Craig Valli's Publications List

The 2007 analysis of information remaining on disks offered for sale on the second hand market

2009-01-29T16:21:00Z

The purpose of this on-going research has been to gain an understanding of the information that remains on disposed hard disks and to determine the level of damage that could, potentially be caused, if the information fell into the wrong hands. The study examines disks that have been obtained in a number of countries to determine whether there is any detectable national or regional variance in the...

Andrew Jones, Craig Valli, Glenn S Dardick, Iain Sutherland (2009) International Journal of Liability and Scientific Enquiry 2: 1 53-68

Issues common to Australian critical infrastructure providers SCADA networks discovered through computer and network vulnerability analysis

2009-01-29T16:21:00Z

This paper reports on generic issues discovered as a result of conducting computer and network vulnerability xD;assessments (CNVA) on Australian critical infrastructure providers. Generic issues discovered included policy, xD;governance, IT specific such as segregation, patching and updating. Physical security was also lacking in some cases. xD;Another issue was that previous security audits had f...

Andrew Woodward, Craig Valli, Craig Valli, Andrew Woodward (2008) : 206-210

Trust me. I am a Doctor. Your records are safe?

2009-01-29T16:21:00Z

Patricia A H Williams, Craig Valli, Craig Valli, Andrew Woodward (2008) : 155-162

SIMPLE - Rethinking the monolithic approach to digital forensics

2009-01-29T16:21:00Z

C Valli (2008) : 23-25

The 2008 Australian study of remnant data contained on 2nd hand hard disks:The saga continues

2009-01-29T16:21:00Z

This study looked for remnant data on enterprise level hard drives that were purchased through auctions. The xD;drives were analysed for information, be it topical or formatted. In the event that drives were formatted, forensic xD;tools were used to recover this data. This years study revealed a high level of not simply un-erased drives, but xD;drives which contained information that related to cr...

Craig Valli, Andrew Woodward, Craig Valli, Andrew Woodward (2008) : 211-214

The 2007 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market

2009-01-29T16:21:00Z

Andrew Jones, Craig Valli, Iain Sutherland, Glenn Dardick (2008) Journal of Digital Forensics, Security and Law 3: 1 23-36

Analysis of Information Remaining on Hand Held Devices Offered for Sale on the Second Hand Market

2009-01-29T16:21:00Z

A Jones, C Valli, I Sutherland (2008) Journal of Digital Forensics, Security and Law 3: 2

Building a Digital Forensic Laboratory

2009-01-29T16:21:00Z

Andrew Jones, Craig Valli (2008) :

An Overview of ADSL Homed Nepenthes Honeypots In Western Australia

2009-01-29T16:21:00Z

This paper outlines initial analysis from research in progress into ADSL homed Nepenthes honeypots. One of the Nepenthes honeypots prime objective in this research was the collection of malware for analysis and dissection. A further objective is the analysis of risks that are circulating within ISP networks in Western Australian. What differentiates Nepenthes from many traditional honeypot designs...

Craig Valli, Aaron Wooten, Dr Craig Valli, Dr Andrew Woodward (2007) : 202-207

Honeypot technologies and their applicability as a strategic internal countermeasure

2009-01-29T16:21:00Z

Craig Valli (2007) International Journal of Information and Computer Security 1: 4 430-436

IT Sharps : Disposing of your IT medical waste

2009-01-29T16:21:00Z

Craig Valli, H R Arabnia & S Aissi (2007) :

Do Current Erasure Programs Remove Evidence of BitTorrent Activity?

2009-01-29T16:21:00Z

Andrew Woodward, Craig Valli (2007) : 147-158

Oops They Did it Again : Results of the 2007 Australian Remnant Hard Disk Study

2009-01-29T16:21:00Z

Craig Valli, Andrew Woodward, Dr Craig Valli, Dr Andrew Woodward (2007) :

Personal Firewalls - Testing Robustness

2009-01-29T16:21:00Z

Patryk Szewczyk, Craig Valli, Craig Valli, Andrew Woodward (2006) : 105-112

Establishing a vendor neutral skills based framework for digital forensics curriculum development and competence assessment

2009-01-29T16:21:00Z

Craig Valli, Dr Craig Valli and Dr Andrew Woodward (2006) : 153-158

Honeypots : How do you know when you're inside one?

