Computer Forensics Institute

Starting as a Computer Forensics Professional

I once read in a magazine the the average white-collar criminal(takes customer records and sells them) steals $100,000 and is not likely to be caught. If they are caught they will spend less that 6 months in jail. The average blue-collar criminal(robs a store) steals $25 and on average will spend 5 years in jail. Now is it hard to figure out why computer forensics is so important?
Computer crimes are becoming common today. With the increase in technology and the access to data becoming common place people are being exposed to far more computer crimes. Criminals have found that they can steal more money and information from companies and individuals without even leaving there homes. Computer crimes are now totally more than a billion dollars annually. This is why Computer Forensics is becoming a huge field for people with the right skills.

The Department of Justice Cyber Crime group tracks crimes from all over the world. Here is a snapshot of the cyber crimes reported for October to December 2009 from CyberCrime.gov:

• Major International Hacker Pleads Guilty for Massive Attack on U.S. Retail and Banking Networks (December 29, 2009)

• Trafficking in Counterfeited Merchandise Results in Two Sentences and a Guilty Plea (December 18, 2009)

• New York Man Arrested on Federal Charges of Illegally Distributing Copy of ‘Wolverine’ Movie (December 16, 2009)

• Three Men Indicted for Trafficking in Counterfeit Goods at Grandview Flea Market in Derry, New Hampshire (December 14, 2009)
• Charges Filed in P2P Scheme to Access Bank Accounts and Transfer Fund (December 8, 2009)
• Saline Resident Charged with Stealing Trade Secrets from Quicken Loans, Inc. (December 3, 2009)
• Two Johnson County Men Charged with Trafficking in Counterfeit Computer Hardware (December 3, 2009)
• Former Senior Manager Pleads Guilty to Stealing the Home Depot’s Trade Secrets (December 2, 2009)
• Man Admits Selling $345,000 of Counterfeit Stamps (November 24, 2009)
• Six Individuals Sentenced for Multi-Million Dollar E-Mail Stock Fraud Scheme (November 24, 2009)
• Detroit Spammer and Three Co-Conspirators Sentenced for Multi-Million Dollar E-Mail Stock Fraud Scheme (November 23, 2009)
• California Operations Manager for MVP Micro, Inc. Pleads Guilty in Connection with Sales of Counterfeit High Tech Parts to the U.S. Military: Counterfeit Integrated Circuits Sold to the United States Navy (November 20, 2009)
• Indictment Filed In Comcast Website Redirection Case (November 19, 2009)
• Last Defendant Sentenced in Swatting Conspiracy (November 16, 2009)
• Alleged International Hacking Ring Caught in $9 Million Fraud: Major Credit Card Processor Victimized in Elaborate Theft of Account Numbers (November 10, 2009)
• Two Men Charged with Computer Intrusion (November 4, 2009)
• Cuban Citizen Extradited from Latvia and Arraigned for Allegedly Trafficking Counterfeit Slot Machines and Computer Programs (October 26, 2009)
• Computer Hacker Fugitive Extradited for Cybercrimes Relating to VOIP Telephone Services (October 15, 2009)
• Three California Family Members Indicted in Connection with Sales of Counterfeit High Tech Parts to the U.S. Military (October 9, 2009)
• CBP Officer Charged with Unlawful Access to Government Databases (October 8, 2009)
• One Hundred Linked to International Computer Hacking Ring Charged by United States and Egypt in Operation Phish Phry (October 7, 2009)

Just in this short period of time crimes cover:

• copyright infringements
• stolen trade secrets
• international hackers
• hacking government databases
• counterfeit high technology
• stolen bank accounts
• stolen stamps
• email stock fraud scheme
• spammers
• illegal web site redirection
• credit card theft
• counterfeit slot machines
• VoIP (voice) fraud

This is just a short list of the many crimes that took place using computer over this time period. I’m sure there were many more that were never reported or will not be discovered for some time.

This is what Computer Forensics Professionals work on every day.

Computer Forensics Overview

To start a computer forensics career, you will need good organization skills, analytic skills, as well as logical problem solving abilities.

