Network Forensics. Dr. Paul Stephens (Canterbury Christ Church University)
Network forensics is often thought of as the poor relation of host-based forensics. This session will explore what network forensics is, what data we can collect to carry it out, and some of the potential problems. The presentation will draw on examples using Wireshark to emphasise the data that can be collected.
Paul is Director of Academic Studies in Law, Policing & Social Sciences, and a Principal Lecturer specialising in Digital Forensics & Cybersecurity at Canterbury Christ Church University. He is the Treasurer of BCS Cybercrime Forensics Specialist Group and is Co-Vice Chair of the IFIP 11.12 Working Group on Human Aspects of Information Security and Assurance. He works with, and teaches, representatives of law enforcement organisations from across Europe on digital crime related matters. He has worked in collaboration with the College of Policing and the Justice Institute of British Columbia to develop and deliver academic Masters courses. He has led European Commission funded training development and delivery in digital forensics for EU members states and law enforcement agencies including Europol, CEPOL, Interpol, and UNODC. His co-authored books include Policing Digital Crime (published by Routledge) and Investigating Digital Crime (published by Wiley).