| Name: | Description: | Size: | Format: | |
|---|---|---|---|---|
| DM_FabioFreitas_MEI_2016 | 2.54 MB | Adobe PDF |
Authors
Advisor(s)
Abstract(s)
No contexto de uma análise forense a um computador, é usual que o técnico
queira obter o máximo de informacão possível. Em particular, sempre que
um técnico se depara com um computador ligado, este deverá tentar recolher
o máximo de informação de estado possível. Dispositivos USB apresentam-se
como veículos interessantes para construir mecanismos automatizados
para esta recolha de informa c~ao, pois permitem armazenar as aplica c~oes necess
arias para a recolha da informacão, o resultado da recolha da informacão
e facilitar a recolha de forma automática após a sua inserção no PC. Este
trabalho tece uma proposta de solução USB para facilitar a recolha de informacão de estado com garantia de integridade e multi-plataforma.
In the context of a digital forensic analysis, the technician usually wants to get as much information as possible. In particular, whenever a technician encounters a computer that is turned on, it should try to collect as much status information as possible. USB devices present themselves as interesting vehicles for the automated collection of such information, as it can store the applications required for the collection of the information, can store the results of the information collection and can also facilitate the information collection by enabling its automatic operation, where available. This paper proposes a USB solution to facilitate the collection of state information with integrity guarantees and multi-platform operation.
In the context of a digital forensic analysis, the technician usually wants to get as much information as possible. In particular, whenever a technician encounters a computer that is turned on, it should try to collect as much status information as possible. USB devices present themselves as interesting vehicles for the automated collection of such information, as it can store the applications required for the collection of the information, can store the results of the information collection and can also facilitate the information collection by enabling its automatic operation, where available. This paper proposes a USB solution to facilitate the collection of state information with integrity guarantees and multi-platform operation.
Description
Dissertação de Mestrado em Engenharia Informática
Keywords
Resposta a incidentes informáticos Recolha informação Multi-plataforma USB Informação homogénea Integridade
Citation
Publisher
Instituto Politécnico do Porto. Escola Superior de Tecnologia e Gestão