Wednesday 18 January 2012

How to Coach CyberCSI

It is without doubt the existence of cyber space is very important to human kind progression. One of the examples is the broadband penetration. Empirical study has shown that it contributes to the economic growth.

But, at the same time, we heard a lot about cyber incidents. This unpleasant experience can be categorized into scam, harassment, hacking, spam, phishing and the list goes on. Some are aware on the potential threats in the cyber world but the vast majority (naïve netizens) is not.

So, is the cyber sphere safe? It is for certain not. Nothing is secured in this world. This is a reality.

Thus, we have good and bad sides of the cyber revolution. It is just like a cat and mouse game. There is no end and final solution.

The netizens must be educated to safely maneuver in the cyber space and the perpetrators must be brought to justice. However, it is a daunting task for the public prosecutor to spearhead a cyber crime case. The honorable judge is not spared in this electronically complicated circumstance.

Therefore, we need skillful digital forensics analysts so that they can to be consulted by the public prosecutor. Furthermore, the judge can listen to a well articulated analysis outcome. Technical complexity can be exquisitely translated into plain language without those confusing jargons. If not, it is difficult to win a case with digital evidence.

Nonetheless, it is not easy to train a digital forensics analyst. A study done by Malinowski [1] is quite interesting whereby the author looks into the training possibilities. Some of the areas covered are as follows:

• Roles – Technician, Policy Maker (Manager), Professional and Researcher
• Selection of Personnel
• Trainings
• Supplements
• Certifications

Also included is a Computer/Network Forensics (CNF) matrix that differentiates the role with education and training achievements. Among others, it provides the difference between a professional/specialist and researcher. According to the matrix, a researcher is a person possessing the skills and knowledge of the professional having additional capability of extending the body of knowledge in the field.

There are many considerations to coach a full fledge digital forensics analyst (please refer to my posting on A Full Fledge Digital Forensics Analyst http://aswamiariffin-cybercsimalaysia.blogspot.com/2012/01/full-fledge-digital-forensics-analyst.html). Development plan must be devised and budget set aside in order to achieve the objective.

[1] C.Malinowski. “Training the Cyber Investigator,” in Digital Crime And Forensics Science In Cyberspace, P.Kanellis, E.Kiountouzis, N.Kolokotronis and D.Martakos, 2006, pp. 311-333.