A Guide to Forensic Testimony: The Art and Practice of Presenting Testimony As An Expert Technical Witness
||Author: Fred Chris Smith, Rebecca Gurley Bace|
List Price: $49.99
Our Price: Click to see the latest and low price
Publisher: Addison-Wesley Pub Co (09 October, 2002)
Sales Rank: 303,348
Average Customer Rating: 3.75 out of 5
Customer ReviewsRating: 4 out of 5
Very good book, but a bit wordy.
This is a very good book, but a bit wordy.
The authors go into a lot of legal detail. If you are not a lawyer, you can skip these sections, which make up about a third of the book.
But besides that, it is a very good book.
Rating: 3 out of 5
I was given this book as a door prize. As a result I found it a slow starter and was unable to complete the book. However the book is well written and easy to understand. It was also entertaining to read some of the examples of court proceedings. I am sure that if this had been a book I was interested in enough to buy or seek out I would have found it both enjoyable & helpful.
Rating: 4 out of 5
Very comprehensive guide
This book might sound like the most boring security book that was ever written. It is also full of confusing and hard to read
legalese. However, security professionals that might have to deal with law enforcement due to various information security incidents (that means everybody, sooner or later) will have to buy and read it anyway and will be happy they did. The content of the book is simply exclusive. Many of the security books simply collect stuff found on the Internet and package it together - this book shines like a solid gold of unique author's experiences and research.
The interesting thing that while the book tries to convince the reader that doing expert testimony on computer security subjects might be a good thing, it is not clear that every reader will indeed be convinced of that upon reading it. The whole legal system thing is just too big and very different from other IT security professional responsibilities, so that the book might actually project the opposite impression - namely, don't mess with it. The "duty" might not be motivating enough to take a stand and testify, suffer from cross-examination, etc. Understandably, it might be good for professional reputation. It also sees from the book that such reputation can also be destroyed by the expert testimony.
The book first provides a complete history of expert testimony in
various fields, naturally leading the reader to the computer security case. The authors (Rebecca Bace is a renowned expert in the field of security) have clearly done their homework extremely well and managed to present their findings just as well.
The coverage of relevant material seems to be exceptional as
well. Relationship with lawyers, with police, other government bodies, pseudo scientists is all covered in the book.
The book also has many real-life examples, such as from 'US vs
Microsoft' and other recent and famous cases where IT and infosec were involved. It also has some fun fictitious examples, such as 'An Expert's Dream' and 'An Expert's Nightmare' cases, that illustrate the pitfalls of the process.
Overall, its not a fun book to read, but if you find yourself needing to face the courtroom - there is probably no better resource to prepare.
Anton Chuvakin, Ph.D., GCIA is a Senior Security Analyst with a major information security company. His areas of infosec expertise include intrusion detection, UNIX security, forensics, honeypots, etc. In his spare time he maintains his security portal info-secure.org.
· Computer and Intrusion Forensics (Artech House Computer Security Series)
· Cyber Forensics: A Field Manual for Collecting, Examining, and Preserving Evidence of Computer Crimes