You are here: silicon.com > Management > Law & Policy

Law & Policy

Expert witness dismisses UK hacking suspect's defence

No evidence teenager's computer compromised by hackers, court hears

By Munir Kotadia

Published: 9 October 2003 15:24 BST

An expert witness in the case of a teenager accused of accidentally launching a distributed denial of service (DDoS) attack on a major US port said on Thursday there was no indication that evidence had been planted on the suspect's hard drive.

The defence counsel for Aaron Caffrey, who is on trial at Southwark Crown Court, had said that his client's computer could have been compromised by a hacker who had altered the system's log files - which record how the machine is being used - and staged an attack from the teenager's computer. But Professor Neil Barrett, technical director at Information Risk Management and an expert witness at the trial, told the court that after examining the physical location of data blocks on Caffrey's computer, there was no evidence that the log files had been altered at a later date.

"If you edit a file after you finish writing it to disk, it results in block fractures. The block that corresponds to the edited text would be written elsewhere. The disk blocks that correspond to this file show no evidence of fracturing and were sandwiched between files that were created before and after it," Barrett told the court.

Barrett conceded that a hacker could, in theory, have planted a different log file on Caffrey's computer, but said it would be obvious that it was inserted later because of the physical position of the file's data blocks.

"There is obviously a way of introducing [the file] on the computer, but not in the correct place," he said.

Caffrey's counsel questioned the validity of Barrett's evidence because the witness had not physically examined the actual hard disk from Caffrey's computer, but an image of it that was sent to him on CD-ROM. Barrett argued that this did not make a difference because the image was "forensically sound".

The case continues.

Munir Kotadia writes for ZDNet UK

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
GP / PCT Information & Performance Analysts

Nature of the Problem: The quality of secondary care commissioned activity is riddled with errors including evidence of miscoding, misallocation of ...

Quantitative Strategist, Major Energy Trading House

These transactions will involve both financial and physical trading across a wide range of commodities such as coal, freight, natural gas, power and ...

Risk Deals Desk Analyst London Oil Major

Do you have commercial market risk experience working with physical and derivatives oil products? Your responsibilities will include - Entering and ...

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.





Quick Sitemap Links: