Homeland Security Digital Library

SEARCH THE HSDL

Searching for terms: ALL (Cyber AND Crime) in: title or summary

Results 121 - 150 (of 223) sorted by relevance sort by date

Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).

Congressional Budget Office Cost Estimate: H.R. 1560: Protecting Cyber Networks Act

Show summary Open resource [pdf] (open full abstract)
"H.R. 1560 would establish within the Office of the Director of National Intelligence (ODNI) a center that would be responsible for analyzing and integrating information from the intelligence community related to cyber threats. In addition, the bill would require the government to establish procedures for sharing information and data on cyber threats between the federal government and nonfederal entities. The CBO [Congressional Budget Office] estimates that implementing the bill would cost $186 million over the 2016-2020 period, assuming appropriation of the estimated amounts. In addition, the bill would allow information shared with the government to be used in certain criminal prosecutions, which could increase federal revenues from fines as well as direct spending from the Crime Victims Fund. However, CBO anticipates that the number of cases that could be affected would be small and that any additional revenues and spending would be insignificant. Finally, section 5 of H.R. 1560 would make the government liable if an agency or department were to violate the privacy and civil liberty guidelines required by the bill."

United States. Congressional Budget Office

2015-04-13
Statement by Secretary Jeh C. Johnson Concerning the Extradition of Sergey Vovnenko [October 13, 2015]

Show summary Open resource [pdf] (open full abstract)
On October 13, 2015, the Department of Homeland Security issued the following press release: "I commend the U.S. Secret Service, together with the U.S. Attorney's Office for the District of New Jersey, for their outstanding work in the apprehension and extradition of yet another alleged cyber criminal--Sergey Vovnenko. Vovnenko, a Ukrainian citizen, appeared in federal court in Newark today, after extradition from Italy. Vovnenko is charged with conspiring to hack into the computer networks of individual users and corporations to steal log-in credentials and payment card data. According to the indictment, for almost two years, Vovnenko and his conspirators operated an international criminal organization that stole data, including, user names and passwords for bank accounts and other online services, as well as debit and credit card numbers and personally identifiable information. To carry out this crime, Vovnenko allegedly operated a 'botnet' of more than 13,000 computers infected with malicious computer software programmed to gain unauthorized access to other computers and to identify, store, and export information from hacked computers. Today's announcement is the latest affirmation of the Secret Service's skill and commitment to bring cyber criminals to justice, whether domestic or foreign. Congratulations on a job well done."

United States. Department of Homeland Security. Press Office

2015-10-13
Fact Sheet: Cybersecurity National Action Plan [February 9, 2016]

Show summary Open resource [pdf] (open full abstract)
"From buying products to running businesses to finding directions to communicating with the people we love, an online world has fundamentally reshaped our daily lives. But just as the continually evolving digital age presents boundless opportunities for our economy, our businesses, and our people, it also presents a new generation of threats that we must adapt to meet. Criminals, terrorists, and countries who wish to do us harm have all realized that attacking us online is often easier than attacking us in person. As more and more sensitive data is stored online, the consequences of those attacks grow more significant each year. Identity theft is now the fastest growing crime in America. Our innovators and entrepreneurs have reinforced our global leadership and grown our economy, but with each new story of a high-profile company hacked or a neighbor defrauded, more Americans are left to wonder whether technology's benefits could risk being outpaced by its costs. The President believes that meeting these new threats is necessary and within our grasp. But it requires a bold reassessment of the way we approach security in the digital age. […] That is why, today, the President is directing his Administration to implement a Cybersecurity National Action Plan (CNAP) that takes near-term actions and puts in place a long-term strategy to enhance cybersecurity awareness and protections, protect privacy, maintain public safety as well as economic and national security, and empower Americans to take better control of their digital security."

