Categories of the common US laws

• Criminal Law: To protect the public (could be jail time)
• Civil Law: (a.k.a Tort Law) Sorts out disputes (no possible prison)
• Administrative Law: Regulations

• Trade Secret: Like the Coke-Cola recipe (it's a kept secret from the public)
• Copyright: The expression of the idea, though not the idea itself.
• Patents: Protection for the idea (saves people copying your idea)
• Trademark: The look and feel of the company
• Digital Millenium Copyright Act (DMCA): A new property law that protects the copyright of digital source code. When you have a source code then compile it, it's then protected by DMCA

Privacy laws and protection fo personal information
US laws legal system laws

• Privacy Act 1974: Data held on individuals by the government
• Electronic Communication Privacy Act 1986: Protects unauthorised eavesdropping
• HIPPA: Protect electronic data within the health care

• Computer Fraud and abuse act 1986:Deals with computers used by the federal government
• Federal Sentencing Guidelines of 1991: Guidelines for judges to sentence criminals
• Economic Espionage Act of 1996: Defines the efforts around espionage
• US Child Pornography Prevention Act of 1996:
• US Patriot Act of 2001: Related to computer crime laws

• Software Protection Association (SPA): Software vendors working together
• Business Software Alliance (BSA): International group in Washington DC
• Federation Against Software Theft (FAST): International group in London

• Do no harm
• Be a good person
• Be a good CISSP
• Promote the profession

Enticement
Legal attempt to lure a criminal into carrying out a crime (like a carrot on a stick)

Honey Pot: Virtual Machine with noticeable vulnerabilities
Pseudo flaw: Deliberate loopholes in the OS
Honey Pot: A virtual computer that looks vulnerable. Often resides within the Padded Call
Padded Cell: Virtual machine used to confine intruders without them knowing it

Type of attacks

This consolidated team that will recognise and deal with attacks

• 1x Senior Management
• 1x Network Administrator
• 1x Programmer
• 1x Security Officer
• 1x HR representative

• Discovery: Stop the bleeding
• Protection: Protect the crime scene
• Recording: Record the evidence by taking photos, taking a copy of the HDD etc
• Analysis: Electronic format should be @ the bit level and duplicated to be analysed
• Storage, preservation and transport it to the lab: Ensure the integrity (chain of custody) - Each and every time someone touches it, it should be recorded
• Present in Court:
• Return to owner:

Hidden Files: <-- 'H' attribute so it doesn't show in the directory
Streams:
Deleted Files: Isn't actually removed, it's only removed from the table contents (the file name and which partition). Replaces the 1st character of the file is changed to a '?' to show it's deleted
Slack Space: leftover of the a cluster
Malware:
Extract data from the swap file in windows:

• Motive: why would someone want to do this crime
• Opportunity: The opportunity to commit the crime
• Means : Was the person capable?

• Real: Physical Evidence (knife, hard drive, DVD's etc)
• Heresy: Like Real through copies of it
• Secondary: Like Heresy evidence though cannot be used as best evidence
• Circumstantial: Indirect proof (someone seeing someone else run seconds after an incident
• Corroborate: Not evidence at all, only supports circumstantial evidence

Enticement
Legal attempt to lure a criminal into carrying out a crime (like a carrot hanging over a hole)

Honey Pot: Virtual Machine with noticeable vulnerabilities
Pseudo flaw: Deliberate loopholes in the OS
Honey Pot: Resides within the Padded Call
Padded Cell: Virtual machine used to confine intruders without them knowing it

Hidden Secrets: How to hide data

Hidden Files: <-- 'H' attribute so it doesn't show in the directory
Streams:
Deleted Files: Isn't actually removed, it's only removed from the table contents (the file name and which partition). Replaces the 1st character of the file is changed to a '?' to show it's deleted
Slack Space: leftover of the a cluster
Malware:
Extract data from the swap file in windows:

About the author