Computer Forensics JumpStart - page 101

Training

Cyber Security Institute: http://www.cybersecurityinstitute.biz/

The DIBS group : http://www.dibsusa.com/

Global Digital Forensics, Inc.: http://www.evestigate.com/Computer_Forensic_Training.htm

High Tech Crime Institute: http://www.hightechcrimeinstitute.com/

Institute for Forensic Imaging : http://www.ifi-indy.org/

Intense Schools: http://www.intenseschool.com/bootcamps/security/forensics/

Technical Resource Center: http://www.trcglobal.com

Appendix C: ForensicsCertifications

Overview

Almost every day we read about some type of computer incident. Computer crime represents one of the fastest growing crime rates in the country, and the need for computer forensics is growing. The landscape of performing proper forensics on information systems is changing from law enforcement only to also include corporate IT and information security professionals. IT professionals now need to know how digital crimes are committed, how to gather the evidence, and how to collaborate with law enforcement as a computer forensics case evolves. While performing proper computer forensics to prevent further damage to systems, evidence can be damaged, lost, or become inadmissible in a court of law. Given this, it is not surprising that several computer forensics certifications are available, and they range in topic from computer crimes against children to file system recovery. If you are interested in becoming a cyber- crime investigator , getting a computer forensics certification will certainly add to your credibility. This appendix covers some of the most popular and well-known computer forensics certifications.

The Top Five Computer Forensics Certifications

The following are five of the most popular computer forensics certifications and their websites :

Certified Computer Examiner (CCE): http://www.certified-computer- examiner .com

Certified Computer Crime Investigator (CCCI): http://www.htcn.org/changes.htm

Computer Forensic Computer Examiner (CFCE): http://www.iacis.com/html/training.htm

Certified Information Forensics Investigator (CIFI): http://www.iisfa.org/certification/certification.asp

Professional Certified Investigator (PCI): http://www.asisonline.org/certification/pci/pciabout.xml

Advanced Information Security (AIS)

The Security University Advanced Information Security (AIS) certification is a handson computer security certification created for the network IT and security professional. The program combines coverage of key information security topics, tools, and technologies with perhaps the best overall hands-on, lab-oriented learning and testing program around. To obtain AIS certification, security professionals must complete eight courses, including six tools-oriented classes on topics such as network penetration testing; firewalls and virtual private networks (VPNs); virus analysis, patch management, and incident response; PKI; intrusion detection and computer forensics, plus two management classes on network security policy and architecture security. They must also take and pass a demanding exam. For additional details about this certification, visit http://www.securityuniversity.net/certification.php .

Certified Computer Examiner (CCE)

The Certified Computer Examiner (CCE) certification is the most complete and thorough evaluation process available today for the computer forensics professional. This certification is offered in association with the International Society of Forensic Computer Examiners, the Southeast Cybercrime Institute at Kennesaw State University, the Tri County Technical College, Pendleton, South Carolina, and Sir Sanford Fleming College, Ontario, Canada.

The CCE certification has been obtained by examiners throughout the world and is becoming the most recognized certification worldwide for both civilian and law enforcement examiners. Civilian examiners include information security officers and managers, IT administrators, consultants , systems and data security analysts, and even lawyers and HR managers.

The initial CCE process consists of a proctored online multiple-choice exam followed by the forensic examination of a floppy disk, the forensic examination of a CD-R disc, and the forensic examination of an image of a hard disk drive. After the online examination has been completed, the applicant can begin the forensic examination of the test media. The forensic examinations are designed to test the forensic knowledge and skills of the examiner.

The primary purpose of this certification is to measure if the applicant under- stands and uses sound evidence handling and storage procedures and follows sound forensic examinations procedures when conducting examinations. There are reasonable technical issues that must be resolved to recover the evidentiary data. However, most of the grade is based on following sound evidence handling and storage procedures and following sound examination procedures, not simply recovering the data. An 80 percent total average score will be required to obtain CCE certification. The fee for the entire process is around $300. To obtain additional information about the CCE, visit http://www.isfce.com or http://www.certified-computer-examiner.com .