Lawal, Damola (2023) Are we preparing our students for real-world digital forensics? [Video]

Video (MP4) (Presentation at a British Computer Society (BCS) Webinar) watch_v=WuceS5aQtrA - Presentation Download (731kB)

Abstract

The teaching of digital forensics must be restricted, by its very nature, as we can not teach students everything. There is a new threat to best practice that we have encountered in our research, which could lead to a miscarriage of justice, where an innocent person is falsely accused of a crime. In our research, we have found that hardware devices, such as the Rubber Ducky, Bash Bunny and the O.MG cable can be used to commit or facilitate a crime. These devices leave very little forensics evidence on the target device, other than showing that a file was accessed or that an illegal picture was downloaded and viewed.
The user of the victim's machine could easily be wrongly accused of a crime that they know nothing about, and they will not easily be able to prove their innocence. Forensics investigators might look no further than the access times of the file that was altered or the picture that was downloaded and viewed and would not even look for clues that might point to a hardware attack. This presentation highlights the difficulties of proving that a hardware attack even took place and shows the lack of awareness amongst digital forensics investigators to this possibility.

Item Type:	Video
Uncontrolled Keywords:	hardware attacks; teaching digital forensics; cybercrime; cyber enabled fraud;
Subjects:	K Law > K Law (General) Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > Internet of Things and Security Research Centre (ISEC) Faculty of Engineering & Science > School of Computing & Mathematical Sciences (CMS)
Related URLs:	Organisation
Last Modified:	26 Jun 2023 11:16
URI:	http://gala.gre.ac.uk/id/eprint/43048

Actions (login required)

View Item

Downloads