BATTLEFIELD DIGITAL FORENSICS

More documents

Recommendations

Info

12 Biographies Christian Braccini: Christian Braccini is a Lieutenant Colonel of the Italian Army (Signals). He holds a Computer Science Degree and a Master’s in Strategic Science. He has mostly served in combat units, performing several tours of duty. As a researcher at NATO CCD COE, he was involved in establishing the Centre’s digital forensics capability. He has further integrated digital forensics and intelligence in numerous cyber crisis scenarios to support NATO major cyber-defence exercises. Dr. Hayretdin Bahşi: Dr. Hayretdin Bahşi is a senior researcher at the Centre for Digital Forensics and Cyber Security of Tallinn University of Technology. He received his PhD from Sabancı University (Turkey) in 2010. He has been involved in many R&D and consultancy projects about cyber security as a researcher, consultant, trainer, project manager and program coordinator at Informatics and Information Security Research Centre of Scientific and Technological Research Council of Turkey between 2000 and 2014. His research interests include critical information infrastructure security, cyber situational awareness systems and strategic level decisionmaking in cyber security. Agostino Panico: Agostino Panico is a PhD student at the Computer Science Department of University of Rome, La Sapienza. He earned his Master’s Degree in Information Technology at the POLITECNICO of Turin. Before joining La Sapienza as a PhD student he took a Master’s degree at the same University in ‘Governance and Audit of Information Systems’ (2013-2014). He is also an Officer (Lt.) of the Italian Army Technical Corps and a SANS Mentor for the ‘Penetration Testing and Ethical Hacking’ and the ‘Hacker Tools, Techniques, Exploits and Incident Handling’ courses. Panico’s research activity focuses on penetration testing and incident handling on critical infrastructure. Michal Sadloň: Michal Sadloň is working as a researcher for NATO CCD COE in Tallinn, Estonia. He has more than 14 years of experience in information security. Since 2013 he has been focusing on digital forensics research and development. He prepares and conducts courses and workshops in this area. Teemu Väisänen: Teemu Väisänen is working as a Researcher for NATO CCD COE in Tallinn, Estonia, and studying at the University of Oulu, Finland, to graduate as Doctor of Science in Technology. He has more than 11 years of experience of information security research and development. He has been working as a Researcher for the Finnish Defence Forces and for VTT Technical Research Centre of Finland (VTT). In this study, he mainly concentrated on anti-forensics, and provided content for parts handling networking. Mario Huis in ‘t veld: Mario Huis in ‘t veld has been employed since 1978 by the Royal Netherlands Marechaussee, deployed since March 2014 to the NATO Military Police Centre of Excellence (NATO MP COE) in Bydgoszcz Poland. He has more than 37 years of experience in various national and international positions and functions. For the last 15 years he has been working as a team member and/or team leader for crime investigations; co-worker of the National Public Prosecutor for North Sea Affairs; Liaison Officer for the Netherlands Coast Guard; Seconded National Expert to the European Agency for the Management of Operational Cooperation at the External Borders of the Member States of the European Union (FRONTEX) and served in 2013 as a Liaison EUPOL/NTM-A/Afghan Uniformed Police in Kunduz, Afghanistan for the NLD Police Training Mission and policy advisor for the Royal Netherlands Marechaussee Headquarters. Kris van der Meij: Lieutenant Colonel Kris van der Meij is a researcher in the Law and Policy Branch of the NATO CCD COE. He started his military career in the Dutch army as a conscript in 1985. He has served as an Engineer, in the Artillery, the Intelligence Service and as a Signal Officer before he was assigned as a Legal Advisor. He served mostly in operational units and was deployed several times to Afghanistan and Mali. He studied Military Law at the University of Amsterdam. 67
13 Acknowledgements Authors of the study want to express huge gratitude to Patrycjusz Zdzichowski who provided important feedback for anti-forensics and exfiltration solutions. Professor Steven W. Wood, Utica College, and Clinton K. Watson, US Army, gave us precious guidance. 68
Page 1 and 2:
Christian Braccini, Teemu Väisäne
Page 3 and 4:
About the NATO CCD COE The NATO Coo
Page 5 and 6:
Table of Contents About the NATO CC
Page 7 and 8:
Figures Figure 1. The Targeting Cyc
Page 9 and 10:
LED Linux LTE MANET materiel MEDEX
Page 11 and 12:
properly discovered, preserved and
Page 13 and 14:
From a targeting perspective, digit
Page 15 and 16:
. Utilise the existing internet con
Page 17 and 18: Figure 3. A faulty laptop explosive
Page 19 and 20: 5 Onto the Battlefield Christian Br
Page 21 and 22: 6 Computer Forensics Agostino Panic
Page 23 and 24: In a wireless ad-hoc network, all t
Page 25 and 26: However, this solution is impossibl
Page 27 and 28: Connection Backup: The vector shoul
Page 29 and 30: The goal of this statistical approa
Page 31 and 32: 7 Anti-Forensics Measures Teemu Vä
Page 33 and 34: Recommendation: When designing and
Page 35 and 36: As presented by Azadegan, Liu, Sist
Page 37 and 38: Recommendation: Be aware that harml
Page 39 and 40: security for smartphones are descri
Page 41 and 42: If any marks of explosives are dete
Page 43 and 44: 8 Exfiltration Solutions Michal Sad
Page 45 and 46: Portable device found Laptop Type o
Page 47 and 48: As with other portable devices (suc
Page 49 and 50: Devices might be found in different
Page 51 and 52: 4. Remove the drive from the drive
Page 53 and 54: items of the evidence, typically on
Page 55 and 56: 9.1 Surveillance Software Installat
Page 57 and 58: A communication channel to satellit
Page 59 and 60: Figure 21. ABSOLUTE System Architec
Page 61 and 62: 10 Chain of Custody Kris van der Me
Page 63 and 64: police or other official investigat
Page 65 and 66: [15] E. Imsand and J. A. Hamilton,
Page 67: [46] J. M. Kahn, R. H. Katz, and K.
show all

BATTLEFIELD DIGITAL FORENSICS

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?