Embed Size (px)
DESCRIPTION
Issues Arising in Forensic Computer Examinations. Mike Dickson Forensic Analyst SCDEA e-Crime. Data Capacity. 1 kilobyte = 1000 characters. 1 megabyte = 1 million characters or 500 sheets of paper (about 5 cm tall). 1 gigabyte = 1 billion characters - PowerPoint PPT Presentation
Citation preview
NOT PROTECTIVELY MARKED
Issues Arising in Forensic Computer Examinations
Mike DicksonForensic AnalystSCDEA e-Crime
NOT PROTECTIVELY MARKED
Data Capacity
NOT PROTECTIVELY MARKED
1 kilobyte
= 1000
characters
NOT PROTECTIVELY MARKED
1 megabyte
= 1 million
characters
or 500
sheets of
paper (about
5 cm tall)
NOT PROTECTIVELY MARKED
1 gigabyte = 1 billion charactersor a pile of paper 50 metres tall
NOT PROTECTIVELY MARKED
400 gigabytes is about averageThat’s 20km of paper
Or 2 ½ Mount Everests
NOT PROTECTIVELY MARKED
The biggest hard drive commercially available today is2 terabytes, or 2 trillion characters
That’s two million packets of A4paper which would reach….
NOT PROTECTIVELY MARKED
…about 100 kilometers
Approx here to Stirling
NOT PROTECTIVELY MARKED
An average person can readthrough about 220 words perminute…
…which is about a
kilobyte of data
NOT PROTECTIVELY MARKED
So therefore…
Reading two terabytes of data would take the average person
2 x 1000 x 1000 x 1000 minutes
NOT PROTECTIVELY MARKED
Also known as 3800 years
The Nordic Bronze age started3800 years ago
NOT PROTECTIVELY MARKED
Hitachi have announced 4Tb drives for 2011
That’s 200km of paper
=
NOT PROTECTIVELY MARKED
Analyst and Investigator
NOT PROTECTIVELY MARKED
Encryption
NOT PROTECTIVELY MARKED
Identifying Devices
USB Phone (12Gb)
USB Watch (2Gb)
USB Subbuteo (22-32Gb)
USB Rubber Duck (2Gb)
USB Vibrator (128kb)
USB Teddy Bear (4Gb)
USB Teddy Bear (4Gb)
BMW M5 (8Gb)
NOT PROTECTIVELY MARKED
Virtual Computers or ‘The Cloud’
NOT PROTECTIVELY MARKED
NOT PROTECTIVELY MARKED
