What every Engineer should know about Cyber Security and Digital Forensics; Volume in What every Engineer should know Series – CRC-Taylor & Francis

167 Pages·2016·5.2 MB·English

by  DeFranco J.F.

What Every Engineer
Should Know About
Cyber Security and
Digital Forensics
WHAT EVERY ENGINEER SHOULD KNOW
A Series
Series Editor*
Phillip A. Laplante
Pennsylvania State University
1. What Every Engineer Should Know About Patents, William G. Konold,
Bruce Tittel, Donald F. Frei, and David S. Stallard
2. What Every Engineer Should Know About Product Liability, James F. Thorpe
and William H. Middendorf
3. What Every Engineer Should Know About Microcomputers: Hardware/Software
Design, A Step-by-Step Example, William S. Bennett and Carl F. Evert, Jr.
4. What Every Engineer Should Know About Economic Decision Analysis,
Dean S. Shupe
5. What Every Engineer Should Know About Human Resources Management,
Desmond D. Martin and Richard L. Shell
6. What Every Engineer Should Know About Manufacturing Cost Estimating,
Eric M. Malstrom
7. What Every Engineer Should Know About Inventing, William H. Middendorf
8. What Every Engineer Should Know About Technology Transfer and Innovation,
Louis N. Mogavero and Robert S. Shane
9. What Every Engineer Should Know About Project Management,
Arnold M. Ruskin and W. Eugene Estes
10. What Every Engineer Should Know About Computer-Aided Design and
Computer-Aided Manufacturing: The CAD/CAM Revolution, John K. Krouse
11. What Every Engineer Should Know About Robots, Maurice I. Zeldman
12. What Every Engineer Should Know About Microcomputer Systems Design and
Debugging, Bill Wray and Bill Crawford
13. What Every Engineer Should Know About Engineering Information Resources,
Margaret T. Schenk and James K. Webster
14. What Every Engineer Should Know About Microcomputer Program Design,
Keith R. Wehmeyer
15. What Every Engineer Should Know About Computer Modeling and Simulation,
Don M. Ingels
16. What Every Engineer Should Know About Engineering Workstations,
Justin E. Harlow III
17. What Every Engineer Should Know About Practical CAD/CAM Applications,
John Stark
18. What Every Engineer Should Know About Threaded Fasteners: Materials and
Design, Alexander Blake
19. What Every Engineer Should Know About Data Communications,
Carl Stephen Clifton
20. What Every Engineer Should Know About Material and Component Failure,
Failure Analysis, and Litigation, Lawrence E. Murr
21. What Every Engineer Should Know About Corrosion, Philip Schweitzer
22. What Every Engineer Should Know About Lasers, D. C. Winburn
23. What Every Engineer Should Know About Finite Element Analysis,
John R. Brauer
*Founding Series Editor: William H. Middendorf
What Every Engineer
Should Know About
Cyber Security and
Digital Forensics
Joanna F. DeFranco
Boca Raton London New York
CRC Press is an imprint of the
Taylor & Francis Group, an informa business
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2014 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Version Date: 20130927
International Standard Book Number-13: 978-1-4665-6454-1 (eBook - PDF)
This book contains information obtained from authentic and highly regarded sources. Reasonable
efforts have been made to publish reliable data and information, but the author and publisher cannot
assume responsibility for the validity of all materials or the consequences of their use. The authors and
publishers have attempted to trace the copyright holders of all material reproduced in this publication
and apologize to copyright holders if permission to publish in this form has not been obtained. If any
copyright material has not been acknowledged please write and let us know so we may rectify in any
future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced,
transmitted, or utilized in any form by any electronic, mechanical, or other means, now known or
hereafter invented, including photocopying, microfilming, and recording, or in any information stor-
age or retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copy-
right.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222
Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that pro-
vides licenses and registration for a variety of users. For organizations that have been granted a pho-
tocopy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are
used only for identification and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
This book is dedicated to my husband, Michael Tommarello, and our children,
Michaela, Marisa, and Nina, for their love, support, and continuous encouragement.

