Forensic Computing by Anthony SammesForensic Computing by Anthony Sammes

Forensic Computing

byAnthony Sammes, Brian Jenkinson

Paperback | October 13, 2010

Pricing and Purchase Info


Earn 623 plum® points

Prices and offers may vary in store


In stock online

Ships free on orders over $25

Not available in stores


Forensic computing is becoming of primary importance as computers increasingly figure prominently as sources of evidence in all sorts of criminal investigations. However, in order for such evidence to be legally useful, it is vital that it be collected and processed according to rigorous principles.

In the second edition of this very successful book, Tony Sammes and Brian Jenkinson show how information held in computer systems can be recovered when it has been hidden or subverted by criminals, and how to insure that it is accepted as admissible evidence in court. Updated to fall in line with ACPO 2003 guidelines, "Forensic Computing: A Practitioner's Guide" is illustrated with plenty of case studies and worked examples, and will help practitioners and students gain a clear understanding in:

* Recovering information from computer systems that will acceptable as evidence
* The principles involved in password protection and data encryption
* The evaluation procedures used in circumventing a system's internal security safeguards
* Full search and seizure protocols for experts and police officers.

The new volume not only discusses the new file system technologies brought in by Windows XP and 2000 but now also considers modern fast drives, new encryption technologies, the practicalities of "live" analysis, and the problems inherent in examining personal organisers.

Professor A. J. Sammes is Professor of Computing Science, in the Faculty of Military Science, Technology and Management at the Defense Academy, Shrivenham. His department has been more or less solely responsible for training senior police officers in the UK in the art of forensic computing. His testimony as an expert witness has been called in countless cases, some of great national importance.

Brian Jenkinson is a retired Detective Inspector, formally Head of the Cambridgeshire Constabulary Fraud Squad. He is now an independent Forensic Computer Consultant and is also closely involved in teaching to both law enforcement and commercial practitioners. He was appointed Visiting Professor for Forensic Computing in 2002 at Cranfield University and the Defence Academy.

Until 1984, Professor A. J. Sammes was a serving British Army Officer with the rank of Colonel, late of the Royal Corps of Signals. His present appointment is Professor of Computing Science, in the Faculty of Military Science, Technology and Management at the Defense Academy, Cranfield University, Shrivenham. His formal qualifications...
Title:Forensic ComputingFormat:PaperbackDimensions:470 pagesPublished:October 13, 2010Publisher:Springer-Verlag/Sci-Tech/TradeLanguage:English

The following ISBNs are associated with this title:

ISBN - 10:184996596X

ISBN - 13:9781849965965

Look for similar items by category:


Table of Contents

Forensic Computing

Understanding Information

IT Systems Concepts

PC Hardware and Inside The Box

Disk Geometry

The New Technology File System

The Treatment of PCs

The Treatment of Electronic Organisers

Looking Ahead (Just a little bit more)

Appendices: Common Character Codes; Some Common File Format Signatures; A Typical Set of POST codes; Typical BIOS Beep Codes and Error Messages; Disk Partition Table Types; Ezxtended Partitions; Registers and Order Code for the INtel 8086; NFTS Boot Sector and BIOS Parameter Block; MFT Header and Attribute Maps; The Relationship Between CHS and LBA Addressing; Alternate Data Streams - a Brief Explanation

Editorial Reviews

From the reviews of the second edition:"This book was the product of an 'arms race'. . It is now listed as the standard text around which all the Forensic Computing courses at Cranfield and some other universities are based. . It is filled with good practical advice and is especially good on interpreting partition tables. . All in all this is a useful . guide to the discipline. . Truly the forensic computing expert is living in interesting times." (Alikelman, June, 2009)