Computer Forensics: Incident Response Essentials
by Warren G. Kruse, Jay G. Heiser

List Price: $54.99
Our Price: $26.90
You Save: $28.09 (51%)
Availability: Usually ships in 1-2 business days
Buy Used: from $6.93 (click here)
Category: Book
See more book details and other editions

Book Summary Information

Book Reviews of Computer Forensics: Incident Response Essentials

Book Review: Computer Forensics
Summary: 4 Stars

Summary of Computer Forensics: Incident Response Essentials

There is little doubt that the authors are serious about cyberinvestigation. They advise companies to "treat every case like it will end up in court," and although this sounds extreme, it is good advice. Upon detecting a malicious attack on a system, many system administrators react instinctively. This often involves fixing the problem with minimal downtime, then providing the necessary incremental security to protect against an identical attack. The authors warn that this approach often contaminates evidence and makes it difficult to track the perpetrator. This book describes how to maximize system uptime while protecting the integrity of the "crime scene."

The bulk of Computer Forensics details the technical skills required to become an effective electronic sleuth, with an emphasis on providing a well-documented basis for a criminal investigation. The key to success is becoming a "white hat" hacker in order to combat the criminal "black hat" hackers. The message is clear: if you're not smart enough to break into someone else's system, you're probably not smart enough to catch someone breaking into your system. In this vein, the authors use a number of technical examples and encourage the readers to develop expertise in Unix/Linux and Windows NT fundamentals. They also provide an overview of a number of third-party tools, many of which can be used for both tracking hackers and to probe your own systems.

The authors explain their investigative techniques via a number of real-world anecdotes. It is striking that many of the same hacks detailed in Cliff Stoll's classic The Cuckoo's Egg are still in use over 10 years later--both on the criminal and investigative fronts. It is up to individual companies whether or not to pursue each attempted security violation as a potential criminal case, but Computer Forensics provides a strong argument to consider doing so. --Pete Ostenson

Topics covered: Overview of computer crime investigative response, including extensive descriptions of hacking techniques. Frequent examples are used to demonstrate how to extract evidence from a violated computer system. Appendices include sample incident-response forms.

Encryption Books

• Computers & Internet > Web Development > Security & Encryption
• Business & Culture > Privacy
• Networking > Network Security
• Networks, Protocols & APIs > General
• Computer Science > Software Engineering > Information Systems
• General
• Nonfiction > Crime & Criminals > Forensic Science