Educause Security Discussion mailing list archives

Re: Culprits Getting Away


From: Valdis Kletnieks <valdis.kletnieks () VT EDU>
Date: Mon, 20 Nov 2017 02:03:19 -0500

On Mon, 20 Nov 2017 10:55:15 +0800, Afifa Syakila said:

Law & governed the Digital Forensics. The big question is why the culprits
seemed to be always get away with the crime? Aren't the existing Law strong
enough?

1) They aren't always getting away with it - some are indeed caught and convicted.

2) The laws are strong enough - what's lacking is international cooperation
to *enforce* the laws.  For instance, we have a pretty good idea of exactly
who Guccifer 2.0 and Fancy Bear are.  However, extraditing them is going
to be difficult, given that the government they are working with doesn't want
to turn them over.

Even for lesser hackers, if the offense crosses national boundaries it
gets very difficult to prosecute.  Even getting an actual murder suspect
extradited from another country can take years.

3) And the forensics are often a problem - what do you do when the attack
originated from a compromised Windows box sitting in the living room
of an apartment somewhere in Bulgaria?  Getting the event logs from that
box will be next to impossible.  For that matter, the machine could be in
Tennessee and it will *still* be a challenge.

Attachment: _bin
Description:


Current thread: