270 likes | 371 Views
Issues Arising in Forensic Computer Examinations. Mike Dickson Forensic Analyst SCDEA e-Crime. Data Capacity. 1 kilobyte = 1000 characters. 1 megabyte = 1 million characters or 500 sheets of paper (about 5 cm tall). 1 gigabyte = 1 billion characters
E N D
Issues Arising in Forensic Computer Examinations Mike Dickson Forensic Analyst SCDEA e-Crime NOT PROTECTIVELY MARKED
Data Capacity NOT PROTECTIVELY MARKED
1 kilobyte = 1000 characters NOT PROTECTIVELY MARKED
1 megabyte = 1 million characters or 500 sheets of paper (about 5 cm tall) NOT PROTECTIVELY MARKED
1 gigabyte = 1 billion characters or a pile of paper 50 metres tall NOT PROTECTIVELY MARKED
400 gigabytes is about average That’s 20km of paper Or 2 ½ Mount Everests NOT PROTECTIVELY MARKED
The biggest hard drive commercially available today is 2 terabytes, or 2 trillion characters That’s two million packets of A4 paper which would reach…. NOT PROTECTIVELY MARKED
…about 100 kilometers Approx here to Stirling NOT PROTECTIVELY MARKED
An average person can read through about 220 words per minute… …which is about a kilobyte of data NOT PROTECTIVELY MARKED
So therefore… Reading two terabytes of data would take the average person 2 x 1000 x 1000 x 1000 minutes NOT PROTECTIVELY MARKED
Also known as 3800 years The Nordic Bronze age started 3800 years ago NOT PROTECTIVELY MARKED
Hitachi have announced 4Tb drives for 2011 That’s 200km of paper = NOT PROTECTIVELY MARKED
Analyst and Investigator NOT PROTECTIVELY MARKED
Encryption NOT PROTECTIVELY MARKED
Identifying Devices NOT PROTECTIVELY MARKED
Virtual Computers or ‘The Cloud’ NOT PROTECTIVELY MARKED
Mike Dickson Forensic Analyst SCDEA e-Crime 0131-335-6033 michael.dickson@scdea.pnn.police.uk