You can start with a 2 or 4 year degree in related field like computer analysis, computer science, information systems, computer engineering, electrical engineering or similar technology types of degrees.

Also, you can get a degree in criminal justice, accounting, or law depending on the forensics field you want to work in.

Computer Skills

Computer Forensics professional need to have a broad knowledge of technologies. Computer and problem solving skills are a must. Here is a short list of some of skill areas that you will need:

• operating systems
• computer networks
• computer storage devices
• programming languages
• software applications

In addition, having the expertise in the following areas will help out as you advance in the field of computer forensics:

• Computer Security
• Security Protocols
• Cryptology
• Data Encryption
• File formats
• Networking protocols
• Communication Networking Security
• Computer Forensics Tools like rootkits, port scanners, password crackers
• Crime Investigative Techniques
• Specialized Computer Forensics Software like EnCase, Forensic Toolkit (FTK), RootKits, and many other Forensics software packages.

Criminal Justice Skills

In addition to computer skills you will also need to understand the legal process. You will need to understand:

• search and seizure
• search warrant
• evidence collection
• evidence preservation
• cataloging evidence

Having knowledge of the legal process will be a requirement as you start working in computer forensics so you can keep yourself and your clients or employers out of legal problems.

Is there anything else we should add to this list? Any great insight to share with others thinking of starting as Computer Forensics Professionals?

What is Computer Forensics?

Computer Forensics also know as Digital Forensics is a type of forensics science based on data collection from electronic devices. It is the used to collect evidence about people, places, and things. Computer Forensics has also expanded into data recovery, corporate internal investigations, and many other areas. This field will continue to expand as more devices we use become digital and collect data.

The data collected during computer forensics work can be used for criminal cases in felony cases, divorces, white collar crimes, fraud, embezzlement, and just about any other type of court case. More and more of our world is spent online and all of this data can be collected to build a case when crimes are involved. This is why this field is growing and will continue to add jobs into the future. In addition, as more online services become available the demands to stay current on new technologies will require constant education. The best computer forensics professionals will have a desire to continue to learn new technologies and be open to constant learning. From my perspective this is what makes work interesting and rewarding.

Computer Forensics Knowledge

Computer Forensics requires a broad knowledge of computer systems and computer networks. This can all be learned in instructional training, college courses, or on the job depending on your knowledge and time frames.

Computer Forensics requires knowledge in the following areas:

* Computer Operating Systems
* Computer Communications
* Computer Storage Devices (Disks, CD-ROMs, DVD-ROMs, USB drives, memory sticks, portable storage devices, etc)
* Network Communications

Computer Forensics Cases

This seems like a long list of things to know but really anyone can learn these and learn to become a great Computer Forensics Professional. The most important thing to know is how to be through and complete in your analysis.

These are the types of cases you can expect to work on as a Computer Forensics Professional:

* Malware (malicious code)
* Denial-of-service attacks
* Computer viruses
* Cyber stalking
* Fraud and identity theft
* Phishing scams
* Information warfare
* Credit Card fraud
* Intellectual Property Theft
* Obscene Materials
* Pedophilia
* Terrorism
* Cyber Terrorism
* Hacking (Computer System Intrusion)
* Spam
* Fraud
* Harassment

Computer Forensics Crimes

These activities are generally referred to as computer or cyber-crimes. They can take place from anywhere in the world with the connectedness we have today via wireless technologies and high speed Internet connections. In addition, criminals can band together in teams to perform cyber attacks on individual computers, computer systems, or computer networks.

Computer Forensics Hacking

Computer Forensics Professionals also engage in ethical hacking. This involves breaking into systems to find weaknesses in the systems. Many tools are available for automating the testing process. Computer Forensics professionals will need to stay on top of all computer security alerts to make sure the systems they cover are protected.

Computer Forensics Professionals

Computer Forensics professionals can be employed by Law Enforcement Agencies, Government Agencies, Public Companies, as well as Private Consultants. This provides a lot of flexibility in work locations as well as work structures. This is one of the biggest appeals to this profession. It can be done from almost anywhere.

Is there anything else we should add to this list? What do you think of it for your experiences?