Here is an interesting topic championed by Dr. Neal Krawetz. In a nutshell, classical forensics deals with specific evidence tied to a specific person or event. Nonclassical forensics deals with the art (and science) of putting together small, mundane details that reveal more than just the content of the evidence.
Examples:
1. Certain words used can give probabilites of whether the author is male or female or what their native tongue is.
2. Coding practices can help determine who wrote a portion of a malicious program.
Dr. Krawetz presented at Black Hat. In his own words:
You are What You Type: No Classical Computer Forensics
by Dr. Neal Krawetz
My talk, "You Are What You Type", covers some of my research on anti-anonymity technologies. I'll show you techniques for telling if two documents are likely written by the same person, how to better guess gender and nationality, and even how to determine physical attributes like left/right handed, if someone is sitting too close to the monitor, and where their mouse is located. I'm including many real examples that cover the gambit from spammers and phishers to computer viruses and online dating.
Find his web site here:
http://www.hackerfactor.comGet the presentation from Black Hat:
http://www.blackhat.com/presentations/bh-usa-06/BH-US-06-Krawetz.pdfRead an interview with Dr. Krawetz:
http://www.infoworld.com/article/06/08/14/33NMmain_1.htmlDon
General Certification : A+ and Net+
