With the rise of cybercrime comes the need for cyber forensics, and this episode’s guest, Dr. LeGrande Gardner has been in the field of digital evidence for more than 30 years. Currently, he is an instructor in the Criminology Department at the University of South Florida, where he also serves as the Director of the MS in Cybercrime degree program and administrates the Graduate Certificate Program in Digital Forensics.  

Co-hosts Bill McQueen and Ernie Ferraresso joined Dr. Gardner for a discussion about digital evidence, its role in the justice community, and opportunities for the future. The field of cyber forensics started rather simply, as a way to detect and connect the pieces of a crime.  As evidence was being submitted into the justice system, a need for increased scientific methodologies and protocols grew to preserve legal integrity and the rights of the accused.  

Cyber forensic professionals are able to examine a range of devices, networks--even the cloud--to uncover criminal activity and gather evidence that can lead to legal prosecution. Dr. Gardner discusses how advances in computer science have made an impact in the ability to locate criminals. In his first example, he shares how hash algorithms are used to catch pedophiles and provide a digital footprint to catch larger pedophile rings. Next, he details the Target breach, where criminals were able to hack the nationwide retailer via their air conditioning’s computerized system. Then, he talks about how search warrants involving cybercrime uncovered how criminals were using their neighbor’s open IP addresses, putting routers unknowingly in their attics, and other deviousness that thwarted detection and capture. Unfortunately, Dr. Gardner reveals, international criminals are even more elusive, but that having solid cyber forensics can help law enforcement agencies from multiple countries coordinate efforts.

Cyber forensics now has several sub-specialties, such as cloud forensics, network forensics, malware forensics, IoT forensics, and vehicle forensics.  Many colleges and universities are developing programs and training around these expanding and evolving sub-specialties. Dr. Gardner points out that this is a great time to be a cybercriminal and there will be an increased need for cyber forensic technicians and digital evidence specialists to combat the widespread crime.  

There is a push for law enforcement officers to receive training in cyber forensics to facilitate crime scene collections, recognize patterns, and maintain protocols.  Dr. Gardner’s history in law enforcement and as a Task Force Agent with the FBI’s Cyber Crime Unit gave him a special insight to device and data collection at crime scenes and he shares his thoughts on training opportunities in police academies.  

Hackers and cyber criminals aren’t the only reasons the field of cyber forensics is growing.  Corporations are also employing their own forensic teams. Companies use digital evidence to substantiate their security and to protect themselves if a situation with an employee requires documentation.  Civil matters are increasingly including digital evidence, and professionals are being called upon to provide expert testimony.

The need for cyber forensics professionals is growing exponentially, according to Dr. Gardner. There is no end in sight for the potential of this field and the importance it will play in protecting our security and stopping crime.

TIME STAMPS

00:43  Meet Our New Co-host: Ernie Ferraresso, Associate Program Director of Cyber Florida

02:43 Who is Dr. LeGrande Gardner, Director of the MS in Cybercrime Degree Program, University of South Florida

03:15  What is Cyber Forensics and Digital Evidence?

04:47  Recognizing the field of Cyber Forensics

05:59  Following the Rules of Evidence and Procedure

06:33  The Growing Impact of Digital Evidence and Digital Exploitation  

07:35  Evolving Field of Cyber Forensic Careers

08:58  Collecting Cyber Forensic Data  

09:51  Digital Evidence as a Science

12:52 Components of Digital Evidence

13:45 Hash Algorithms, Digital DNA

14:25 Child Pornography Hash Algorithms

14:55  Hash Algorithms are like Fingerprints  

16:37  Verifying and Preserving Digital Evidence Using Scientific Protocols

18:29  Training to be a Cyber Forensic Technician or Specialists

21:34  Specialized Cyber Forensic Fields

24:01 Criminals, Digital Evidence & Law Enforcement

26:30 Training Law Enforcement for Digital Evidence Collection

28:24 Finding Breaches and Identifying Vulnerabilities

31:00 How to Start a Cyber Forensic Investigation

31:29 Cyber Forensic Incident Response

34:38  Cyber Police of the Future

35:35  Trends in Cyber Forensic Prosecutions

37:05 International Cyber Criminals and Cyber Forensics

38:19 Every Cop as a Cyber Cop

38:39 How is Cybercrime Changing  

41:26 The Future of the Cyber Forensic Field

42:24  Corporate Digital Forensic Units and Civil Courts

44:43  Cyber Forensic Academics, Digital Certifications and Careers