United States. Office of the White House Press Secretary

2016-02-09
Executive Order 13694: Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities

Show summary Open resource [pdf] (open full abstract)
"By the authority vested in me as President by the Constitution and the laws of the United States of America, including the International Emergency Economic Powers Act (50 U.S.C. 1701 et seq.) (IEEPA), the National Emergencies Act (50 U.S.C. 1601 et seq.) (NEA), section 212(f) of the Immigration and Nationality Act of 1952 (8 U.S.C. 1182(f)), and section 301 of title 3, United States Code, I, BARACK OBAMA, President of the United States of America, find that the increasing prevalence and severity of malicious cyber-enabled activities originating from, or directed by persons located, in whole or in substantial part, outside the United States constitute an unusual and extraordinary threat to the national security, foreign policy, and economy of the United States. I hereby declare a national emergency to deal with this threat." The Executive Order includes ten Sections, which have been summarized as follows: (Section 1) A list of cyber-crimes that will result in freezing or "blocking" the perpetrator's assets; (2) Prohibits providing assistance to perpetrators whose property has been blocked; (3) Prohibits any transfer of assets to or from perpetrators whose property has been blocked; (4) This Executive Order (EO) applies to citizens, immigrants, non-immigrants, and any aliens or any persons with assets in the U.S. that meet the criteria listed in Section 1; (5) Prohibits conspiring to circumvent this legislation; (6) Definines terms used in the EO; (7) Perpetrators will have their assets blocked immediately, and with no prior notice; (8) Authorizes the Secretary of Treasury to take or delegate the action of blocking assets; (9) Requires the Secretary of Treasury to file reports to Congress; and (10) Legislative clarifications.

United States. Office of the Federal Register

Obama, Barack

2015-01-01
Using Partnerships to Combat Cyber Threats

Show summary Open resource [pdf] (open full abstract)
From the opening of Robert S. Mueller's speech: "From the opening of Robert S. Mueller's speech: 'We live in a wired world. Our networks help us to stay in touch with family and friends, collaborate with colleagues worldwide, and shop for everything from books to houses. They help us manage our finances and make businesses and government more efficient. But our reliance on these networks also makes us vulnerable. Criminals can use the Internet to commit fraud and theft on a grand scale, and to prey upon our children. Spies and terrorists can exploit our networks to steal our secrets, attack our critical infrastructure, and threaten our national security. And because the web offers near-total anonymity, it is difficult to discern the identity, the motives, and the location of an intruder. Yet for too many individuals and businesses, cyber crime remains a nebulous concept. So today, I want to talk about the evolving nature of cyber threats, what the FBI [Federal Bureau of investigation] is doing to combat them, and how we can work together to keep them at bay."

United States. Federal Bureau of Investigation

Mueller, Robert S., III, 1944-

2010
Remarks as delivered by James R. Clapper, Director of National Intelligence: Worldwide Threat Assessment to the Senate Select Committee on Intelligence, Wednesday, January 29, 2014

Show summary Open resource [pdf] (open full abstract)
This is the testimony of James R. Clapper, Director of National Intelligence. On January 29, the U.S. Senate Select Committee on Intelligence held an open hearing on Current and Projected National Security threats against the United States. These open hearings occur yearly, and quite a few areas of threat are on the rise, including cyber, counterintelligence, counterspace, and Transnational Organized Crime. They concluded that global threats in the cyber realm are a growing trend, and our increased reliance on cyberspace and digital networks as a nation will create growing risks to our use of digital infrastructure. Exploiting and disrupting our online activities will likely increase, the Select Committee concluded; biggest threats will come from Russia and China.

United States. Congress. Senate. Select Committee on Intelligence

2014-01-29
Our National Information Infrastructure: An Immediate Strategic Concern in National Security Policy

Show summary Open resource [pdf] (open full abstract)
"The United States continues to experience a phenomenal growth in the Internet combined with an increased dependence upon the automated systems within its information infrastructure. This tremendous growth is accompanied with a commensurate increase in cyber attack and crime. Both nonstate and state sponsored enemies are becoming more organized and talented, and experts view the greatest dangers in cyberspace as villains lying in wait, withholding full-fledged cyber attack until the opportunity for sufficient strategic advantage presents itself. The United States' current security policies and strategies depend upon voluntary adherence to government recommendations with few regulations, standards or financial incentives to gain private sector support. The potential losses associated with failing to secure cyberspace are too high. This paper provides an assessment of national efforts to secure cyberspace and puts forward recommendations to strengthen this critical national infrastructure. The United States must reassess its national strategies and with practical incentives, enforce stronger measures to secure its information infrastructures. Otherwise, the nation will face unforeseen, potentially catastrophic consequences."

Army War College (U.S.)

