Computer Forensics and Cyber Crime: An Introduction

Computer Forensics and Cyber Crime Computer Forensics and Cyber Crime: An Introduction (2nd Edition) by Marjie T. Britz

Details:

  • Paperback: 408 pages
  • Publisher: Prentice Hall; 2 edition (October 17, 2008)
  • Language: English
  • ISBN-10: 0132447495
  • ISBN-13: 978-0132447492
  • Product Dimensions: 9.1 x 6.9 x 0.9 inches
  • Shipping Weight: 1.2 pounds
  • Popular: 4.5 out of 5 starsDescription:

    Completely updated in a new edition,  this book fully defines computer-related crime and the legal issues involved in its investigation. Re-organized with different chapter headings for better understanding of the subject, it provides a framework for the development of a computer crime unit. Updated with new information on technology, this book is the only comprehensive examination of computer-related crime and its investigation on the market.  It includes an exhaustive discussion of legal and social issues, fully defines computer crime, and provides specific examples of criminal activities involving computers, while discussing the phenomenon in the context of the criminal justice system. Computer Forensics and Cyber Crime 2e provides a comprehensive analysis of current case law, constitutional challenges, and government legislation. New to this edition is a chapter on Organized Crime & Terrorism and how it relates to computer related crime as well as more comprehensive information on Processing Evidence and Report Preparation. For computer crime investigators, police chiefs, sheriffs, district attorneys, public defenders, and defense attorneys.

    Review:

    “Computer Forensics and Cyber Crime: An Introduction should he a welcomed addition to all parents’ bookshelves.”

    — Dr: Ed Whittle, Florida Metropolitan University, Tampa, F

    “Computer Forensics and Cyber Crime: An Introduction likely constitute(s) the most definitive reference material on the subject of computer-related crime, cyber crime law, and computer crime investigation including the management and custody of evidence. Although the number of books prepared on the subject of computer-related crime and investigations has increased quite a bit in quantity and quality during the last two years, to my knowledge, they are not as thorough, comprehensive, and easy-to-read as this one …this-text is far superior to any of those… This book could very well become the Bible for computer crime across the U.S. and possibly in Britain, Canada, and elsewhere too.”

    — Scott Senja, Weber State University, Ogden, UT

    “This is the most extensive and comprehensive text reviewed in our quest for appropriate material.”

    — Karen Weston, Gannon University; Eric, PA

    Price:

    List Price: $65.20 Price: $49.52 You Save: $15.68

Read More

HDD Capital Spending in 2012 and Beyond

In order to repair the damage to the HDD supply chain from the 2011 Thailand floods as well as meet the increasing need for digital storage the hard disk drive industry must continue to make investments in capital equipment and production facilities.  Future increases in HDD areal density as well as increasing unit sales will drive significant capital spending investments that will impact the revenues of companies such as Anelva, Hitachi High Technologies, Innovative Instruments, Intevac, KLA Tencor, Teradyne, Xyratex, Veeco, and many others in the next few years.

The 2012 Hard Disk Drive Capital Equipment and Technology Report provides 207 pages of in-depth analysis of technology developments and capital equipment spending to sustain the growth and development of the hard disk drive industry.  Some highlights from the 2012 report include:

169% growth in HDD capital spending is expected from 2011 to 2016, driven by three factors:  unit shipment increases of 167%, the introduction of new HDD technologies such as HAMR and the replacement and repair of equipment damaged in the 2011 Thailand floods.

Between CQ4 2011 and CQ4 2012 over $1 B in capital spending is expected to repair or replace equipment and facilities damaged in the Thailand floods.

HDD and component companies have more cash to invest in equipment and technology development in 2012 and 2013, due to higher drive demand, limited drive supply and higher HDD prices.

Total industry spending on capital equipment in 2012 is expected to be about $2.4 B with 72% of this spent on process equipment, 21% on production test and 7% on metrology.

Average HDD capital equipment spending per year between 2008 and 2016 is estimated at about 7.2% of HDD industry revenue, with this percentage increasing in the last years of this period due to new technology introductions.

HDD areal density has slowed to 20-25% annually but 3.5-inch HDDs with storage capacities of 12 TB and 2.5-inch HDDs with 6 TB are expected by 2016.

Lower AD growth will drive more components per drive and thus more capital spending on head and media production equipment in coming years.

Industry consolidation and recovery from the Thailand shortages will result in higher HDD prices than 2011 at least until 2014 and likely HDD prices will flatten out about 10-15% higher than in 2011—this will help fund expensive new technology transitions by 2015-2016 and increase areal density growth rates to 40+% CAGR.

The normal capital equipment cycle will likely be re-established by 2014.  Capital purchases in 2014 and later will be driven by increasing unit demand (assumed 14% annual growth) as well as the introduction of heat assisted magnetic recording in 2015 and 2016.

The 2012 Hard Disk Drive Capital Equipment and Technology Report is now available from Coughlin Associates. To find out more about this report please see the brochure at http://www.tomcoughlin.com/techpapers.htm

Read More

Information on data recovery

The three most common problems seen today are: 1. The drive makes a repetitive clicking sound when power is applied (this may not always be audible to you). 2. The drive is completely dead, not spinning at all. 3. The computer bios sees the drive, but there is no boot and a boot from a floppy will not gain access or you get an error message that says ‘Invalid media type reading drive X’. Of course there are other issues such as flooding (never turn a wet drive on!), fire and other natural and unnatural disasters all of which require a top-notch data recovery company to work with.

