ONLINE ONLINE APPLI APPLICANT CANT EVENT EVENT Studying - PowerPoint PPT Presentation

ONLINE ONLINE APPLI APPLICANT CANT EVENT EVENT Studying Computer Science at Salford

In Investiga estigating Metada ting Metadata ta Dr Rob Hegarty

Introduction • Dr Rob Hegarty • Senior Lecturer • Teaching – Cyber Security, Digital Forensics, Threat Intelligence • Researching – Cyber Security, Digital Forensics, Emerging Technologies; IoT, Cloud, etc. • Previous Experience • Senior Lecturer Manchester Metropolitan University • Consulting, Training, Developing for Greater Manchester Police • Postdoctoral Researcher Liverpool John Moores University • Police Trainer (Merseyside, Abu Dhabi, Kuwait) • Software Developer (Merseyside Police, Cheshire Constabulary) • PhD Digital Investigations (Cloud) • System Administrator • Supply Teacher • Education; BSc Software Engineering, MSc Cyber Security, PhD Cyber Security / Forensics

Overview • During this session you will learn about: • Virtualisation • Metadata • Compiling programs • Linux and the Command Line Interface • Metadata Extraction • Metadata Analysis and Interpretation • Employability

Virtualisation • Creating virtual resources from physical resources • Examples: • Virtual Machines • Virtual Networks • Virtual Hard Drives • Benefits • Resource Utilisation • Resource Isolation • Running Multiple Operating Systems Concurrently

VirtualBox

Metadata • Metadata is data that describes other data • Example; Telephone Call • Caller Number • Recipient Number • Start and End Time of Call • Call Duration • Example; JPEG EXIF Data • Camera/Phone Model • Time and data of capture • Lens details • Geo-coordinates

Linux and Command Line Interfaces • Linux is a free open source operating system • Command Line Interfaces e.g. Bash Shell, Power Shell, etc • Used by power users • Facilitate rapid input and execution of commands • Commands can be linked together to achieve goals • Are the only interface to many systems • Useful Commands • whoami, pwd, ls, cd

Extracting Metadata • Many tools available: • GUI (Graphical User Interface) Applications or Apps • Websites (Privacy Issues?) • Command Line Applications • Jhead – Cross Platform (Windows, Mac, Linux), open source • ImageMagick – Linux Only, open source

Analysing and Interpreting Metadata • Mobile devices geo-locate using a variety of methods • GPS • Cell Tower Triangulation • Wi-Fi • Bluetooth / Ultrawide band • Fusion of methods • The accuracy of the metadata is determined by many factors: • Cell Tower Range • GPS Accuracy • Open Source Intelligence can augment the results

Practical Exercise Resources • Windows (PowerShell or cmd) or Linux (Shell) • Jhead - Jhead - https://www.sentex.ca/~mwandel/jhead/ • Test Images - https://github.com/arc2h/photos

Listing Files and Unpacking Archives

Compiling JHead

Processing 1.jpg

Processing 1.jpg

Processing 1.jpg

Processing 2.jpg

Processing 2.jpg

Processing 2.jpg

Processing 3.jpg

Processing 3.jpg

Processing 3.jpg

Processing 4.jpg

Processing 4.jpg

Processing 4.jpg

Processing 4.jpg

Processing 5.jpg

Processing 5.jpg

Processing 5.jpg

Employability Computer Science offers a wide variety of career paths • Software Developer • Web Developer • DevOps • Security Analyst • Cyber Forensics Analyst • Penetration Tester • Data Scientist

Summary • This lab covers a wide variety of areas, we are here to help you develop your skills in these and many other areas: • Virtualisation • Linux • Metadata • Command Line Interfaces • Compiling programs • Careers

Resources • Programme details https://www.firstyearmatters.info/cs/programmes.html • VirtualBox - https://www.virtualbox.org/ • Jhead - https://www.sentex.ca/~mwandel/jhead/ • Raspberry Pi - https://www.raspberrypi.org/

Questions • Rob Hegarty – R.C.Hegarty@salford.ac.uk • Other contacts • https://beta.salford.ac.uk/science-engineering-and-environment

THANKS FOR ATTENDING OUR PRESENTATION To see what other presentations are available today, please go back to our event hub www.salford.ac.uk/visit/25-april-2020