Hamilton, Brian

2004-05-03
Framework for Establishing Critical Infrastructure Resilience Goals: Final Report and Recommendations by the Council

Show summary Open resource [pdf] (open full abstract)
"Our nation faces an increasingly complex set of risks that are interwoven into all facets of our businesses, infrastructures, and communities. The threat of hurricanes, financial instability, pandemics, cyber crime, social unrest, terrorism, and other disruptive events that flow from our participation in a global economy has become a part of our everyday lives. While we continue to work toward a safer and more secure world, the reality is that we must address emerging risks with diligence, commitment, and the understanding that we cannot reroute hurricanes, intercept every cyber attack, or prevent every disruption. President Obama put it succinctly: 'To succeed, we must face the world as it is.' Critical infrastructure risks pose a special problem for the country. The companies that own these infrastructures operate in competitive and regulated environments and must balance risk, investment, and cost to customers. Although they have a deeply ingrained sense of responsibility to their customers and shareholders, it is neither practical nor possible to safeguard infrastructures from all hazards. For the government, the continuity of these infrastructures--and electric power in particular--is critical to many of its fundamental missions: economic stability and growth, national security, public safety, and quality of life. Resilience provides the bridge between the possible and the ideal. The National Infrastructure Advisory Council (NIAC or Council) considers resilience to be a fundamental strategy that makes our businesses stronger, our communities better prepared, and our nation more secure. It is often the most flexible and cost-effective strategy to ensure continuity of services and functions and to minimize the impact of disruptions."

National Infrastructure Advisory Council (U.S.)

2010-10-19
H. Rept. 107-497: Cyber Security Enhancement Act of 2002, Report to Accompany H.R. 3482, June 11, 2002

Show summary Open resource [pdf] (open full abstract)
"The Committee on the Judiciary, to whom was referred the bill (H.R. 3482) to provide greater cybersecurity, having considered the same, reports favorably thereon with an amendment and recommends that the bill as amended do pass. […] H.R. 3482, the 'Cyber Security Enhancement Act of 2002,' would increase penalties for cybercrimes to better reflect the seriousness of the crime; enhance law enforcement efforts through better coordination; provide the authority and resources for the National Infrastructure Protection Center to serve as a national focal point for threat assessment, warning, investigation, and response to attacks on the nation's critical infrastructure from both physical and cyber sources; and make the Office of Science and Technology an independent office to serve as the national focal point for law enforcement science and technology and to assist in the development and dissemination of law enforcement technology, and to make technical assistance available to Federal, State, and local law enforcement agencies."

United States. Government Printing Office

2002-06-11
Readout of Deputy Secretary Mayorkas' Visit to Greece [June 25, 2014]

Show summary Open resource [pdf] (open full abstract)
On June 25, 2014, the Department of Homeland Security issued the following press release: "On June 24-25, Deputy Secretary of Homeland Security Alejandro Mayorkas traveled to Athens, Greece to participate in the U.S.-European Union (EU) Justice and Home Affairs Ministerial Meeting. Deputy Secretary Mayorkas also met with international counterparts to discuss collective efforts to combat terrorism, enhance aviation security, secure cyberspace, and address other homeland security-related priorities. Deputy Secretary Mayorkas joined U.S. Attorney General Eric Holder at the U.S.-EU Justice and Home Affairs Ministerial Meeting, where he underscored the importance of international collaboration in efforts to ensure our common security interests including the joint concern of extremist travel to and from Syria, and to counter violent extremism. Deputy Secretary Mayorkas also reiterated the importance of the Department's collaboration with international counterparts in law enforcement investigations in areas such as human trafficking, cyber crime, and intellectual property rights violations through the U.S.-EU Cyber Working Group and the Global Alliance against Child Sexual Abuse Online."

United States. Department of Homeland Security. Press Office

2014-06-25
China's Position on the Sony Attack: Implications for the U.S. Response

Show summary Open resource [pdf] (open full abstract)
From the introduction: "In late November 2014, Sony Pictures Entertainment confirmed it was the victim of a cyber attack that crippled its networks and stole large quantities of personal and commercial data. On December 19, the U.S. Federal Bureau of Investigation (FBI) publicly identified North Korea as responsible for these crimes, describing the attack as 'destructive' and 'coercive' in nature. President Obama pledged the United States would respond 'proportionately' and 'in a place and time and manner that we choose.' On January 2, 2015, the United States imposed financial sanctions on North Korea's arms industry as a 'first step in retaliation.', Analysts and news media have suggested further steps could include listing North Korea as a state sponsor of terrorism, bringing down its propaganda websites, and targeting its computer hardware, with a kinetic response termed 'the remotest of possibilities.' U.S. officials reached out to China's government following this attribution in an effort to 'share information,' 'express our concerns,' and 'ask for their cooperation,' as stated by one representative. The United States reportedly asked specifically for assistance in a 'blocking action' to eliminate North Korea's ability to carry out future attacks, as Chinese state-owned enterprise China Unicom is a crucial conduit for nearly all of the regime's telecommunications. Beijing has yet to publicly respond to the U.S. overture or officially acknowledge North Korean involvement, stating only that China 'is against all forms of cyber attacks,' including those launched by a state 'using facilities beyond its own national borders against a third country.' As China has received attention as a potential factor in this attack, is in a unique position to influence North Korea, and is a key player in the development of international norms in cyberspace, its reactions to U.S. decisions on these matters are of particular interest."

