Sunday, June 29, 2008

Computer Forensics as a hobby?

As I read the different forums covering computer forensics, I am amazed at the number of people who want to get into it "on the side." Perhaps as a hobby or as a little extra pocket money.

This is not a slam on those who actually want to enter the field as a full time career choice. Sadly for the many upcoming graduates of the dozens of computer forensics degree programs that have sprung up like mushrooms in the last five years, the computer forensics field is not an exploding marketplace as many seem to think.

This is a cautionary note to both to the people who want to put their toe in the water and those to whom they will be selling their services.

Perhaps, we as digital forensics professionals should adopt the same motto as doctors; "First, do no harm."

I really hope that people who are attempting to enter this field take a minute and reflect on the responsibility that comes with it.

This isn't fixing your neighbor's computer on the weekend. Or helping out a small business owner with a small local area network, or even sophisticated IT work. Computer Forensics is a science that is used to recover data and then analyze that data in light of a dispute, legal or otherwise.

The technical expertise you have may help somewhat, but it is not going to translate overnight into computer forensics expertise.

You may be working for a spouse in a divorce case, or working for an employer or employee in a termination case. Or perhaps even working on behalf of someone accused of a crime that could result in them going to prison for a very long time if convicted.

When you decide to "dabble" in the field, understand that you are dabbling with people's lives, not just their computers.

The most disturbing aspect of computer forensics is that pretty much anyone can claim to have the ability to perform this service.

With free tools you can download from the Internet, you can perform some forensics functions. However, what you must bear in mind is that the technology of computer forensics, using the tools, understanding the technical challenges, is only one aspect of the service that must be delivered.

Proper chain of evidence, privacy issues, potential court testimony, professional liability and professional ethics are all paramount to working as a forensics scientist in the field of digital forensics.

Thankfully, North Carolina is taking the prudent route and will be requiring digital forensics professionals to meet at least some reasonable minimum qualifications to obtain a state license in the field. I applaud the Private Protective Services Board for taking a fair and responsible view on this issue with protecting the public interest first in mind.

If you are an attorney, company or private individual, I caution you to be very careful in selecting a computer forensics consultant. Understand what it is that they will deliver, what services they will perform and most importantly, what experience and references they have.

Let the buyer beware when contracting for these services.


Saturday, June 28, 2008

NC Jury View

If you have not had a chance to get your hands on a copy of this new magazine, do so. It is excellent. NC Jury View covers trials all the way from beginning to post-trial interviews of the juries and the attorneys involved on both sides.

It is well written, nicely laid out and a great read. You can check it out by following the link on the right side of my blog. Or you can click here.


NC Computer Forensics Licensing

I attended the Computer Forensics Subcommittee meeting of the Private Protective Services Board, on June 9 th, 2008. After a very lively discussion by the board members a motion was made to create a separate license for Digital Forensics Examiners. After being duly seconded, a vote was taken and the motion carried.

This separate license will include its own licensing requirements and will be separate from the Private Investigators license. This is good news for those of us practicing computer forensics and is a very positive step in the way licensing should be done.