Implementing Digital Forensic Readiness: From Reactive to Proactive Process, Second Edition
暫譯: 實施數位鑑識準備:從反應式到主動式流程,第二版

Sachowski, Jason

  • 出版商: CRC
  • 出版日期: 2019-06-05
  • 售價: $6,190
  • 貴賓價: 9.5$5,881
  • 語言: 英文
  • 頁數: 502
  • 裝訂: Hardcover - also called cloth, retail trade, or trade
  • ISBN: 1138338958
  • ISBN-13: 9781138338951
  • 海外代購書籍(需單獨結帳)

商品描述

Implementing Digital Forensic Readiness: From Reactive to Proactive Process, Second Edition presents the optimal way for digital forensic and IT security professionals to implement a proactive approach to digital forensics. The book details how digital forensic processes can align strategically with business operations and an already existing information and data security program.

Detailing proper collection, preservation, storage, and presentation of digital evidence, the procedures outlined illustrate how digital evidence can be an essential tool in mitigating risk and redusing the impact of both internal and external, digital incidents, disputes, and crimes. By utilizing a digital forensic readiness approach and stances, a company's preparedness and ability to take action quickly and respond as needed. In addition, this approach enhances the ability to gather evidence, as well as the relevance, reliability, and credibility of any such evidence.

New chapters to this edition include Chapter 4 on Code of Ethics and Standards, Chapter 5 on Digital Forensics as a Business, and Chapter 10 on Establishing Legal Admissibility. This book offers best practices to professionals on enhancing their digital forensic program, or how to start and develop one the right way for effective forensic readiness in any corporate or enterprise setting.

商品描述(中文翻譯)

《實施數位鑑識準備:從反應式到主動式過程(第二版)》提供了數位鑑識和IT安全專業人員實施主動式數位鑑識的最佳方法。本書詳細說明了數位鑑識過程如何與商業運營及現有的信息和數據安全計劃進行戰略對齊。

本書詳細介紹了數位證據的正確收集、保存、存儲和呈現,所列出的程序說明了數位證據如何成為減輕風險及降低內部和外部數位事件、爭議和犯罪影響的重要工具。通過採用數位鑑識準備的方法和立場,公司能夠提高準備度,快速採取行動並根據需要做出反應。此外,這種方法增強了收集證據的能力,以及任何此類證據的相關性、可靠性和可信度。

本版新增的章節包括第4章《倫理準則與標準》第5章《數位鑑識作為一項業務》,以及第10章《建立法律可接受性》。本書為專業人士提供了最佳實踐,以增強他們的數位鑑識計劃,或如何以正確的方式啟動和發展一個有效的鑑識準備計劃,適用於任何企業或公司環境。

作者簡介

Jason Sachowski has over twelve years of experience in digital forensic investigations, secure software development, and information security architecture. He currently manages a team of forensic investigators and data breach analysts for The Bank of Nova Scotia, commonly known as Scotiabank, Canada's third largest and most international bank.

Throughout his career, Jason has performed hundreds of digital forensic investigations involving Enterprise servers, network logs, smart phones, and database systems. Complimentary to his technical experiences, he has also developed and maintained processes and procedures, managed large information security budgets, and governed the negotiation of third-party contracts.

In addition to his professional career, Jason is the author of book 'Implementing Digital Forensic Readiness: From Reactive to Proactive Process'. He also serves as a contributing author and content moderator for DarkReading, is a subject matter expert for (ISC)2 professional exam development, and volunteers as an advocate for CyberBullying prevention and CyberSecurity awareness.

He holds several Information Security and Digital Forensic certifications including: Certified Information Systems Security Professional - Information Systems Security Architecture Professional (CISSP-ISSAP), Certified Cyber Forensics Professional (CCFP), Certified Secure Software Lifecycle Professional (CSSLP), Systems Security Certified Practitioner (SSCP), and EnCase Certified Examiner (EnCE).

作者簡介(中文翻譯)

Jason Sachowski 擁有超過十二年的數位鑑識調查、資訊安全軟體開發及資訊安全架構的經驗。他目前在加拿大第三大且最具國際化的銀行——新斯科舍銀行(Scotiabank)管理一支數位鑑識調查員和資料洩漏分析師的團隊。

在他的職業生涯中,Jason 進行了數百次涉及企業伺服器、網路日誌、智慧型手機和資料庫系統的數位鑑識調查。除了技術經驗外,他還開發和維護流程與程序,管理大型資訊安全預算,並負責第三方合約的談判。

除了專業生涯外,Jason 還是書籍《實施數位鑑識準備:從反應式到主動式流程》的作者。他同時擔任 DarkReading 的貢獻作者和內容審核員,並且是 (ISC)2 專業考試開發的主題專家,還自願擔任網路霸凌預防和網路安全意識的倡導者。

他擁有多項資訊安全和數位鑑識的認證,包括:認證資訊系統安全專業人員 - 資訊系統安全架構專業人員 (CISSP-ISSAP)、認證網路鑑識專業人員 (CCFP)、認證安全軟體生命週期專業人員 (CSSLP)、系統安全認證從業人員 (SSCP) 和 EnCase 認證考官 (EnCE)。