Advances in Digital Forensics

IFIP International Conference on Digital Forensics, National Center for Forensic Science, Orlando, Florida, February 13–16, 2005

  • Mark Pollitt
  • Sujeet Shenoi
Conference proceedings DigitalForensics 2005

Part of the IFIP — The International Federation for Information Processing book series (IFIPAICT, volume 194)

Table of contents

  1. Front Matter
    Pages i-xviii
  2. Themes and Issues

    1. Front Matter
      Pages 1-1
    2. Mark Davis, Gavin Manes, Sujeet Shenoi
      Pages 33-42
    3. Matthew Meyers, Marcus Rogers
      Pages 43-50
    4. Michael Losavio
      Pages 51-63
  3. Investigative Techniques

    1. Front Matter
      Pages 65-65
    2. Michael Hoeschele, Marcus Rogers
      Pages 67-77
    3. Anthony Persaud, Yong Guan
      Pages 79-90
    4. Thomas Duval, Bernard Jouga, Laurent Roger
      Pages 91-104
    5. R. Laubscher, D. Rabe, M. Olivier, J. Eloff, H. Venter
      Pages 105-112
    6. B. Fei, J. Eloff, H. Venter, M. Olivier
      Pages 113-123
  4. Network Forensics

    1. Front Matter
      Pages 125-125
    2. Kulesh Shanmugasundaram, Hervé Brönnimann, Nasir Memon
      Pages 127-140
    3. P. Kahai, M. Srinivasan, K. Namuduri, R. Pendse
      Pages 153-164
    4. Eunjong Kim, Dan Massey, Indrajit Ray
      Pages 165-176
    5. T. Moore, A. Meehan, G. Manes, S. Shenoi
      Pages 177-188
  5. Portable Electronic Device Forensics

    1. Front Matter
      Pages 189-189
    2. Christopher Swenson, Gavin Manes, Sujeet Shenoi
      Pages 205-216
    3. P. Gershteyn, M. Davis, G. Manes, S. Shenoi
      Pages 217-230
  6. Linux and File System Forensics

    1. Front Matter
      Pages 231-231
    2. Philip Craiger
      Pages 233-244
    3. S. Piper, M. Davis, G. Manes, S. Shenoi
      Pages 245-256
  7. Applications and Techniques

    1. Front Matter
      Pages 257-257
    2. Gilbert Peterson
      Pages 259-270
    3. Y. Chen, V. Roussev, G. Richard III, Y. Gao
      Pages 271-282
    4. L. Peng, T. Wingfield, D. Wijesekera, E. Prye, R. Jackson, J. Michael
      Pages 283-294
    5. Jill Slay, Kris Jorgensen
      Pages 295-301
    6. Yusuf Motara, Barry Irwin
      Pages 303-313

About these proceedings



Edited by: Mark Pollitt and Sujeet Shenoi

Digital forensics deals with the acquisition, preservation, examination, analysis and presentation of electronic evidence. Networked computing, wireless communications and portable electronic devices have expanded the role of digital forensics beyond traditional computer crime investigations. Practically every crime now involves some aspect of digital evidence; digital forensics provides the techniques and tools to articulate this evidence. Digital forensics also has myriad intelligence applications. Furthermore, it has a vital role in information assurance – investigations of security breaches yield valuable information that can be used to design more secure systems.

Advances in Digital Forensics describes original research results and innovative applications in the emerging discipline of digital forensics. In addition, it highlights some of the major technical and legal issues related to digital evidence and electronic crime investigations. The areas of coverage include:

  • Themes and Issues in Digital Forensics
  • Investigative Techniques
  • Network Forensics
  • Portable Electronic Device Forensics
  • Linux and File System Forensics
  • Applications and Techniques

This book is the first volume of a new series produced by the International Federation for Information Processing (IFIP) Working Group 11.9 on Digital Forensics, an international community of scientists, engineers and practitioners dedicated to advancing the state of the art of research and practice in digital forensics. The book contains a selection of twenty-five edited papers from the First Annual IFIP WG 11.9 Conference on Digital Forensics, held at the National Center for Forensic Science, Orlando, Florida, USA in February 2005.

Advances in Digital Forensics is an important resource for researchers, faculty members and graduate students, as well as for practitioners and individuals engaged in research and development efforts for the law enforcement and intelligence communities.

Mark Pollitt is President of Digital Evidence Professional Services, Inc., Ellicott City, Maryland, USA. Mr. Pollitt, who is retired from the Federal Bureau of Investigation (FBI), served as the Chief of the FBI's Computer Analysis Response Team, and Director of the Regional Computer Forensic Laboratory National Program.

Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a principal with the Center for Information Security at the University of Tulsa, Tulsa, Oklahoma, USA.

For more information about the 300 other books in the IFIP series, please visit

For more information about IFIP, please visit


Internet Linux communication computer crime data security information privacy security social engineering tools

Editors and affiliations

  • Mark Pollitt
    • 1
  • Sujeet Shenoi
    • 2
  1. 1.Digital Evidence Professional ServicesEllicott CityUSA
  2. 2.University of TulsaTulsaUSA

Bibliographic information