U.S.-China Economic and Security Review Commission

Wilson, Jordan

2015-01-14
FBI Law Enforcement Bulletin: January 2014

Show summary Open resource [html] (open full abstract)
This edition of the FBI (Federal Bureau of Investigation) Law Enforcement Bulletin contains the following articles: "Active Shooter Events from 2000 to 2012"; "Legal Digest: Supreme Court Cases: 2012 to 2013 Term"; "Notable Speech: Fidelity, Bravery, and Integrity"; "Officer Survival Spotlight: National Law Enforcement Memorial"; "Leadership Spotlight: Valuable Moments"; and "Cyber Crime Update: Revamped Cyber's Most Wanted List".

United States. Federal Bureau of Investigation

2014-01
Our National Information Infrastructure; An Immediate Concern in National Security Policy

Show summary Open resource [pdf] (open full abstract)
From the thesis abstract: "The United States continues to experience a phenomenal growth in the Internet combined with an increased dependence upon the automated systems within its information infrastructure. This tremendous growth is accompanied with a commensurate increase in cyber attack and crime. Both nonstate and state sponsored enemies are becoming more organized and talented and experts view the greatest dangers in cyberspace as villains lying in wait withholding full-fledged cyber attack until the opportunity for sufficient strategic advantage presents itself. The United States current security policies and strategies depend upon voluntary adherence to government recommendations with few regulations standards or financial incentives to gain private sector support. The potential losses associated with failing to secure cyberspace are too high. This paper provides an assessment of national efforts to secure cyberspace and puts forward recommendations to strengthen this critical national infrastructure. The United States must reassess its national strategies and with practical incentives enforce stronger measures to secure its information infrastructures. Otherwise the nation will face unforeseen potentially catastrophic consequences."

Army War College (U.S.)

Hamilton, Brian P.

2004-05-03
Current and Projected National Security Threats Against the United States, Hearing before the U.S. Senate Select Committee on Intelligence, One Hundred Thirteenth Congress, Second Session, January 29, 2014

Show summary Open resource [video] (open full abstract)
On January 29 2014, the U.S. Senate Select Committee on Intelligence held an open hearing on Current and Projected National Security threats against the United States. These open hearings occur yearly, and quite a few areas of threat are on the rise, including cyber, counterintelligence, counterspace, and Transnational Organized Crime. They concluded that global threats in the cyber realm are a growing trend, and our increased reliance on cyberspace and digital networks as a nation will create growing risks to our use of digital infrastructure. Exploiting and disrupting our online activities will likely increase, the Select Committee concluded; biggest threats will come from Russia and China. A statement for the record includes James R. Clapper.

United States. Congress. Senate. Select Committee on Intelligence

2014-01-29
S. Hrg. 106-839: Cyber Attacks: Removing Roadblocks to Investigation and Information Sharing: Hearing before the Subcommittee on Technology, Terrorism, and Government Information of the Committee on the Judiciary, United States Senate, One Hundred Sixth Congress, Second Session on Examining the Incidence of Cyber Attacks on the Nation's Information Systems, Focusing on Removing Roadblocks to Investigation and Information Sharing, March 28, 2000

Show summary Open resource [pdf] (open full abstract)
From the opening statement of Jon Kyl: "Today, we will examine various roadblocks to the protection of our information systems from cyber attack. Using the recent denial of service attacks as a backdrop, we will discuss some of the things that inhibit swift investigation and prosecution of cyber crimes, and the sharing of vulnerability and threat information among the private sector and with organizations affiliated with the Federal Government." Statements, letters, and material submitted for the record include those of the following: Jon Kyl, Dianne Feinstein, Charles E. Schumer, Patrick J. Leahy, Loius J. Freeh, Harris N. Miller, Richard D. Pethia, and Charles E. Schumer.

United States. Government Printing Office

2001
Cybersecurity: Threats to the Financial Sector, Hearing Before the Subcommittee on Financial Institutions and Consumer Credit of the Committee on Financial Services, U.S. House of Representatives, One Hundred Twelfth Congress, First Session, September 14, 2011

Show summary Open resource [pdf] (open full abstract)
From the opening statement of Shelley Moore Capito: "Today's hearing will provide members of this subcommittee the opportunity to better understand the challenges financial institutions and their customers face from cyber threats. This year alone, there have been numerous security breaches and attacks on private companies, Federal agencies, and financial institutions. Actually, I think I might include myself in one of those; I think my card got caught up in one of these. Reports estimate that more than $1 trillion is lost annually to cyber attacks and that, on average, a security breach costs a small business approximately $7 million. These threats are especially acute and worrisome in the financial services industry. In June of this year, Citigroup reported that sensitive account information for 200,000 customers had been compromised by hackers. Statistics show that most of these attacks originate in Eastern European countries that were once part of the Soviet Union. Unfortunately, most of these nations do not regard the actions of the hackers to be a crime so it is very difficult to bring these criminals to justice. The technological advances that provide hackers with the ability to carry out these attacks also make it very difficult to track the actions of the hackers. In order to effectively combat these hackers, it is critical for financial institutions to share information with other institutions as well as Federal law enforcement agencies." Statements, letters, and materials submitted for the record include those of the following: Shelley Moore Capito, Greg Garcia, William B. Nelson, Marc Rotenberg, A. Bryan Sartin, Greg Schaffer, Gregory E. Shannon, A.T. Smith, Gordon M. Snow, and Brain Tillett.

United States. Government Printing Office

2012
Test Results for Mobile Device Acquisition Tool: Guidance Software Neutrino 1.4.14

Show summary Open resource [pdf] (open full abstract)
"This document reports the results from testing Guidance Software Neutrino, version 1.4.14, against the GSM Mobile Device and Associated Media Tool Specification and Test Plan Version 1.1, available at the CFTT Web site." "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection, and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications."

United States. Office of Justice Programs

2008-10
Test Results for Mobile Device Acquisition Tool: Mobilyze 1.1

Show summary Open resource [pdf] (open full abstract)
This document reports the results from testing of the Mobilyze 1.1. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide a justification for the selection of test cases and assertions from the set of possible cases that are defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

National Institute of Justice (U.S.)

2011-01
Test Results for Mobile Device Acquisition Tool: iXAM Version 1.5.6

Show summary Open resource [pdf] (open full abstract)
This document reports the results from testing iXAM Version 1.5.6. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the department of Homeland Security (DHS), and the National Institute of Standards and Technology Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide justification for the selection of test cases and assertions from the set of possible cases defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

National Institute of Justice (U.S.)

2010-12
Test Results for Mobile Device Acquisition Tool: Zdziarski's Method

Show summary Open resource [pdf] (open full abstract)
"This document reports the results from testing Zdziarski's Method against the 'Smart Phone Tool Test Assertions and Test Plan.' [...] The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the department of Homeland Security (DHS), and the National Institute of Standards and Technology Office of Law Enforcement Standards (OLES) and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. [...] This report is divided into five sections. The first section is a summary of the results from the test runs. This section is sufficient for most readers to assess the suitability of the tool for the intended use. The remaining sections of the report describe how the tests were conducted and provide documentation of test case run details that support the report summary. Sections 2 and 3 provide justification for the selection of test cases and assertions from the set of possible cases defined in the test plan for smart phone forensic tools. The test cases are selected, in general, based on features offered by the tool. Section 4 lists the hardware and software used to run the test cases. Section 5 contains a description of each test case, test assertions used in the test case, the expected result and the actual result."

National Institute of Justice (U.S.)

