Home | Departments | Researchers | Overview
Development
of new techniques for computer security: the next generation of cyber forensic tools.
(Jacobson)
With the increase in the number of crimes where the computer is either used as a tool to carry out the crime or where the computer is the target of the crime, there is a need for a new generation of tools that can be used by law enforcement. We work informally, but extensively, with local and state law enforcement agencies in cyber forensics, so we are well-versed in this area. The current state of the art in computer forensics tools is nothing more than manual data scanners that can scan computer systems looking for data type (pictures, audio, etc.) and then present them to an investigator. The next generation of tools must be able to intelligently analyze the system and identify the data of most interest. The tools should also be able to determine whether a computer system has been compromised and to what extent. Another difficult issue in cyber forensics is being able to determine the location and identity of an attacker. Using techniques similar to fingerprint and DNA analysis, we are working to provide tools and processes that can help solve this problem.