Perth Branch Meeting 11th April
Come hear from Gordon McMeikan and Richard Boddington as they share with us "Para-Forensics Computing: Addressing the Challenges Confronting IT Security Professionals in Digital Evidence Recovery
Para-Forensics Computing: Addressing the Challenges Confronting IT Security Professionals in Digital Evidence Recovery, Preservation & Prognosis
There is an increasing reliance placed on digital evidence in criminal, civil legal process and personnel misconduct cases and a demand for early response digital forensics and security management skills in a broad range of government and business organisations. The increasing case load placed on these units has forced case prioritisation (triage) resulting in increasingly slow response and clear up rates for their clients. Private organisations often rely on law enforcement units to recover digital evidence and subject to the units’ workload and case prioritisation regime. An alternative is to seek the assistance of public digital forensics specialists to recover and examine data for later submission to law enforcement for formal examination. However, these services may be beyond the financial means of smaller businesses and are usually expensive.
It is IT administrators and IT security professionals who first become involved in the recovery of electronic data. With sometimes little skill, experience and guidelines to assist these personnel, the process of evidence recovery may lead to evidence loss or contamination affecting its later use in legal proceedings.
This month’s presentation is based on Gordon McMeikan and Richard Boddington’s academic research and case work and highlights deficiencies in evidence recovery. It also aims to give understanding of basic evidence recovery and conventions needed to develop competency and confidence as first respondents during incidents. Gordon and Richard will discuss:
- The problem of present inefficiencies and delays in recovering digital evidence
- A range of criminal and civil case studies to highlight these deficiencies and their consequences.
- Offer alternative approaches to enhancing an organisational understanding and empowerment of IT security professional as para-forensic respondents.
Speaker: Gordon McMeikan has a Defence intelligence background with 17 years in the RAAF and 11 years with the Defence Signals Directorate (now Australian Signals Directorate) undertaking analysis, reporting and training of all forms of telecommunications and electronic systems. This was followed by five years with the Corruption and Crime Commission of WA where he managed their telecommunications collection systems. Gordon is now the Principal and Owner Manager of Media Forensics, specialising in providing digital multi-media forensic analysis and expert-witness services. He is also a founding Director of the Digital Forensics Institute.
Speaker: Richard Boddington has a police Special Branch, intelligence and digital forensic background which has reinforced his academic career, having taught digital forensics and information security management at undergraduate and postgraduate levels at Murdoch University and the University of Western Australia. He is an active researcher, reviewer and publisher of academic papers relating to the digital forensics environment. Richard is the Principal and Owner Manager of Forensics Australia providing professional digital forensics services to a broad range of clients and providing expert witness testimony. He is a founding director of the Digital Forensics Institute based in Western Australia.
AISA members: Please sign in to register for this event.
Non AISA members: If you would like to become an AISA member you can join here.
Please note: that the event time might be displaying AEST. The event starts at 5.30pm GMT+8 and finishes at 7.30pm GMT+8.
Many thanks to our sponsors
AISA thanks Thales for sponsoring this meeting
AISA also thanks EY for sponsoring the venue for this meeting