2010-12
Common Sense Guide to Prevention and Detection of Insider Threats

Show summary Open resource [pdf] (open full abstract)
"The threat of attack from insiders is real and substantial. The 2004 ECrime Watch Survey conducted by the United States Secret Service, CERT Coordination Center (CERT/CC), and CSO Magazine, found that in cases where respondents could identify the perpetrator of an electronic crime, 29 percent were committed by insiders. The impact from insider attacks can be devastating. Over the past several years, Carnegie Mellon University has been conducting a variety of research projects on insider threat. One of the conclusions reached is that insider attacks have occurred across all organizational sectors, causing significant damage to the affected organizations. These acts have ranged from 'lowtech' attacks, such as fraud or theft of proprietary information, to technically sophisticated crimes that sabotage the organization. Damages are not only financial but can also include severe damage to the organization's reputation, resulting from widespread public reporting of the event. Insiders have a significant advantage over external people who might want to cause harm to an organization. Insiders can bypass physical and technical security measures designed to prevent unauthorized access. Mechanisms such as firewalls, intrusion detection systems, and electronic building access systems are implemented primarily to defend against external cyber threats. Not only are insiders aware of the policies, procedures, and technology used in their organizations, but they are often also aware of the vulnerabilities, such as loosely enforced policies and procedures or exploitable technical flaws in networks or systems."

United States. Department of Homeland Security

2005
Cybercrime: Can a Small Business Protect Itself, Forum before the Committee on Small Business, United States Senate, One Hundred Sixth Congress, Second Session, March 9, 2000

Show summary Open resource [pdf] (open full abstract)
From the opening statement of Hon. Christopher S. Bond, "Nine months ago this Committee held a forum on e-Commerce and its potential to allow a small business to compete successfully against its giant competitors. At that forum we outlined some of the obstacles to success in this dynamic market. The goal of this forum is to raise awareness of CyberCrime and to generate a dialogue between law enforcement and the small business community. According to a study by the University of Texas, e-Commerce accounted for the creation of 1.2 million jobs and $300 billion in revenue in 1998 alone. We all recognize what an astonishing growth pattern that is and the pace of it is truly remarkable. What is even more impressive is a recent Forrester Research study concluded that in January 2000 alone there was $2.8 billion in online retail sales, greater than the total $2.4 billion of retail sales for the entire year of 1997. We expect growth in this area to continue with increasingly more business being conducted via the Internet, both through e-retail and through more conventional business-to-business e-Commerce. With such expanded business activity, however, come new threats that we must address. A prime example is computer crime." Statements, letters, and materials submitted for the record include those of the following: Christopher S. Bond, John F. Kerry, Conrad Burns, Paul Conlon, Damon Dozier, Joan Neptune, Mary Riley, Scott Charney, Roger Farnsworth, Mary Ellen Bahret, Richard Barton, Charles H. DeBow, III, Marty Duggan, Jere W. Glover, Vernoica Jacques, Mark Keam, Rick Lane, James Morrison, Matthew Page, Maritza Rivera, Abe Schneier, Anthony R. Wilkinson.

United States. Government Printing Office

2000
Ten Years After: The FBI Since 9/11, Factsheet on International Operations

Show summary Open resource [pdf] (open full abstract)
"Rather than focus on bringing a suspect back to the U.S. to face prosecution, [the Federal Bureau of Investigation (FBI)] now offer[s] whatever assistance [they] can to other governments to support their efforts to fight terrorism, cyber crime, and transnational criminal enterprises. In some countries, [the FBI is] working together on task forces and conducting joint operations. [The FBI] now routinely deploy agents and crime scene experts to assist in the investigation of attacks such as the 2010 bombings in Uganda and the 2008 bombings in Mumbai, India. Agents stationed in Iraq and Afghanistan work directly with international partners to combat terrorism."

United States. Federal Bureau of Investigation

2011
Remarks on the Security and Sustainability Partnerships for Shutting Down Black Markets and Dismantling Webs of Corruption and Criminality

Show summary Open resource [pdf] (open full abstract)
"We meet at a critical time. Our world is becoming more dangerous than ever, and where threats know no boundaries. In the past few years alone, we have witnessed a host of catastrophic disasters and threats that imperil our humanity and planet alike. Across a wide spectrum of global risks, we have seen the devastating effects that earthquakes, typhoons, flooding, pandemics such as ebola, cyber attacks, terrorism, and transnational crime and corruption can have on communities seeking to integrate more fully into the global economy and build more dynamic markets. While climate change and some of these other global shocks are not a topic of our meeting this week, sustainable security will remain one of the pressing global challenges in the coming years and an area that the OECD [Organization for Economic Cooperation and Development] will continue to underscore as part of the High-Level Risk Forum's risk management and resiliency initiatives. Our dialogue today will focus on illicit markets, and how the international community is working across borders to combat criminal entrepreneurs and threat networks that continue to hijack the advances of modernization and profit from trafficking in drugs, humans, counterfeits, endangered wildlife, and other illicit goods. Oil theft has also become an attractive and lucrative area for transnational organized crime and illicit networks. Across black markets around the world, a web of thugs and criminals is corroding and corrupting our institutions and penetrating key sectors by diversifying into high--profit, and low-risk areas such as oil bunkering, counterfeits, and even match fixing in sports."

