Cyber Forensics – Fighting Cybercrime with Digital Evidence

With the rise of cybercrime comes the need for cyber forensics, and this episode’s guest, Dr. LeGrande Gardner has been in the field of digital evidence for more than 30 years. Currently, he is an instructor in the Criminology Department at the University of South Florida, where he also serves as the Director of the MS in Cybercrime degree program and administrates the Graduate Certificate Program in Digital Forensics.  Co-hosts Bill McQueen and Ernie Ferraresso joined Dr. Gardner for a discussion about digital evidence, its role in the justice community, and opportunities for the future. The field of cyber forensics started rather simply, as a way to detect and connect the pieces of a crime.  As evidence was being submitted into the justice system, a need for increased scientific methodologies and protocols grew to preserve legal integrity and the rights of the accused.  Cyber forensic professionals are able to examine a range of devices, networks--even the cloud--to uncover criminal activity and gather evidence that can lead to legal prosecution. Dr. Gardner discusses how advances in computer science have made an impact in the ability to locate criminals. In his first example, he shares how hash algorithms are used to catch pedophiles and provide a digital footprint to catch larger pedophile rings. Next, he details the Target breach, where criminals were able to hack the nationwide retailer via their air conditioning’s computerized system. Then, he talks about how search warrants involving cybercrime uncovered how criminals were using their neighbor’s open IP addresses, putting routers unknowingly in their attics, and other deviousness that thwarted detection and capture. Unfortunately, Dr. Gardner reveals, international criminals are even more elusive, but that having solid cyber forensics can help law enforcement agencies from multiple countries coordinate efforts.Cyber forensics now has several sub-specialties, such as cloud forensics, network forensics, malware forensics, IoT forensics, and vehicle forensics.  Many colleges and universities are developing programs and training around these expanding and evolving sub-specialties. Dr. Gardner points out that this is a great time to be a cybercriminal and there will be an increased need for cyber forensic technicians and digital evidence specialists to combat the widespread crime.  There is a push for law enforcement officers to receive training in cyber forensics to facilitate crime scene collections, recognize patterns, and maintain protocols.  Dr. Gardner’s history in law enforcement and as a Task Force Agent with the FBI’s Cyber Crime Unit gave him a special insight to device and data collection at crime scenes and he shares his thoughts on training opportunities in police academies.  Hackers and cyber criminals aren’t the only reasons the field of cyber forensics is growing.  Corporations are also employing their own forensic teams. Companies use digital evidence to substantiate their security and to protect themselves if a situation with an employee requires documentation.  Civil matters are increasingly including digital evidence, and professionals are being called upon to provide expert testimony.The need for cyber forensics professionals is growing exponentially, according to Dr. Gardner. There is no end in sight for the potential of this field and the importance it will play in protecting our security and stopping crime.TIME STAMPS00:43  Meet Our New Co-host: Ernie Ferraresso, Associate Program Director of Cyber Florida02:43 Who is Dr. LeGrande Gardner, Director of the MS in Cybercrime Degree Program, University of South Florida03:15  What is Cyber Forensics and Digital Evidence?04:47  Recognizing the field of Cyber Forensics05:59  Following the Rules of Evidence and Procedure06:33  The Growing Impact of Digital Evidence and Digital Exploitation  07:35  Evolving Field of Cyber Forensic Careers08:58  Collecting Cyber Forensic Data  09:51  Digital Evidence as a Science12:52 Components of Digital Evidence13:45 Hash Algorithms, Digital DNA14:25 Child Pornography Hash Algorithms14:55  Hash Algorithms are like Fingerprints  16:37  Verifying and Preserving Digital Evidence Using Scientific Protocols18:29  Training to be a Cyber Forensic Technician or Specialists21:34  Specialized Cyber Forensic Fields24:01 Criminals, Digital Evidence & Law Enforcement26:30 Training Law Enforcement for Digital Evidence Collection28:24 Finding Breaches and Identifying Vulnerabilities31:00 How to Start a Cyber Forensic Investigation31:29 Cyber Forensic Incident Response34:38  Cyber Police of the Future35:35  Trends in Cyber Forensic Prosecutions37:05 International Cyber Criminals and Cyber Forensics38:19 Every Cop as a Cyber Cop38:39 How is Cybercrime Changing  41:26 The Future of the Cyber Forensic Field42:24  Corporate Digital Forensic Units and Civil Courts44:43  Cyber Forensic Academics, Digital Certifications and Careers