Internet Forensics

Robert Jones runs Craic Computing, a small bioinformatics company in Seattle that provides advanced software and data analysis services to the biotechnology industry. He was a bench molecular biologist for many years before programming got the better of him.

""Internet Forensics" compiles a lot of information that has typically been available only by word of mouth or bitter experience. The average user will find themselves able to apply its techniques, and even if they choose not to, they will gain a deep understanding of how the Internet works. The book's clear style and firm grounding in reality make it an excellent read." - Gavin Inglis, news@UK, June 2006

• Preface 1. Introduction What Is Internet Forensics? The Seamy Underbelly of the Internet Pulling Back the Curtain Taking Back Our Internet Protecting Your Privacy Before You Begin A Network Neighborhood Watch 2. Names and Numbers Addresses on the Internet Internet Address Tools DNS Record Manipulation An Example-Dissecting a Spam Network 3. Email Message Headers Forged Headers Forging Your Own Headers Tracking the Spammer Viruses, Worms, and Spam Message Attachments Message Content Is It Really Spam? 4. Obfuscation Anatomy of a URL IP Addresses in URLs Usernames in URLs Encoding the Entire Message Similar Domain Names Making a Form Look Like a URL Bait and Switch-URL Redirection JavaScript Browsers and Obfuscation 5. Web Sites Capturing Web Pages Viewing HTML Source Comparing Pages Non-Interactive Downloads Using wget Mapping Out the Entire Web Site Hidden Directories In-Depth Example-Directory Listings Dynamic Web Pages Filling Out Forms In-Depth Example-Server-Side Database Opening the Black Box 6. Web Servers Viewing HTTP Headers What Can Headers Tell Us? Cookies Redirection Web Server Statistics Controlling HTTP Headers A Little Bit of Everything 7. Web Browsers What Your Browser Reveals Apache Web Server Logging Server Log Analysis Protecting Your Privacy 8. File Contents Word Document Metadata U.K. Government Dossier on Iraq Document Forgery Redaction of Sensitive Information 9. People and Places Geographic Location Time Zone Language Expertise Criminal or Victim? Hardware and Software 10. Patterns of Activity Signatures Searching with Signatures Problems with Simple Signatures Full Text Comparison Using Internet Search Engines for Patterns 11. Case Studies Case Study 1: Tidball Case Study 2: Spam Networks 12. Taking Action What Is Being Done to Tackle Internet Fraud? What You Can Do to Help Getting in Over Your Head Vision of a Community Response Index