Software Forensics

Collecting Evidence from the Scene of a Digital Crime

By: Robert Slade

Write A Review

Paperback | 12 January 2004

At a Glance

Paperback
215 Pages

Dimensions(cm)
22.23 x 17.78 x 1.91

Paperback

$91.75

or 4 interest-free payments of $22.94 with

Ships in 5 to 10 business days

Software forensics -- analyzing program code to track, identify, and prosecute computer virus perpetrators -- has emerged as one of the most promising and technically challenging aspects of information management and security.

This is a technical tutorial that thoroughly examines the programming tools, investigative and analysis methods, and legal implications of the complex evidence chain. Also included are eye-opening case studies, including the famous Enron case, and sample code from real criminal investigations.

Written by a security consultant whose clients include the Canadian Government, "Software Forensics covers:
* Basic concepts
* Hackers, crackers, and phreaks
* Objects of analysis: text strings, source code, machine code
* User interfaces and commands
* Program structures and versions
* Virus families
* Function indicators
* Stylistic analysis
* "and much more

There is no better or faster way for programmers, security analysts and consultants, security officers in the enterprise, application developers, lawyers, judges, and anyone else interested in software forensics to get up to speed on forensic programming tools and methods and the nature of cyber evidence.

Industry Reviews

Excerpts from review by David Bianco... ...Robert Slade's reference is an...overview aimed at the beginning practitioner, law enforcement officer and legal professional. Software Forensics standout feature is a categorized list of references, which provides expert guidance and commentary on books, research papers, Web sites and tools that every forensic programmer should be familiar with. ... ...an excellent choice for those...who need to understand digital forensics issues at a nontechnical level. Information Security Magazine 20040701

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

Orders over $89.00 qualify for free shipping.

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Computer Security Data Encryption Computer Viruses Law Laws of Specific Jurisdictions Criminal Law & Procedure

Introduction	p. xi
Introduction to Software Forensics	p. 1
Digital Forensic Definitions	p. 2
Software Forensics	p. 4
Objectives and Objects of Software Forensics	p. 5
Identity	p. 6
Other Objects of Study	p. 11
Software Forensic Tools	p. 12
The Process	p. 12
The Products	p. 14
Finally, Already, the Tools	p. 16
Software Forensic Technologies and Practices	p. 18
Content Analysis	p. 18
Noncontent Analysis	p. 19
Legal Considerations	p. 20
Presentation in Court	p. 21
Summary	p. 21
The Players--Hackers, Crackers, Phreaks, and Other Doodz	p. 23
Terminology	p. 24
Types of Blackhats	p. 26
Motivations and Rationales	p. 29
General Characteristics	p. 35
Blackhat Products	p. 37
Other Products	p. 42
Summary	p. 43
Software Code and Analysis Tools	p. 45
The Programming Process	p. 47
The Products	p. 51
The Resulting Objects	p. 52
The Analytical Tools	p. 53
Forensic Tools	p. 63
Summary	p. 64
Advanced Tools	p. 65
Decompilation	p. 65
Desquirr	p. 67
Dcc	p. 68
Boomerang	p. 68
Plagiarism	p. 68
JPlag	p. 69
YAP	p. 70
Other Approaches	p. 71
Summary	p. 76
Law and Ethics--Software Forensics in Court	p. 77
Legal Systems	p. 77
Differences within Common Law	p. 78
Jurisdiction	p. 79
Evidence	p. 80
Types of Evidence	p. 80
Rules of Evidence	p. 81
Providing Expert Testimony	p. 84
Ethics	p. 87
Disclosure	p. 88
Blackhat Motivations as a Defense	p. 89
Summary	p. 90
Computer Virus and Malware Concepts and Background	p. 91
History of Computer Viruses and Worms	p. 91
Malware Definition and Structure	p. 95
Virus Structure	p. 98
Worm Structure	p. 100
Trojan Structure	p. 101
Logic Bomb Structure	p. 103
Remote Access Trojan (RAT) Structure	p. 103
Distributed Denial of Service (DDoS) Structure	p. 104
Detection and Antidetection Techniques	p. 104
Detection Technologies	p. 106
Stealth and Antidetection Measures	p. 111
Summary	p. 112
Programming Cultures and Indicators	p. 113
User Interface	p. 113
Cultural Features and "Help"	p. 116
Functions	p. 120
Programming Style	p. 122
Program Structure	p. 122
Programmer Skill and Objectives	p. 124
Developmental Strictures	p. 126
Technological Change	p. 127
Summary	p. 127
Stylistic Analysis and Linguistic Forensics	p. 129
Biblical Criticism	p. 130
Shakespeare and Other Literature	p. 131
Individual Identification and Authentication	p. 134
Content Analysis	p. 137
Noncontent Analysis	p. 139
The Content/Noncontent Debate	p. 144
Noncontent Metrics as Evidence of Authorship	p. 145
Additional Indicators	p. 146
Summary	p. 146
Authorship Analysis	p. 147
Problems	p. 147
Plagiarism Detection versus Authorship Analysis	p. 148
How Can It Work?	p. 150
Source Code Indicators	p. 150
More General Indicators	p. 151
Is It Reliable?	p. 152
Summary	p. 153
References and Resources	p. 155
Introduction and Background	p. 156
Blackhats	p. 166
Tools	p. 174
Advanced Tools	p. 190
Law and Ethics	p. 190
Viruses and Malware	p. 196
Stylistic Analysis and Linguistic Forensics	p. 201
Software Authorship Analysis	p. 202
Index	p. 205
Table of Contents provided by Ingram. All Rights Reserved.