United States. Department of State

Luna, David M.

2014-10-08
Test Results for Mobile Device Acquisition Tool: CelleBrite UFED 1.1.3.3-Report Manager 1.6.5

Show summary Open resource [pdf] (open full abstract)
This document reports the results from testing CelleBrite UFED 1.1.3.3-Report Manager 1.6.5. "The Computer Forensics Tool Testing (CFTT) program is a joint project of the National Institute of Justice (NIJ), the research and development organization of the U.S. Department of Justice (DOJ), and the National Institute of Standards and Technology's (NIST's) Office of Law Enforcement Standards (OLES) and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications."

National Institute of Justice (U.S.)

National Institute of Standards and Technology (U.S.). Office of Law Enforcement Standards

2010-10
X-Ways Forensics v18.8: Test Results for Disk Imaging Tool

Show summary Open resource [pdf] (open full abstract)
From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security (DHS), the National Institute of Justice (NIJ), and the National Institute of Standards and Technology (NIST) Special Programs Office and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing the disk imaging function of X-Ways Forensics Version 18.8 using the CFTT Federated Testing Test Suite for Disk Imaging, Version 1.0."

United States. Department of Homeland Security. Science and Technology Directorate

2016-10-14
Test Results for Disk Imaging Tool: Falcon-NEO Version 1.1

Show summary Open resource [pdf] (open full abstract)
From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security (DHS), the National Institute of Justice (NIJ), and the National Institute of Standards and Technology (NIST) Special Programs Office and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing the disk imaging function of the Logicube FalconNEO Version 1.1 using the CFTT Federated Testing Test Suite for Disk Imaging, Version 3.1."

United States. Department of Homeland Security. Science and Technology Directorate

2018-10-20
Test Results for Disk Imaging Tool: Guymager Version 0.8.1

Show summary Open resource [pdf] (open full abstract)
From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security (DHS), the National Institute of Justice (NIJ), and the National Institute of Standards and Technology (NIST) Special Programs Office and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing the disk imaging function of Guymager 0.8.1 using the CFTT Federated Testing Test Suite for Disk Imaging, Version 1.0."

United States. Department of Homeland Security. Science and Technology Directorate

2016-10-14
Test Results for Disk Imaging Tool: Cinolink Dual HDD Dock

Show summary Open resource [pdf] (open full abstract)
From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security (DHS) Science and Technology Directorate (S&T), the National Institute of Justice (NIJ), and the National Institute of Standards and Technology (NIST) Special Programs Office and Information Technology Laboratory (ITL). CFTT is supported by other organizations, including the Federal Bureau of Investigation; the U.S. Department of Defense Cyber Crime Center; U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program; and the U.S. Department of Homeland Security's Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection, and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing the disk imaging function of the Cinolink Dual HDD Dock using the CFTT Federated Testing Test Suite for Disk Imaging, Version 5."

United States. Department of Homeland Security. Science and Technology Directorate

2020-06
Test Results for Disk Imaging Tool: Roadkil's Disk Image Version 1.6

Show summary Open resource [pdf] (open full abstract)
From the Introduction: "The Computer Forensics Tool Testing (CFTT) program is a joint project of the Department of Homeland Security Science and Technology Directorate (DHS S&T), the National Institute of Justice, and the National Institute of Standards and Technology (NIST) Special Programs Office and Information Technology Laboratory. CFTT is supported by other organizations, including the Federal Bureau of Investigation, the U.S. Department of Defense Cyber Crime Center, U.S. Internal Revenue Service Criminal Investigation Division Electronic Crimes Program, and the DHS Bureau of Immigration and Customs Enforcement, U.S. Customs and Border Protection and U.S. Secret Service. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. [...] This document reports the results from testing the disk imaging function of Roadkil's Disk Image Version 1.6 using the CFTT Federated Testing Test Suite for Disk Imaging, Version 5."

United States. Department of Homeland Security. Science and Technology Directorate

2020-06

1 2 3 4 5 6 7 8