{[ promptMessage ]}

Bookmark it

{[ promptMessage ]}

Note-10 - CSE 494/598 Forensic Computing Computer and...

Info iconThis preview shows pages 1–4. Sign up to view the full content.

View Full Document Right Arrow Icon
CSE 494/598 Forensic Computing: Computer and Network Forensics Prof. Gail-Joon Ahn Cyber Gazette ! SSL Session Hijacking ! Can subvert an SSL session by performing a man-in-the- middle attack. The attack uses a tool developed called SSLstrip, which exploits the interface between http and https sessions ! Contributor: Dougla s Krueger ! Cybercrime Video Clip ! www.cnn.com ! Contributor: Farooq Khera
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
IMPORTANT DATES ! Exam #1: Feb 19, 2009 ! Assignment #1: Mar 3, 2009 ! Spring Break: Mar 10 & 12, 2009 ! Exam #2: Mar 31, 2009 ! Class Project Due: Apr 23, 2009 ! Paper Report Due: Apr 28, 2009 ! Class Presentation: Apr 28 & 30, 2009 May 5, 2009 ! Exam #3 (Final): May 7, 2009 (12:10PM – 2:00PM) 3 4 Outline ! File Forensics ! Storage Media Analysis ! Volume Analysis ! File System Analysis ! Heuristic and Systematic ! Microsoft File Structures " FAT and NTFS
Background image of page 2
! 67-70: volume serial number ! 71-81: volume name ! 82-89: file system type label ! 510-511: signature value (0xAA55) File System Analysis: FAT Structure – Boot Sector 0000000: eb58 90 4d 5344 4f53 352e 30 00 02 02 2600 . X . MSDOS5 . 0 & . 0000016: 02 00 00 00 00 f8 0000 3f00 4000 c089 0100 …….. ? . @ ..... 0000032: 4023 0300 1d03 0000 0000 0000 0200 0000 @# .............. 0000048: 0100 0600 0000 0000 0000 0000 0000 0000 …………….
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 4
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}