How reliable are current forensic processes in combating the illegal use of portable programmable devices?
Watch the video
Synopsis
The teaching of digital forensics must be restricted, by its very nature, as we can not teach students everything. There is a new threat to best practice that we have encountered in our research, which could lead to a miscarriage of justice, where an innocent person is falsely accused of a crime. In our research, we have found that hardware devices, such as the Rubber Ducky, Bash Bunny and the O.MG cable can be used to commit or facilitate a crime. These devices leave very little forensics evidence on the target device, other than showing that a file was accessed or that an illegal picture was downloaded and viewed.
The user of the victim's machine could easily be wrongly accused of a crime that they know nothing about, and they will not easily be able to prove their innocence. Forensics investigators might look no further than the access times of the file that was altered or the picture that was downloaded and viewed and would not even look for clues that might point to a hardware attack. This presentation highlights the difficulties of proving that a hardware attack even took place and shows the lack of awareness amongst digital forensics investigators to this possibility.
About the speaker
Damola Lawal
Damola is a Digital Forensics & Law Researcher at the University of Greenwich working with Dr. David Gresty and Dr. Diane Gan on research into hardware attacks to prevent miscarriages of justice. He runs seminars for a wide range of undergraduate and postgraduate students within the digital forensics portfolio on this topic.
Damola is active in teaching, as well as consultancy and training within the wider community. Damola holds a Masters in Computer Forensics and Cybersecurity, and different industry certifications such as the EC-Council CEH, CISSP (Associate), BCS CISMP and Cisco networking & security certifications. He is also a member of the ISC.
Our events are for adults aged 16 years and over.
BCS is a membership organisation. If you enjoy this event, please consider joining BCS. You’ll receive access to many exclusive career development tools, an introduction to a thriving professional community and also help us Make IT Good For Society. Join BCS today.
This event is brought to you by: BCS Cybercrime Forensics specialist group, BCS Hampshire branch and BCS Dorset branch
