Investigations Involving the Internet and Computer Networks

[Pages:137]JAN. 07

U.S. Department of Justice Office of Justice Programs National Institute of Justice

Special REPORT

Investigations Involving the Internet and Computer Networks

ojp.nij

U.S. Department of Justice Office of Justice Programs 810 Seventh Street N.W. Washington, DC 20531

Alberto R. Gonzales Attorney General Regina B. Schofield Assistant Attorney General David W. Hagy Deputy Assistant Attorney General, Office of Justice Programs and Principal Deputy Director, National Institute of Justice

This and other publications and products of the National Institute of Justice can be found at:

National Institute of Justice ojp.nij

Office of Justice Programs Partnerships for Safer Communities ojp.

JAN. 07

Investigations Involving the Internet and Computer Networks

NCJ 210798

David W. Hagy Deputy Assistant Attorney General,

Office of Justice Programs and Principal Deputy Director,

National Institute of Justice

This document is not intended to create, does not create, and may not be relied upon to create any rights, substantive or procedural, enforceable by law by any party in any matter civil or criminal. Opinions or points of view expressed in this document represent a consensus of the authors and do not necessarily reflect the official position or policies of the U.S. Department of Justice. The products, manufacturers, and organizations discussed in this document are presented for informational purposes only and do not constitute product approval or endorsement by the U.S. Department of Justice. This document was prepared under Interagency Agreement #2003?IJ?R?029 between the National Institute of Justice and the National Institute of Standards and Technology, Office of Law Enforcement Standards. The National Institute of Justice is a component of the Office of Justice Programs, which also includes the Bureau of Justice Assistance, the Bureau of Justice Statistics, the Office of Juvenile Justice and Delinquency Prevention, and the Office for Victims of Crime.

Photo Credits Cover: Getty Images and Photodisc Text: Photodisc, Getty Images, and Digital Stock

Foreword

As the use of the Internet and other computer networks has grown rapidly in recent years, so has the opportunity for electronic crime. Unlawful activity can be committed or facilitated online. Criminals can trade and share information, mask their identity, identify and gather information on victims, and communicate with co-conspirators. Web sites, electronic mail, chat rooms, and file sharing networks can all yield evidence in an investigation of computer-related crime.

This report was developed by the Technical Working Group for the Investigation of High Technology Crimes and is intended to be a resource for individuals responsible for investigations involving the Internet and other computer networks. It is one of a series of electronic crime investiga tion documents already published or in development by the National Institute of Justice (NIJ). The guides are developed by technical working groups that consist of practitioners and subject matter experts brought together by NIJ to help law enforcement agencies and prosecutors deal with the growing volume and com plexity of electronic crime.

The series of guides will discuss the inves tigation process from the first responder, to the laboratory, to the courtroom. Specifically, the guides will address:

Electronic crime scene investigation by first responders.

Forensic examination of digital evidence.

Internet and network investigations.

Investigative uses of technology.

Courtroom presentation of digital evidence.

Development of a digital evidence forensic unit.

The recommendations presented in this guide are not mandates or policy directives and may not represent the only correct course of action. The guide is intended to be a resource for those who investigate crimes related to the Internet and other computer networks. It does not discuss all of the issues that may arise in these investigations and does not attempt to cover traditional investigative procedures.

NIJ extends its appreciation to the mem bers of the Technical Working Group for the Investigation of High Technology Crimes for their involvement. We commend them for the long hours of work required to prepare this report and recognize that they did this while still performing their existing duties with their home offices or agencies. Their commitment of time and expertise was invaluable to the success of the project.

David W. Hagy Deputy Assistant Attorney General,

Office of Justice Programs and

Principal Deputy Director,

National Institute of Justice

iii

Technical Working Group for the Investigation of High Technology Crimes

Planning panel

Carleton Bryant Staff Attorney Knox County Sheriff's Office Knoxville, Tennessee

John Davis Operations Manager Colorado Regional Computer Forensics

Laboratory Lone Tree, Colorado

Toby Finnie Director High Tech Crime Consortium Tacoma, Washington

Alex Graves Program Specialist Federal Law Enforcement Training Center Brunswick, Georgia

Patrick Hogan Special Agent Investigator/DE Examiner USSS Electronic Crimes Section Washington, D.C.

