok, thanks for the extended info.

Hi Mahdiyar,

CDMA spreading sequences will spread out the spectrum of narrowband interference while crosscorrelating the local sequence with the received sequence.

The "measure of goodness" or robustness in CDMA is called the "Jamming Margin"

In approximate terms, it is the ration of the effective RF bandwidth of the spreading sequence when applied to an RF carrier to the effective information bandwith of the unspread signal. If you have an unspread signal bandwidth of 10KHz and a spreading bandwith of 1000KHz, the jamming margin is 100 or 20 dB.

Good luck

Peter, I agree. I deem that each contemporary filesystem should proffer logs to unambiguously trace access on its files.

There are also the so called extended file attributes,

like album, title, duration...

They seem to be added in various file systems.

What also could be done is to compute statistical data

and assign the files to clusters. I faintly remember

that it was possible to recognize componists by the

zipped version of their recorded music.

Regards,

Joachim

Could you shade more light on what you mean by "Real time issues of privacy..."? I am assuming you are taking about Privacy in Temporal Information Retrieval. If that is the case, there is a good beginning resource that lists a number of research articles on the subject -http://en.wikipedia.org/wiki/Temporal_information_retrieval 

The challenge would be incorporating various privacy algorithms in temporal information retrieval systems.

Dear Mohammad, please refer to my article namely Security of Cloud Computing Environment by Huda Karajeh, Mahmoud Maqableh, Ra'ed (Moh'd Taisir) Masa'deh

it might help. Yours

basically IMHO there are some other issues other than the identification of the VMs considering the distribution concept of we have in cloud data of that customer may have scattered all over the globe,

You may find this helpful

This too looks at the case from variety of aspects

We use AssecData FTK 5, Encase 7, and X-Ways. Additionally OS Forensics is also a good and cheap tool. For Smartphone forensics we use Oxygen Forensic Suite.

Smart devices are complex devices for forensic investigations. Different Operating System, Various Hardware combinations, No standard tools which support whole smart device base. So Mobile Forensic is a big challenge to us. Technically said each phone separate investigation tool is needed. No standard procedure to follow for evidence analysis.

In short:

Must: 1. Some Degree in Computers or Electronics

2. Excellent Admin Skills on Windows and Linux

3. Attitude towards unleashing hidden facts

Desirable: Programming or scripting language

contents:

1. Acquistion

2. Malware analysis

3. Memory analysis

4. Mobile Forensics

5. Analyzing PCAP and rewrite what happened!