Contents
What Every Engineer Should Know: Series Statement ....................................xi
Preface ...................................................................................................................xiii
Acknowledgments ................................................................................................xv
About the Author ...............................................................................................xvii
1. Security Threats ..............................................................................................1
1.1 Introduction ...........................................................................................1
1.2 Social Engineering ................................................................................3
1.3 Travel .......................................................................................................6
1.4 Mobile Devices ......................................................................................7
1.5 Internet ...................................................................................................8
1.6 The Cloud ...............................................................................................9
1.7 Cyber Physical Systems ......................................................................11
1.8 Theft ......................................................................................................11
References .......................................................................................................12
2. Cyber Security and Digital Forensics Careers .......................................15
2.1 Introduction .........................................................................................15
2.2 Career Opportunities .........................................................................16
2.2.1 A Summarized List of “Information Security”
Job Tasks .................................................................................17
2.2.2 A Summarized List of “Digital Forensic” Job Tasks.........20
2.3 Certifications ........................................................................................23
2.3.1 Information Security Certifications ....................................24
2.3.2 Digital Forensic Certifications .............................................34
2.3.2.1 Global Information Assurance Certifications ....34
2.3.2.2 Software Certifications ..........................................36
References .......................................................................................................37
3. Cyber Security ...............................................................................................39
3.1 Introduction .........................................................................................39
3.2 Information Security ..........................................................................40
3.3 Security Architecture .........................................................................42
3.4 Access Controls ...................................................................................44
3.5 Cryptography ......................................................................................48
3.5.1 Types of Cryptography or Cryptographic Algorithms .....49
3.6 Network and Telecommunications Security ...................................50
3.7 Operating System Security ................................................................51
3.8 Software Development Security .......................................................53
3.9 Database Security ................................................................................56
vii
viii Contents
3.10 Business Continuity and Disaster Recovery ...................................57
3.11 Physical Security .................................................................................57
3.12 Legal, Regulations, Compliance, and Investigations .....................58
3.13 Operations Security ............................................................................59
3.14 Information Security Governance and Risk Management ...........60
References .......................................................................................................61
4. Preparing for an Incident ............................................................................63
4.1 Introduction .........................................................................................63
4.1.1 The Zachman Framework ....................................................64
4.1.2 Adaptation of the Zachman Framework to Incident
Response Preparation ............................................................64
4.2 Risk Identification ...............................................................................66
4.3 Host Preparation .................................................................................71
4.4 Network Preparation ..........................................................................73
4.5 Establishing Appropriate Policies and Procedures ........................76
4.6 Establishing an Incident Response Team ........................................81
4.7 Preparing a Response Toolkit ...........................................................83
4.8 Training ................................................................................................85
References .......................................................................................................89
5. Incident Response and Digital Forensics ................................................91
5.1 Introduction .........................................................................................91
5.2 Incident Response ...............................................................................92
5.2.1 Detection/Identification........................................................93
5.2.2 Containment ...........................................................................94
5.2.3 Eradication ..............................................................................95
5.2.4 Recovery ..................................................................................96
5.3 Incident Response for Cloud Computing ........................................97
5.4 Digital Forensics ..................................................................................98
5.4.1 Preparation..............................................................................99
5.4.2 Collection ..............................................................................101
5.4.3 Analysis .................................................................................102
5.4.4 Reporting ..............................................................................105
5.5 Mobile Phone Forensics ....................................................................107
References .....................................................................................................109
6. The Law ........................................................................................................111
6.1 Introduction .......................................................................................111
6.2 Compliance ........................................................................................111
6.2.1 The Health Insurance Portability and Accountability
Act (HIPAA) ..........................................................................112
6.2.2 The Payment Card Industry Data Security Standard
(PCI-DSS) ...............................................................................112
Contents ix
6.2.3 The North American Electric Reliability
Corporation-Critical Infrastructure Protection
Committee (NERC-CIP) ......................................................113
6.2.4 The Gramm-Leach-Bliley Act (GLBA)...............................114
6.2.5 Sarbanes-Oxley Act (SOX) ..................................................115
6.2.6 The Federal Information Security Management
Act (FISMA) ..........................................................................115
6.3 Laws for Acquiring Evidence ..........................................................116
6.4 Evidence Rules ...................................................................................120
6.5 E-discovery ........................................................................................121
6.6 Case Law ............................................................................................123
References .....................................................................................................124
7. Theory to Practice .......................................................................................127
7.1 Introduction .......................................................................................127
7.2 Case Study 1: It Is All Fun and Games until Something
Gets Deleted .......................................................................................127
7.2.1 After Action Report .............................................................131
7.2.1.1 What Worked Well? .............................................131
7.2.1.2 Lessons Learned ...................................................131
7.2.1.3 What to Do Differently Next Time ....................132
7.3 Case Study 2: How Is This Working for You? ...............................133
7.3.1 After Action Report .............................................................134
7.3.1.1 What Worked Well? .............................................134
7.3.1.2 Lessons Learned ...................................................135
7.3.1.3 What to Do Differently Next Time ....................135
7.4 Case Study 3: The Weakest Link .....................................................135
7.4.1 Background ...........................................................................135
7.4.2 The Crime .............................................................................136
7.4.3 The Trial ................................................................................137
7.4.3.1 The Defense ...........................................................137
7.4.3.2 The Prosecution ....................................................137
7.4.3.3 Other Strategies to Win the Case .......................139
7.4.3.4 Verdict ....................................................................140
7.4.4 After Action Report .............................................................140
7.4.4.1 What Worked Well for UBS-PW? .......................140
7.4.4.2 What to Do Differently Next Time ....................140
References .....................................................................................................141
Bibliography ..................................................................................................141
Index .....................................................................................................................143