Issues arising in forensic computer examinations
This presentation is the property of its rightful owner.
Sponsored Links
1 / 27

Issues Arising in Forensic Computer Examinations PowerPoint PPT Presentation


  • 54 Views
  • Uploaded on
  • Presentation posted in: General

Issues Arising in Forensic Computer Examinations. Mike Dickson Forensic Analyst SCDEA e-Crime. Data Capacity. 1 kilobyte = 1000 characters. 1 megabyte = 1 million characters or 500 sheets of paper (about 5 cm tall). 1 gigabyte = 1 billion characters

Download Presentation

Issues Arising in Forensic Computer Examinations

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -

Presentation Transcript


Issues arising in forensic computer examinations

Issues Arising in Forensic Computer Examinations

Mike Dickson

Forensic Analyst

SCDEA e-Crime

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Data Capacity

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

1 kilobyte

= 1000

characters

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

1 megabyte

= 1 million

characters

or 500

sheets of

paper (about

5 cm tall)

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

1 gigabyte = 1 billion characters

or a pile of paper 50 metres tall

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

400 gigabytes is about average

That’s 20km of paper

Or 2 ½ Mount Everests

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

The biggest hard drive

commercially available today is

2 terabytes, or 2 trillion characters

That’s two million packets of A4

paper which would reach….

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

…about 100 kilometers

Approx here to Stirling

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

An average person can read

through about 220 words per

minute…

…which is about a

kilobyte of data

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

So therefore…

Reading two terabytes of data would take the average person

2 x 1000 x 1000 x 1000 minutes

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Also known as 3800 years

The Nordic Bronze age started

3800 years ago

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Hitachi have announced 4Tb drives for 2011

That’s 200km of paper

=

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Analyst and Investigator

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Encryption

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Identifying Devices

NOT PROTECTIVELY MARKED


Usb phone 12gb

USB Phone (12Gb)


Usb watch 2gb

USB Watch (2Gb)


Usb subbuteo 22 32gb

USB Subbuteo (22-32Gb)


Usb rubber duck 2gb

USB Rubber Duck (2Gb)


Usb vibrator 128kb

USB Vibrator (128kb)


Usb teddy bear 4gb

USB Teddy Bear (4Gb)


Usb teddy bear 4gb1

USB Teddy Bear (4Gb)


Bmw m5 8gb

BMW M5 (8Gb)


Virtual computers or the cloud

Virtual Computers or ‘The Cloud’

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

NOT PROTECTIVELY MARKED


Issues arising in forensic computer examinations

Mike Dickson

Forensic Analyst

SCDEA e-Crime

0131-335-6033

[email protected]


  • Login