![forensicinsight.org Page 20
...[??]...?? ?? ????? ??? ????
???? ?????? ???? ???? ??
? ??? ??? ?? ??? ??? ?? ??
? ???? ??PC? ????? ?? ????
? ?? ??? ??????? ????? ?
?. ...[????]...
3.20 ?????
3.20 ?????? ?? ?? ??? ?? ?? ???? ?? ????? ??
?? ??/???? ???
??? ??
2011.3.28](https://image.slidesharecdn.com/140716fitalk-160903003051/85/140716-fitalk-20-320.jpg)
![forensicinsight.org Page 25
A
B
D
C
3.20 ?????
? [??] 3.20 ?????? ?? ? ??? ?? ????...
??? ?? ??
?? ?? ??
??? Process ??
?? ?? ???](https://image.slidesharecdn.com/140716fitalk-160903003051/85/140716-fitalk-25-320.jpg)
![forensicinsight.org Page 31
Forensic Investigation vs Forensic Examination
[??????]](https://image.slidesharecdn.com/140716fitalk-160903003051/85/140716-fitalk-31-320.jpg)
(140716) #fitalk ????????? ??? ???
- 1. FORENSIC INSIGHT; DIGITAL FORENSICS COMMUNITY IN KOREA ????????? ?????? (and... Military Police Digital Forensic) Jo YongHyun khu410@gmail.com
- 2. forensicinsight.org Page 2 Previous employment: Financial Company Security Manager ¨C 2009-2014 Security Consulting ¨C 2007-2009 Army CID CyberCrime Special Agent ¨C 2000-2007 Total Information Security, Forensic Investigations, & Consulting ¨C 13+ years Who am I ?
- 3. forensicinsight.org Page 3 1. ?? ??? ?? ? ?? ?? 2. ??? ?? ? ?? ?? Military Police Digital Forensic??? ????????? ????????? Forensic Investigation vs Forensic Examination ???
- 4. forensicinsight.org Page 4 Military Police Digital Forensic
- 5. forensicinsight.org Page 5 Military Police Digital Forensic MISSION ???? ???/?? ???????????
- 6. forensicinsight.org Page 6 Military Police Digital Forensic ???????? ? ?43?(??????) ?? ? ?? ?? ??? ???? ??? ???????? ? ??? ????. 1. ???(‘—±ø¿Æ)? ??, ??? ? ???? ??? ?? ??????? ???? ?? ? ??? ?????? ??????? ???? ?? 2. ??? ?? ????? ??? ??, ??? ? ???? ?????? ????? ? ??? ?? 3. ????? ????? ??????? ???????? ???? ?? 4. ?????
- 7. forensicinsight.org Page 7 Military Police Digital Forensic CASE
- 8. forensicinsight.org Page 8 Military Police Digital Forensic CASE
- 9. forensicinsight.org Page 9 Military Police Digital Forensic CASE
- 10. forensicinsight.org Page 10 Military Police Digital Forensic CASE(U.S CID)
- 11. forensicinsight.org Page 11 Military Police Digital Forensic CASE(U.S NACY SEAL) Terrorist(Bin Laden)
- 12. forensicinsight.org Page 12 Military Police Digital Forensic Manning, Bradley CASE(U.S CID)
- 13. forensicinsight.org Page 13 ?????? ?????? ??????
- 14. forensicinsight.org Page 14 ?????? ?? ???? ??? ?? ????? ???? ????? ????? ?? ?? ?? ?? ??????? ?2?(??) "??????"? ?? ???? ?? ??????? ??? ??? ??? ???? ? ???? ??(?? "??????"? ??)??, ???? ???? ?? ?? ????? ???? ?? ????? ????? ?? ???? ???? ???? ?? ???? ??? ???.
- 15. forensicinsight.org Page 15 ?????? ?????? ???? ???? ???? ????? ???? ??? ???? ???? ??? ??? ??? ?? 1.7%¡ø 1.0%¡ø 3.8%¨‹ 2.0%¨‹ ????? ?????????(2014.5.23)?? 3? ?????? ?? ??
- 16. forensicinsight.org Page 16 ?????? ????? ???????, ???????? ?? ???? ?????, ??????, ???????? ?? ???? ??? ???? ???? ????? ???? ?? ?? ????? ?? ?? ????? ?? ???? ???? ???? ???? ?? Event? ?? ?? ??? ?? 2? ?? ?? ? ?? ?? ???? ???? ?? ??? ?? ?3? ??? ?????, ??? ???? ?? ?? > ??
