Stepping Through The Infosec Program

Stepping Through the InfoSec Program

CyberForensics

Cyberforensics is a fairly new word in the technology our industry, but one that n- ertheless has immediately recognizable meaning. Although the word forensics may have its origins in formal debates using evidence, it is now most closely associated with investigation into evidence of crime. As the word cyber has become synonymous with the use of electronic technology, the word cyberforensics bears no mystery. It immediately conveys a serious and concentrated endeavor to identify the evidence of crimes or other attacks committed in cyberspace. Nevertheless, the full implications of the word are less well understood. Cyberforensic activities remain a mystery to most people, even those fully immersed in the design and operation of cyber te- nology. This book sheds light on those activities in a way that is comprehensible not only to technology professionals but also to the technology hobbyist and those simply curious about the ?eld. When I started contributing to the ?eld of cybersecurity, it was an obscure ?eld, rarely mentioned in the mainstream media. According to the FBI, by 2009 organized crime syndicates were making more money via cybercrime than in drug traf?- ing. In spite of the rise in cybercrime and the advance of sophisticated threat actors online, the cyber security profession continues to lag behind in its ability to inves- gate cybercrime and understand the root causes of cyber attacks. In the late 1990s I worked to respond to sophisticated attacks as part of the U. S.

Information Security Education. Empowering People Through Information Security Education

This book constitutes the refereed proceedings of the 17th IFIP WG 11.8 World Conference on Information Security Education, WISE 2025, held in Maribor, Slovenia, during May 21–23, 2025. The 13 full papers presented were carefully reviewed and selected from 30 submissions. The papers are organized in the following topical sections: Workforce and Curriculum Development; Curriculum and Research Development; Gamification in Cybersecurity Education; Innovative Approaches to Cybersecurity Awareness; Papers Invited from SEC; and Discussions.