CERIAS Security: Cross-Drive Forensic Analysis 1/6

Clip 1/6 Speaker: Simson Garfinkel · Harvard University This talk introduces cross-drive analysis (CDA), a new approach for performing analysis of forensic data sets that are too large or complex to be analyzed with today's existing tools. CDA works by performing systematic information extraction and cross-correlation across an entire data set. CDA was used to analyze 182 disk drives acquired on the secondary market; it automatically identified drives containing a high concentration of confidential financial records and three pairs of drives, each previously used by the same organization. CDA shows strong promise in allowing forensic examiners to prioritize their work and in automatically identifying members of preexisting social networks. For more information go to the Cerias website (http://bit.ly/dsFCBF)