1 / 41

Internet Profile/History What have YOU been doing on the Web?

Internet Profile/History What have YOU been doing on the Web?. Search strings are saved FOREVER Google, Yahoo and MSN are saved forever Gov subpoenas Web sites visited Stored in index.dat files These files are everywhere Search strings also stored. Personal Information.

apu
Télécharger la présentation

Internet Profile/History What have YOU been doing on the Web?

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Internet Profile/HistoryWhat have YOU been doing on the Web? • Search strings are saved FOREVER • Google, Yahoo and MSN are saved forever • Gov subpoenas • Web sites visited • Stored in index.dat files • These files are everywhere • Search strings also stored

  2. Personal Information • Personally Identifiable Information • Casual Information • Persistence • Location • Discovery

  3. Personal Information • Personally Identifiable Information • Is any piece of information which can potentially be used to uniquely identify, contact, or locate a single person. • http://en.wikipedia.org/wiki/Personally_identifiable_information • Name, SSN, Address • Phone, Credit card, Bank account numbers • Driver’s license, DoB, PoB • E-mail address • Face, fingerprints, handwriting, DNA, iris

  4. Personal Information • Other Personal Information • Medical records • Criminal records • Military records • Age • City, county or State of residence • Approximate age • Gender/race • Grades, salary, or job position

  5. Casual Information • Location • GPS, cell tower, etc. • Purchase history • Travel history • Video rentals, library record • Surveillance photos • Internet activity • IM, e-mail

  6. Information Collection Purchases at Costco, Safeway, etc. Credit card purchases Web searches, visits Web purchases Public databases County records available for $29.95 Credit card processors

  7. The Internet Never Forgets All of your activity on the net is cached and stored Backups Web site backups Beware of Social Networking Sites Job Due Diligence You are everywhere Stuff can be deleted from easy view But it is part of the Web history

  8. It Never Goes Away • It is public • It can and will be used against you • MySpace.com • YouTube.com • SecondLife.com • E-mails • IM • Senator Foley

  9. Purchase History • Costco • Safeway • Amazon • etc.

  10. Web Browsing Logs All over the place User has control over some of the logs Usually in files called index.dat Located in C:\Documents and Settings\Ackler\Local Settings\Temporary Internet Files But also in network shares, etc.

  11. User Behaviour What types of Web sites visited What is the content of the searches Any cached images of interest What is the content of the the Web sites visited Any conclusions on personality of the user

  12. What we are looking for Evidence of Web behavior System usage Files Accessed Cached images Google search strings

  13. Where Usually in hidden files Usually in nonsense files Lots of gibberish Hard to find

  14. Tools Available • Windows Explorer • Does not show every thing • C:>edit /80 index.dat • NetAnalysis - $$ • Index Dat Spy • Very limited output • Good start • No print out • FREE

  15. Windows Explorer Start -> All Programs ->Accessories -> Windows Explorer

  16. Windows Explorer

  17. Where the Stuff Is

  18. Cached images from web browsing

  19. Image

  20. Cookies Folder

  21. Cookie

  22. Go There – What was He Doing?

  23. Index.dat Files Contain records of user and system activity Used for auto-complete User restoration

  24. Where at least one index.dat file is

  25. Index.dat as a text file

  26. Index.dat Spy • View the contents of those obscured index.dat files • Windows and IE keeps much info about you and your Internet activity • Free tool • Locates all of the index.dat files it can find on your computer and network shares http://www.stevengould.org/ IndexDatSpy20.exe Download to your computer. Double click and take defaults.

  27. index.dat Spy Renders the index.dat files in a sort of human readable form. View cookies Review Web browsing history Review Google searches

  28. First Screen

  29. All of the index.dat files

  30. Example

  31. Double Click an Entry

  32. What Were They Looking At?

  33. Google Search String

  34. Mozilla Users

  35. Getting “MozillaHistoryView.exe”

  36. Viewing Mozilla Browsing History

  37. Double Click an Item

  38. Find the Link

  39. Go to the Link

  40. Web History Lab • Use • index.dat Spy • Assignment • Report – use wordpad or MS Word • 2 - 3 pages • Discuss Approach • Evidence Found • 2 URLs and content of Web sites • 2 Google searches • Cookies, etc. • Include in your report • Give concrete examples of each • Summarize the behaviour of computer user owner • Use Alt – Print Screen to copy selected window and paste in your report

More Related