|
![]() |
|||
|
||||
OverviewIn the second edition of this very successful book, Tony Sammes and Brian Jenkinson show how information held in computer systems can be recovered and how it may be deliberately hidden or subverted for criminal purposes. ""Forensic Computing: A Practitioner's Guide"" is illustrated by plenty of case studies and worked examples, and will help practitioners and students gain a clear understanding of: - how to recover information from computer systems in such a way as to ensure that its integrity cannot be challenged and that it will be accepted as admissible evidence in court the principles involved in password protection and data encryption - the evaluation procedures used in circumventing these safeguards - the particular legal issues associated with computer-generated evidence and how to ensure admissibility of such evidence. This edition is fully expanded and updated with treatment of metadata files, NFTS systems, CHS and LBA addressing, and alternate data streams. Full Product DetailsAuthor: Anthony Sammes , Brian JenkinsonPublisher: Springer London Ltd Imprint: Springer London Ltd Edition: Softcover reprint of hardcover 2nd ed. 2007 Dimensions: Width: 15.50cm , Height: 2.40cm , Length: 23.50cm Weight: 0.724kg ISBN: 9781849965965ISBN 10: 184996596 Pages: 470 Publication Date: 13 October 2010 Audience: Professional and scholarly , Professional & Vocational Format: Paperback Publisher's Status: Active Availability: Manufactured on demand ![]() We will order this item for you from a manufactured on demand supplier. Table of ContentsForensic Computing.- Understanding Information.- IT Systems Concepts.- PC Hardware and Inside the Box.- Disk Geometry.- The New Technology File System.- The Treatment of PCs.- The Treatment of Electronic Organisers.- Looking ahead (just a little bit more).- Appendices: Common Character Codes; Some Common File Format Signatures; A Typical Set of POST Codes; Typical BIOS Beep Codes and Error Messages; Disk Partition Table Types; Extended Partitions; Registers and Order Code for the INtel 8086; NFTS Boot Sector and BIOS Parameter Block; MFT Header and Attribute Maps; The Relationship between CHS and LBA Addressing; Alternate Data Streams - a Brief Explanation.ReviewsFrom the reviews of the second edition: This book was the product of an 'arms race,. ... It is now listed as the standard text around which all the Forensic Computing courses at Cranfield and some other universities are based. ... It is filled with good practical advice and is especially good on interpreting partition tables. ... All in all this is a useful ... guide to the discipline. ... Truly the forensic computing expert is living in interesting times. (Alikelman, June, 2009) From the reviews of the second edition: This book was the product of an 'arms race'. ! It is now listed as the standard text around which all the Forensic Computing courses at Cranfield and some other universities are based. ! It is filled with good practical advice and is especially good on interpreting partition tables. ! All in all this is a useful ! guide to the discipline. ! Truly the forensic computing expert is living in interesting times. (Alikelman, June, 2009) Author InformationUntil 1984, Professor A. J. Sammes was a serving British Army Officer with the rank of Colonel, late of the Royal Corps of Signals. His present appointment is Professor of Computing Science, in the Faculty of Military Science, Technology and Management at the Defense Academy, Cranfield University, Shrivenham. His formal qualifications include a Bachelor of Science in Electrical Engineering, a Master of Philosophy in Computer Science and a Doctor of Philosophy in Computer Science, all degrees having been awarded by the University of London. He is also a Fellow of the British Computer Society and a Chartered Engineer. His department has been more or less solely responsible for training senior police officers in the UK in the art of forensic computing. His testimony as an expert witness has been called in countless cases, of some of great national importance. Tab Content 6Author Website:Countries AvailableAll regions |