Software Forensics

Collecting Evidence from the Scene of a Digital Crime

At a Glance

Paperback

Industry Reviews

Shipping

How to return your order

Defective items

You Can Find This Book In

More in Data Encryption

Unified Framework of Control and Detection

Applications to Fault Diagnosis, Tolerant Control, and Secure CPSs

Computer Security. ESORICS 2025 International Workshops

AutonomousCyber 2025, CPS4CIP 2025, DisA 2025, HS3 2025, MIST 2025, Toulouse, France, September 25â"26, 2025, Revised Selected Papers, Part III

ESG Investment, German Industrie 4.0, and Blockchain

Cryptography and Cybersecurity in the Department of Defence

A Practical Guide to Encryption and National Security

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

Hardware Security

The Practical Guide to Penetration Testing and Prevention

Supremacy

AI, ChatGPT and the Race that Will Change the World

CompTIA PenTest+ Study Guide

Exam PT0-003

Liars and Outliers

Enabling the Trust that Society Needs to Thrive

Security Risk Management Body of Knowledge

Wiley Series in Systems Engineering and Management

Cryptography and Network Security

8th Edition - Principles and Practice, Global Edition

Principles of Information Security

7th edition

Cybersecurity All-in-One For Dummies

For Dummies

CompTIA Security+

8th Edition - Guide to Network Security Fundamentals

Quantum Leaps

How Maths is Shaping the Future

The Art of Invisibility

World's Most Famous Hacker Teaches You How to Be Safe in the Age of Big Brother and Big Data

Building Secure and Reliable Systems

Best Practices for Designing, Implementing, and Maintaining Systems

Black Hat Python, 2nd Edition

Python Programming for Hackers and Pentesters

Rinsed

From Cartels to Crypto: How the Tech Industry Washes Money for the World's Deadliest Crooks

International Conference on Communication Security and Information Processing

CSIP 2024

Beautiful Security

When Science Meets Cybersecurity

Enterprise Security Risk Management (ESRM) in the Real World

A Field Guide for Security Leaders Who Get Things Done

Handbook of Security, Quantum Computing and Internet of Things (IoT)

Cumulative Effect

Cyber Security Guide for Directors and CEOs

This product is categorised by