If your drive is making a clicking sound, 9 times out of ten this means that the heads are bad and cannot read the information needed to get the drive to a ‘ready’ state. This can be due to two factors: physical head crash whereas the heads scrape some of the media off the surface of the platters thus destroying the heads in the process or the heads just go bad. The result is the same, the drive clicks. In this type of situation, you can expect an expensive data recovery because of what is needed to extract the data. The drive will have to be opened in a clean room environment, the heads will need to be replaced which requires an identical drive be purchased just for parts, and a skilled engineer will have to perform the difficult and meticulous task of aligning these new heads so they read the data properly. If indeed the media has been scored, there are many cases where there is nothing that can be done about it because so much of the recording material has been scraped off. Keep in mind that drives now sold are spinning at an incredible 7200 to 10,000 rpm, and that with this kind of speed disaster can be swift when it happens.

There seems to be a large number of electrical issues with drives these days, weather it be natural as in lightning strikes or man-made as in power outages and poorly manufactured power supplies. There are also known issues in many models of Maxtor, Western Digital and Quantum drives where a certain chip will simply burn up and cause the drive to stop spinning. About two years ago or more, Western Digital had a 500,000 drive recall as the result of a defective chip used in making many different models of drives. Over the last year or more, Quantum drives of many models had a similar issue, except this time, the numbers of affected drives was much higher. This was the driving force behind the acquisition of Quantum’s hard drive lines by Maxtor! Maxtor is still reeling from the huge numbers of returned drives on a daily basis. One of the big problems is that manufacturers do not put a fuse on the drives’ electronics anymore. You might say, “This would be an easy fix, I’ll just get another drive of the same model and swap the boards myself”. In an ideal world this would be the case but another factor most people do not know is that for each model drive made by a manufacturer, there can be over a dozen different revisions of the electronics even though the model is identical! This fact can make a simple problem very complex. Don’t look to the manufacturers for help with this either, they will not.

If the drive is seen by the BIOS of the computer, and you cannot access it by booting from a floppy in the case of a WIn9X or ME drive this means that for some reason the areas that define the partitions of the drive or the boot parameters have been corrupted. This can be caused by a virus, a computer or software bug, using a third party partitioning software, running Fdisk or a number of other reasons. This type of situation can be an easy fix for a professional or it can be a more difficult one depending on the extent of any additional damage to the file system or data structures. Usually, this type of problem is an easier one to deal with, because the drive at least still works. In the case of an operating system other than Win9X like NT, corruption the NT data structure can be a very complex mathematical problem and can be an expensive recovery as well due to the time it takes to solve. Operating systems like Unix and Novell as well as Spanned sets or Raid drives can definitely be an expensive recovery due to the complexity of these configurations.

It is important that you never run utilities such as scandisk, Norton disk doctor or any other such utility on a drive you suspect has a hardware failure. This can make recovery of your data difficult or even not impossible in some cases. These software tools work best on simpler types of problems and have no way of dealing with hardware issues. If your data is important, and you have doubts on what to do, call a professional. Also beware of technicians running these tools without your knowledge, as the results can be just as deadly.

When a data recovery company receives your drive, if it is possible and the drive is operational, a copy of your data is made sector by sector onto another drive (make image of your DATA) so that your data is not harmed in any way. This prevents mistakes, and allows the engineer to run utilities and make changes to a copy of your drive only and not the original.

Hard drives these days are worse than ever. You may find this a surprising statement, but it is true. Due to slimmer margins, and high competition, manufacturers are making drives as inexpensively as possible and more failures are the result. As of this moment, Fujitsu has top marks for reliability in desktop hard drives followed by IBM. In notebook drives, IBM and Toshiba have top billing. An important point to note is that Hitachi makes the absolute worst notebook drives in the industry with the highest catastrophic failure rate followed by Fujitsu. Dell has just decided to go exclusively with Hitachi now in their new notebooks, so beware!

Here is my old standby: Make believe that tomorrow when you turn your computer on that it is not going to work, and what is it that you want today that you will have to do without tomorrow! Back it up!

Read More

WD Hard Drive Interface Guide For Compatible Cable Connections Part I

Which internal drive is the right choice: SATA or EIDE?

First, look at the connections on your computer.

SATA

Serial ATA (SATA) hard drives are quickly becoming the new standard in hard drive technology. Motherboard manufacturers now include SATA inputs on their boards. Because of their considerably narrower cables, SATA hard drives provide increased airflow and less clutter and in the computer system compared to EIDE drives. Some older computer system motherboards don’t have SATA ports, but a PCI SATA controller card can be installed to add support for SATA drives. If you don’t know whether your computer has SATA ports on the motherboard, refer to your computer or motherboard documentation or contact the motherboard manufacturer.

EIDE

Enhanced integrated drive electronics (EIDE), also called Parallel ATA (PATA), hard drives have been the standard in the computer industry for more than 10 years. Some newer computer system motherboards don’t have EIDE ports, but a PCI EIDE controller card can be installed to add support for EIDE drives. If you don’t know whether your computer has EIDE ports on the motherboard, refer to your computer or motherboard documentation or contact the motherboard manufacturer.

image

FeatureWD SATA Hard DrivesWD EIDE Hard Drives
Maximum data transfer rate150 MB/s or 300 MB/s100 MB/s
Devices per cableOneTwo
Jumper block8-pin (no Master/Slave settings)10-pin (single, Master, Slave, and cable select (CSEL) settings)

Which internal drive is compatible with my operating system: SATA or EIDE?

Your operating system, as well as your hardware, must support the hard drive you choose:

Operating SystemWD SATA Hard Drive CompatibilityWD EIDE Hard Drive Compatibility
Windows® Vista™YesYes
Windows® 2000 or XPYesYes
Windows 98SE or MENoYes
Mac® OS XYesYes
Mac OS 9.xNoYes

Note: Compatibility may vary depending on user’s hardware configuration and operating system.

Read More