Network Forensic Investigation Protocol to Identify True Origin of Cyber Crime

E-mail has emerged as the most important application on the Internet for communication of messages, delivery of documents and carrying out transactions and is used not only from computers, but many other electronic gadgets such as mobile phones. This paper is an attempt to illustrate e-mail architecture from forensics perspective. Also, this paper projects the need for e-mail forensic investigation and lists various methods and tools used for its realization. A detailed header analysis of a multiple tactic spoofed e-mail message is carried out in this paper. It also discusses various possibilities for detection of spoofed headers and identification of its originator. Furthermore, difficulties that may be faced by investigators during forensic investigation of an e-mail message have been discussed along with their possible solutions. Our focus is on email header analysis phase offered by the tools. We examine the capability of a particular tools such as EmailTrackerPro and aid4mail in action. The paper describes the court case of cyber crime, the so-called identity theft in Internet communication via electronic mail by two business entities. Identity theft of e-mail addresses and false communications with a foreign company was carried out in order to indicate that a cash transaction of around EUR 100,000 was paid to the account of NN attackers and not to the account in the domestic Serbian bank.

Download Full-text

MEMORY FORENSIC: ACQUISITION AND ANALYSIS OF MEMORY AND ITS TOOLS COMPARISON

International Journal of Engineering Technologies and Management Research ◽

10.29121/ijetmr.v5.i2.2018.618 ◽

2020 ◽

Vol 5 (2) ◽

pp. 90-95

Author(s):

Mital Parekh ◽

Snehal Jani

Keyword(s):

Data Collection ◽

Research Paper ◽

Cyber Crime ◽

Forensic Investigation ◽

Short Period ◽

Cryptographic Keys ◽

Volatile Memory ◽

Forensic Tools ◽

Tools And Techniques ◽

Complete Investigation

The enhancement of technology has led to a considerable amount of growth in number of cases pertaining to cyber-crime and has raised an enormous challenge to tackle it effectively. There are various cyber forensic techniques and tools used to recover data from the devices to tackle cyber-crime. Present research paper focuses on performing memory forensic and analyzes the memory which contains many pieces of information relevant to forensic investigation, such as username, password, cryptographic keys, deleted files, deleted logs, running processes; that can be helpful to investigate the cyber-crime pining down the accused. The three main steps followed in memory forensic are acquiring, analyzing and recovering. Recovery of the evidences of crime from the volatile memory can be possible with the knowledge of different tools and techniques used in memory forensic. However, it is always tough to analyze volatile memory as it stays for a very short period. Not all tools can be used for memory forensic in every situation and therefore, it is important to have the knowledge of tools before applying to solve a particular cyber-crime. It is yet to establish on using a single tool for complete investigation, however, most of the tools used are successful in providing reasonable evidences. The present research paper provides an insight on analyzing the memory that stores relevant data, collection of evidences from the device(s), extraction of essential data using different memory forensic tools, tools useful for various purposes and the best suited tool for a particular situation.

Download Full-text

Data fusion & visualization application for network forensic investigation - a case study

2017 2nd International Conference on Anti-Cyber Crimes (ICACC) ◽

10.1109/anti-cybercrime.2017.7905301 ◽

2017 ◽

Cited By ~ 1

Author(s):

Huda Fatima ◽

Suneeta Satpathy ◽

Satyasundar Mahapatra ◽

G.N. Dash ◽

Sateesh K. Pradhan

Keyword(s):

Data Fusion ◽

Forensic Investigation ◽

Network Forensic ◽

Visualization Application ◽

Fusion Visualization

Download Full-text

Law, CyberCrime and Digital Forensics

Digital Crime and Forensic Science in Cyberspace ◽

10.4018/978-1-59140-872-7.ch012 ◽

2011 ◽

pp. 267-290 ◽

Cited By ~ 1

Author(s):

Andreas Mitrakas ◽

Damián Zaitch

Keyword(s):

Digital Forensics ◽

Self Regulation ◽

Legal Framework ◽

Legal Aspects ◽

Cyber Crime ◽

Forensic Investigation ◽

Electronic Communications ◽

Electronic Transactions ◽

Common Understanding ◽

The Eu

The steep increase of cyber crime has rendered digital forensics an area of paramount importance to keep cyber threats in check and invoke legal safety and security in electronic transactions. This chapter reviews certain legal aspects of forensic investigation, the overall legal framework in the EU and U.S. and additional self-regulatory measures that can be leveraged upon to investigate cyber crime in forensic investigations. This chapter claims that while full-scale harmonisation of forensic investigation processes across the EU and beyond is unlikely to happen in the foreseeable future, cross-border investigations can be greatly facilitated by initiatives aiming at mutual assistance arrangements based on a common understanding of threats and shared processes. Involving the users through self-regulation and accountability frameworks might also contribute to reducing risks in electronic communications that emanate from cyber criminal threats.

Download Full-text