– Phishing is essentially a social engineering crime on the Web, whose rampant occurrences and technique advancements are posing big challenges for researchers in both academia and the industry. The purpose of this study is to examine the available phishing literatures and phishing countermeasures, to determine how research has evolved and advanced in terms of quantity, content and publication outlets. In addition to that, this paper aims to identify the important trends in phishing and its countermeasures and provides a view of the research gap that is still prevailing in this field of study., – This paper is a comprehensive literature review prepared after analysing 16 doctoral theses and 358 papers in this field of research. The papers were analyzed based on their research focus, empirical basis on phishing and proposed countermeasures., – The findings reveal that the current anti‐phishing approaches that have seen significant deployments over the internet can be classified into eight categories. Also, the different approaches proposed so far are all preventive in nature. A Phisher will mainly target the innocent consumers who happen to be the weakest link in the security chain and it was found through various usability studies that neither server‐side security indicators nor client‐side toolbars and warnings are successful in preventing vulnerable users from being deceived., – Educating the internet users about phishing, as well as the implementation and proper application of anti‐phishing measures, are critical steps in protecting the identities of online consumers against phishing attacks. Further research is required to evaluate the effectiveness of the available countermeasures against fresh phishing attacks. Also there is the need to find out the factors which influence internet user's ability to correctly identify phishing websites.

Phishing counter measures and their effectiveness – literature review

The primary goal of this paper is to raise awareness regarding legal loopholes and enabling technologies, which facilitate acts of cyber crime In perusing these avenues of inquiry, the author seeks to identify systemic impediments which obstruct police investigations, prosecutions, and digital forensics interrogations Existing academic research on this topic has tended to highlight theoretical perspectives when attempting to explain technology aided crime, rather than presenting practical insights from those actually tasked with working cyber crime cases The author offers a grounded, pragmatic approach based on the in-depth experience gained serving with police task-forces, government agencies, private sector, and international organizations The secondary objective of this research encourages policy makers to reevaluate strategies for combating the ubiquitous and evolving threat posed by cyber- criminality Research in this paper has been guided by the firsthand global accounts (via the author's core involvement in the preparation of the Comprehensive Study on Cybercrime (United Nations Office on Drugs and Crime, 2013) and is keenly focused on core issues of concern, as voiced by the international community Further, a fictional case study is used as a vehicle to stimulate thinking and exemplify key points of reference In this way, the author invites the reader to contemplate the reality of a cyber crime inquiry and the practical limits of the criminal justice process

/pdf/investigating-and-prosecuting-cyber-crime-forensic-4x25p1z76t.pdf

Investigating and Prosecuting Cyber Crime: Forensic Dependencies and Barriers to Justice

A critical review of 7 years of Mobile Device Forensics

Challenges for IoT-based forensic investigations include the increasing amount of objects of forensic interest, relevance of identified and collected devices, blurry network boundaries, and edgeless networks. As we look ahead to a world of expanding ubiquitous computing, the challenge of forensic processes such as data acquisition (logical and physical) and extraction and analysis of data grows in this space. Containing an IoT breach is increasingly challenging - evidence is no longer restricted to a PC or mobile device, but can be found in vehicles, RFID cards, and smart devices. Through the combination of cloud-native forensics with client-side forensics (forensics for companion devices), we can study and develop the connection to support practical digital investigations and tackle emerging challenges in digital forensics. With the IoT bringing investigative complexity, this enhances challenges for the Internet of Anything (IoA) era. IoA brings anything and everything "online" in a connectedness that generates an explosion of connected devices, from fridges, cars and drones, to smart swarms, smart grids and intelligent buildings. Research to identify methods for performing IoT-based digital forensic analysis is essential. The long-term goal is the development of digital forensic standards that can be used as part of overall IoT and IoA security and aid IoT-based investigations.

/pdf/iot-forensics-challenges-for-the-ioa-era-54yx8q0st6.pdf

Iot Forensics: Challenges for the Ioa Era

Purpose – This paper sets out to critique the applicability of e‐commerce staged models in explaining the progression of small and medium‐sized businesses (SMEs) in their use of internet technologies. The premise of this study is that examining the evolution of web sites over time gives us insights into actual evolving strategies and motivations behind internet investments.Design/methodology/approach – An alternative multidimensional framework is proposed that combines three different dimensions of organizational change (process, content, and drivers). The content or categories of the dimensions are defined and justified. A study of 192 web sites and their evolution is described. This helps to demonstrate the relevance and applicability of the dimensions of the framework.Findings – The study describes the different approaches (monitoring, content analysis and case studies) and the characteristics of changes on these web sites. It was found that the main evolution strategies were “content updates” and “dor...

A multidimensional framework for SME e‐business progression

Identity theft in an online world

The vast majority of modern criminal investigations involve some element of digital evidence, from mobile phones, computers, CCTV and other devices. Digital Forensics: Digital Evidence in Criminal Investigations provides the reader with a better understanding of how digital evidence complements traditional scientific evidence and examines how it can be used more effectively and efficiently in a range of investigations. Taking a new approach to the topic, this book presents digital evidence as an adjunct to other types of evidence and discusses how it can be deployed effectively in support of investigations. The book provides investigators/SSMs/other managers with sufficient contextual and technical information to be able to make more effective use of digital evidence sources in support of a range of investigations. In particular, it considers the roles played by digital devices in society and hence in criminal activities. From this, it examines the role and nature of evidential data which may be recoverable from a range of devices, considering issues relating to reliability and usefulness of those data. Includes worked case examples, test questions and review quizzes to enhance student understanding Solutions provided in an accompanying website Includes numerous case studies throughout to highlight how digital evidence is handled at the crime scene and what can happen when procedures are carried out incorrectly Considers digital evidence in a broader context alongside other scientific evidence Discusses the role of digital devices in criminal activities and provides methods for the evaluation and prioritizing of evidence sources Includes discussion of the issues surrounding modern digital evidence examinations, for example; volume of material and its complexity Clear overview of all types of digital evidence Digital Forensics: Digital Evidence in Criminal Investigations is an invaluable text for undergraduate students taking either general forensic science courses where digital forensics may be a module or a dedicated computer/digital forensics degree course. The book is also a useful overview of the subject for postgraduate students and forensic practitioners.

Digital Forensics: Digital Evidence in Criminal Investigations

Spam 'n' chips: A discussion of internet crime

Standards, regulation & quality in digital investigations: The state we are in

In this research to establish a measurement programme for the World Wide Web, a useful preliminary activity has been to develop a classification scheme to differentiate various types of web sites. In this paper, the scheme developed is described and its application is discussed.

Angus M. Marshall

Papers

Identity theft in an online world

Digital Forensics: Digital Evidence in Criminal Investigations

Spam 'n' chips: A discussion of internet crime

Standards, regulation & quality in digital investigations: The state we are in

Establishing a measurement programme for the World Wide Web