CHICAGO (July 7, 2010) -A security expert from Trustwave will present and take part in a panel discussion at the SANS WhatWorks in Forensics and Incident Response Summit in Washington, D.C., July 8 through 9, 2010. The presentation will be delivered by a member of SpiderLabs, the advanced security team at Trustwave responsible for incident response and forensics, penetration testing and application security and security research.
SpiderLabs' Chris Pogue will present, Sniper Forensics - Changing the Landscape of Modern Forensics and Incident Response, which will examine live analysis tools and techniques to target only the systems that are part of a breach.
Computer forensics previously consisted of pulling a plug, imaging all stored data, and loading those images into a massive forensics program for analysis. As the size of victim storage devices increased dramatically and computer hackers became more resourceful, the complexity of computer forensics increased exponentially. Imaging tens or hundreds of terabytes became ineffective and cumbersome, and slowed down investigations. Pogue's presentation will provide live analysis tools and techniques that can be used by incident responders to extract more pertinent evidence in less time with more efficiency.
Sniper Forensics brings together proven theories including Locard's Exchange Principle, Occam's Razor, and The Alexiou Principle into a single methodology to gather and review volatile data and RAM dumps that target only the systems and specific files that are part of a security breach. Using these live analysis tools helps simplify a process into minutes or days, rather than hours and weeks.
By using sound logic and data reduction based on forensic evidence extracted from Sniper Forensics, incident responders can introduce accuracy and efficiency into their case work at a level not available through any other technique. Pogue will provide tips, tools, and real world examples of how Sniper Forensics is helping to change the landscape of modern forensics.
In addition, Pogue and Major Carole Newell of the Broken Arrow Police Department will deliver the keynote Answering the Call - Fighting Digital Crime, which will look at the role corporate forensic experts can play in their local community. As a volunteer for the Broken Arrow Police Department, Pogue devotes his free time assisting in criminal investigations that involve the review of digital forensic evidence. Since starting as a volunteer for the Broken Arrow Police Department, his efforts have lead to the arrest of two individuals.
With law enforcement agencies throughout the country backed-logged, volunteers with forensic expertise can significantly impact their local community by effectively reviewing digital forensic evidence in less time and greater accuracy than it would take for those without such experience. With many corporations involved in this type of work, such individuals could help make a dramatic impact on their local community by helping to put criminals in jail.
"Putting these criminals behind bars is not an insurmountable task if you have the evidence to prove their wrong-doing," says Robert J. McCullen, chairman and CEO of Trustwave. "Volunteering can help strengthen your forensic expertise, as well as provide a service to your local community by ensuring those that have committed crimes are experiencing the repercussions of their actions."
"Volunteering by industry experts produces real-world effects that can help make communities a safer place to live," says Nicholas J. Percoco, senior vice president of SpiderLabs. "Their experiences with forensic investigations help them identify new ways to help law enforcement review critical evidence that can contribute to the indictment of criminals."
About Trustwave
Trustwave is a leading provider of on-demand and subscription-based information security and payment card industry compliance management solutions to businesses and government entities throughout the world. For organizations faced with today's challenging data security and compliance environment, Trustwave provides a unique approach with comprehensive solutions that include its flagship TrustKeeper® compliance management software and other proprietary security solutions including SIEM , WAF , EV SSL certificates and secure digital certificates . Trustwave has helped hundreds of thousands of organizations-ranging from Fortune 500 businesses and large financial institutions to small and medium-sized retailers-manage compliance and secure their network infrastructures, data communications and critical information assets. Trustwave is headquartered in Chicago with offices throughout North America, South America, Europe, Africa, Asia and Australia. For more information, visit https://www.trustwave.com/en-us/.