Michael J. Menz HP-IT Security Investigator Detective Sacramento High Technology Crimes

Task Force Sacramento, California

Sean P. Morgan White Collar Crime Program Manager American Prosecutors Research Institute Alexandria, Virginia

Cynthia Murphy Detective Madison Police Department Madison, Wisconsin

Tom Sadaka Of Counsel Berger Singerman Attorneys at Law Ft. Lauderdale, Florida

Raemarie Schmidt Vice President Digital Intelligence, Inc. Waukesha, Wisconsin

Todd Shipley Director, Systems Security and High Tech

Crime Prevention Training SEARCH Group, Inc. Sacramento, California

Chris Stippich President Digital Intelligence, Inc. Waukesha, Wisconsin

Technical Working Group members

Walter E. Bruehs Forensics Examiner Forensic Audio, Video and Imaging

Analysis Unit Federal Bureau of Investigation Quantico, Virginia

Tim Dees Regional Training Coordinator Oregon Department of Public Safety

Standards and Training Kennewick, Washington

Michael W. Finnie Senior Computer Forensic Specialist Computer Forensics, Inc. Seattle, Washington

v

Carlton Fitzpatrick Chief, Financial Investigations Branch Federal Law Enforcement Training Center U.S. Department of Homeland Security Glynco, Georgia

Grant Gottfried MITRE McLean, Virginia

Ronald J. Green Senior Vice President Corporate Information Security Bank of America Charlotte, North Carolina

Gerald Griffin Director Forensic and Technical Services U.S. Postal Inspection Service U.S. Postal Service Dulles, Virginia

William Harrod Director, Investigative Response TruSecure Herndon, Virginia

Dave Heslep Sergeant Maryland State Police Technical Investigation Division Columbia, Maryland

Darrell Johnson Captain Knox County Sheriff's Office Knoxville, Tennessee

Kevin Manson Coordinator Internet Investigations Training Programs Financial Fraud Institute Federal Law Enforcement Training Center Glynco, Georgia

Michael McCartney Special Investigator New York State Attorney General's Office Buffalo, New York

Bill Moylan Detective Nassau County Police Department Westbury, New York

Thomas Musheno Forensic Examiner Forensic Audio, Video and Image Analysis Federal Bureau of Investigation Engineering Research Facility Quantico, Virginia

Tim O'Neill Hewlett-Packard Information Security Roseville, California

Scott R. Patronik Chief, Division of Technology and

Advancement Erie County Sheriff's Office Buffalo, New York

Jim Riccardi, Jr. Electronic Crime Specialist CyberScience Lab National Law Enforcement and

Corrections Technology Center?Northeast Rome, New York

Rebecca Richardson Network Administrator Montana State University?Billings Billings, Montana

Alan Roth Postal Inspector Forensic and Technical Services U.S. Postal Service Dulles, Virginia

Jonathan J. Rusch Special Counsel for Fraud Prevention Criminal Division, Fraud Section U.S. Department of Justice Washington, D.C.

Kim Schaffer New Technologies, Inc. Gresham, Oregon

vi

Michael Schirling Lieutenant Burlington Police Vermont Internet Crimes Task Force Burlington, Vermont

Greg Schmidt Computer Forensics Frisco, Texas

Howard Schmidt Chief Security Officer Ebay, Inc. Campbell, California

Russ Skinner Sergeant Maricopa County Sheriff's Office Computer Crimes Division Phoenix, Arizona

Fred Smith Assistant United States Attorney Albuquerque, New Mexico

Mike Weil Huron Consulting Group Chicago, Illinois

Craig Wilson Detective Sergeant Kent Police Computer Crime Unit United Kingdom

Facilitators

Susan Ballou Program Manager for Forensic Sciences Office of Law Enforcement Standards National Institute of Standards and

Technology Gaithersburg, Maryland

Anjali R. Swienton President & CEO SciLawForensics, Ltd. Germantown, Maryland

vii

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download