<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/' xmlns:blogger='http://schemas.google.com/blogger/2008' xmlns:georss='http://www.georss.org/georss' xmlns:gd="http://schemas.google.com/g/2005" xmlns:thr='http://purl.org/syndication/thread/1.0'><id>tag:blogger.com,1999:blog-6601527308758915638</id><updated>2024-08-29T12:41:01.862+01:00</updated><category term="digital forensics"/><category term="incident response"/><category term="secureworld expo"/><category term="trends"/><title type='text'>Ray on...</title><subtitle type='html'></subtitle><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://raystrubinger.blogspot.com/feeds/posts/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6601527308758915638/posts/default?redirect=false'/><link rel='alternate' type='text/html' href='http://raystrubinger.blogspot.com/'/><link rel='hub' href='http://pubsubhubbub.appspot.com/'/><author><name>Unknown</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='https://img1.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>1</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-6601527308758915638.post-1191984809636797211</id><published>2011-05-07T03:01:00.005+01:00</published><updated>2011-05-10T02:38:00.952+01:00</updated><category scheme="http://www.blogger.com/atom/ns#" term="digital forensics"/><category scheme="http://www.blogger.com/atom/ns#" term="incident response"/><category scheme="http://www.blogger.com/atom/ns#" term="secureworld expo"/><category scheme="http://www.blogger.com/atom/ns#" term="trends"/><title type='text'>Trends &amp; Challenges in Incident Response and Digital Forensics</title><content type='html'>Several months ago, a colleague suggested that I develop a presentation about the challenges facing the field of digital forensics.&amp;nbsp; After some discussion and an informal poll among several information security practitioners I developed the topic and delivered it on May 3rd at the &lt;a href=&quot;http://www.secureworldexpo.com/events/conference-details.php?cid=3595&quot;&gt;SecureWorld Expo&lt;/a&gt; in Atlanta. &amp;nbsp;The presentation titled &quot;&lt;a href=&quot;http://www.scribd.com/full/55043235?access_key=key-1j5weidzu763noog5s0k&quot;&gt;Trends in Incident Response and Digital Forensics&lt;/a&gt;&quot;&amp;nbsp;is available as a PDF.&lt;br /&gt;
&lt;br /&gt;
The presentation included audience participation and covered topics such as:&amp;nbsp; cloud computing, imaging and analyzing RAM, storage challenges, encryption, mobile devices, and the &quot;CSI effect.&quot;&amp;nbsp; Due to time constraints, there were a number of topics that were not covered in the presentation so they have been listed here in no particular order.&lt;br /&gt;
&lt;ul&gt;&lt;li&gt;Hybrid challenges&lt;/li&gt;
&lt;ul&gt;&lt;li&gt;Mobile devices that use Internet (cloud based) storage&lt;/li&gt;
&lt;li&gt;High capacity hard drives and data hoarding &lt;/li&gt;
&lt;/ul&gt;&lt;li&gt;Social Networking&lt;/li&gt;
&lt;ul&gt;&lt;li&gt;FaceBook, FourSquare, MySpace, Twitter, etc &lt;/li&gt;
&lt;/ul&gt;&lt;li&gt;Cache-less web browsing&lt;/li&gt;
&lt;li&gt;The law (or lack thereof)&lt;/li&gt;
&lt;li&gt;Encryption&lt;/li&gt;
&lt;ul&gt;&lt;li&gt;Full or Whole Disk Encryption&lt;/li&gt;
&lt;li&gt;Inexpensive and readily available encryption applications&lt;/li&gt;
&lt;/ul&gt;&lt;li&gt;Cloud technologies&lt;/li&gt;
&lt;li&gt;Storage&lt;/li&gt;
&lt;ul&gt;&lt;li&gt;Solid State Drives&lt;/li&gt;
&lt;li&gt;Storage Area Networks&lt;/li&gt;
&lt;li&gt;Network Attached Storage&lt;/li&gt;
&lt;li&gt;Extremely large RAID arrays&lt;/li&gt;
&lt;li&gt;Inexpensive high capacity storage&lt;/li&gt;
&lt;/ul&gt;&lt;li&gt;Mobile devices (smart phones, cell phones, and tablets)&lt;/li&gt;
&lt;li&gt;Photocopiers &amp;amp; printers&lt;/li&gt;
&lt;li&gt;Entertainment devices such as televisions and game consoles&lt;/li&gt;
&lt;li&gt;Massive volumes of data&lt;/li&gt;
&lt;li&gt;GPS units&lt;/li&gt;
&lt;/ul&gt;Feel free to comment if you have a suggestion to include on the list. &amp;nbsp;Future posts will address potential solutions to some of the topics listed above.&lt;br /&gt;
&lt;ul&gt;&lt;/ul&gt;</content><link rel='replies' type='application/atom+xml' href='http://raystrubinger.blogspot.com/feeds/1191984809636797211/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://raystrubinger.blogspot.com/2011/05/trends-challenges-in-incident-response.html#comment-form' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6601527308758915638/posts/default/1191984809636797211'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6601527308758915638/posts/default/1191984809636797211'/><link rel='alternate' type='text/html' href='http://raystrubinger.blogspot.com/2011/05/trends-challenges-in-incident-response.html' title='Trends &amp; Challenges in Incident Response and Digital Forensics'/><author><name>Unknown</name><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='https://img1.blogblog.com/img/b16-rounded.gif'/></author><thr:total>0</thr:total></entry></feed>