- 17. forensicinsight.org Page 17 3.20 ????? ??? ?? ?????? ?? ???, ????, ???? ? ????? ?? ?? ?? ??? ?? ???? Don¡¯t Foget It
- 18. forensicinsight.org Page 18 3.20 ????? ??? ?? ??? ??? ?? ??? ?? ??? ?? ?? ??? ???? ???? ???? ???? ?? ¢Ù 8??~1??? ??? ?? ¢Ú?? ?? ?? ?? ¢Û???? ?? ¡°? ????¡° ? ??¡
- 19. forensicinsight.org Page 19 3.20 ????? ???‘ð? ??? ???? ???? ??? ??? ?? ??? ?? ??? ???? ??? ?? ??? ????? ?? ?? ?? ?? IRAQ War(1991) ?? ??? ??•r ??? ??? ???? ?? ??, ?? ???? ?? ?? Cosobo War(1999) ??? ??? ???? ??,???? ??? ???, ???? ?? ???? Stuxnet(2010) ?? ?? ???? ?? ?? ?? ??
- 20. forensicinsight.org Page 20 ...[??]...?? ?? ????? ??? ???? ???? ?????? ???? ???? ?? ? ??? ??? ?? ??? ??? ?? ?? ? ???? ??PC? ????? ?? ???? ? ?? ??? ??????? ????? ? ?. ...[????]... 3.20 ????? 3.20 ?????? ?? ?? ??? ?? ?? ???? ?? ????? ?? ?? ??/???? ??? ??? ?? 2011.3.28
- 21. forensicinsight.org Page 21 3.20 ????? ±±???? ??????? 3?? ???? ????? ????? ??? ??? ?? ?? ?? ??? ?? 7,7 ???? ????? ??? ????? ??/???? ?? ?? ???? ???? ???? ??? ???? ??? ????? ?? ??/????? ??? ??? ?????? ?????? ?? ????? ????? ?? ??? ????. ???? ??/????? ???? ??? ???? ?? ??? ?? ??? ????? ?? ?? ????? ?????? ?? ??? ??, ??, ???? ??? ? ?? ???? ? ??? ?? ??? ?? Bigdata Forensic Anti-Forensic 3rd Evidence Forensic
- 22. forensicinsight.org Page 22 3.20 ????? 3.20 ????? ?? ?? ??? ??, SNS? ???? ??? ?? ????? ??? ?? ?? ?? ?? ??? ?? ?? ?? ?? ?? ?? ? ??? ?? ¡°???¡± ?? ?? ??? ???? ??? ?? ?? ??? ??? ?? ?? ??
- 23. forensicinsight.org Page 23 3.20 ????? ?? ???? ???? ???? ???? ?? ???? ???? ?? ?? ?? ???? ??????
- 24. forensicinsight.org Page 24 3.20 ????? 2013.3.20 13:00~14:00??? ??? HDD ?? ???? ?? ??? ???? ????, 2? ??? 3.25??? ?? ??? ?? PC, ?? ?? ??? ?? ???? ?? (2012.8~12ÔÂ?) ?? ?? ?? (2012.6ÔÂ ~ ) ???? ?? (2013.3.20. 13:00~) ?? ??(?) ??? ???? ?? (2013.3.25~) / ???? ? ??.???? ?? ?? (2013.3.26~)
- 25. forensicinsight.org Page 25 A B D C 3.20 ????? ? [??] 3.20 ?????? ?? ? ??? ?? ????... ??? ?? ?? ?? ?? ?? ??? Process ?? ?? ?? ???
- 26. forensicinsight.org Page 26 Forensic Investigation vs Forensic Examination
- 27. forensicinsight.org Page 27 Forensic Investigation vs Forensic Examination Law Enforcemet ?? Corporate ??, ???? ?? ???, ???? ?? ?? ???? ??? ???? ?? Realtime ????, ???? ?? ???? ?????? ?? ?? MISSION? ?? ?? ?????(?)??? ?? ?? ??? ? ???? ???? ?? ??? ??? ???? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??? ? ???? ?? ???? ??(??, ??, ??) ???„e ??? ?? ?? ??? ??? ??? ?? Self Study
- 28. forensicinsight.org Page 28 Forensic Investigation vs Forensic Examination ??????? 2?? ??(Physical + Digital)?? ??? ??(Evidence)? ???? ??/??? ??? ??? ?? Physical (???) Digital (???)
- 29. forensicinsight.org Page 29 Forensic Investigation vs Forensic Examination IT??? ????? ??????
- 30. forensicinsight.org Page 30 Forensic Investigation vs Forensic Examination Risk Prevantion (Hack, Malware...) Communication (??, ??, ??, IT) Relationship (??, ????, ????)
- 31. forensicinsight.org Page 31 Forensic Investigation vs Forensic Examination [??????]
- 32. forensicinsight.org Page 32 ?? ??? ? ?? ????? ??? ??? ????? ????? ??? ??? ????? Forensic Investigation vs Forensic Examination
- 33. forensicinsight.org Page 33 ????? ??? ????????? ?? ??????? ????? ????? ?????? ???? ?????? ??????? ???Risk?????? ????????? + +
- 34. forensicinsight.org Page 34 Question and Answer