2009-01-29T16:21:00Z

Simon Innes, Craig Valli, Dr C Valli and Dr A Woodward (2006) : 78-83

The implemention of E-mail content management in a large corporation

2009-01-29T16:21:00Z

Michael Hansen, Craig Valli, Dr Craig Valli and Dr Andrew Woodward (2006) : 103-113

The Insider Threat to Medical Records; Has the Network Age Changed Anything?

2009-01-29T16:21:00Z

There is increasing pressure on medical practices to use digital information systems for storage of patient data. Some consideration is given to protecting these systems from a external or “ hacker” focus. This paper looks at the issue that the increasing use of digital information systems has for insider malfeasanc

Craig Valli (2006) : 410-414

SQL Injection - Threats to Medical Systems; Issues and Countermeasures

2009-01-29T16:21:00Z

A vast majority of medical information systems use Standard Query Language databases (SQL) as the underlying technology to deliver medical records in a timely and efficient manner. SQL is a standardised and well entrenched database technology, which allows for the development of robust, customised applications for information management. In recent years, SQL has been used as the back-end to many ...

C Valli (2006) : 421-425

The 2006 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market

2009-01-29T16:21:00Z

Andrew Jones, Craig Valli, Iain Sutherland, Paula Thomas (2006) Journal of Digital Forensics, Security and Law 1: 3 23-36

A Preliminary Investigation into Malware Propagation on Australian ISP networks using the mwcollect Malware Collector daemon

2009-01-29T16:21:00Z

C Valli (2006) Journal of Information Warfare 5: 1

A Forensic Log File Extraction Tool for ICQ Instant Messaging Clients

2009-01-29T16:21:00Z

Instant messenger programs such as ICQ are often used by hackers and criminals for illicit purposes and xD;consequently the log files from such programs are of interest in a forensic investigation. This paper outlines xD;research that has resulted in the development of a tool for the extraction of ICQ log file entries. Detailed xD;reconstruction of data from log files was achieved with a number of...

K Morfitt, C Valli (2006) Journal of Digital Forensics, Security and Law 1: 3 51-64

After Conversation - A Forensic ICQ Logfile Extraction Tool

2009-01-29T16:21:00Z

K Morfitt, C Valli, Craig Valli, Andrew Woodward (2005) : 54-61

Integrating Open Source Protections into SCADA Networks

2009-01-29T16:21:00Z

Craig Valli, Graeme Pye & Matthew Warren (2005) : 165-168

Issues relating to the Forensics Analysis of PDA and Telephony (PDAT) enabled devices

2009-01-29T16:21:00Z

Craig Valli (2005) :

An investigation into long range detection of passive UHF RFID tags

2009-01-29T16:21:00Z

Radio frequency identification tags (RFID) have been in use for a number of years, in a variety of applications. They are a small computer chip like device that can range in size from a thumbnail to a credit card size device. They consist of a small silicon chip, and an antenna used to receive and transmit data. When a tag receives a signal from a valid reader it sends a response, typically a tag ...

Craig Valli, Andrew Woodward, Ken Wild, Reino Karvinen, Dr. Craig Valli and Dr. Andrew Woodward (2005) : 84-86

An investigation into the efficiency of forensic erasure tools for hard disk mechanisms

2009-01-29T16:21:00Z

One of the common anecdotal complaints used when defending the insecure erasure of hard disks is the length of time taken to affect a secure erasure. This paper discusses results of experiments conducted with Unix/Linux based hard disk wiping software when run on various machines and hard disk mechanisms in terms of size, speed and interface. The initial research has uncovered a range of issues an...

Craig Valli, Paul Patak, Dr. Craig Valli and Dr. Andrew Woodward (2005) : 79-83

A UK and Australian Study of Hard Disk Disposal

2009-01-29T16:21:00Z

Recent studies in Australia and the United Kingdom indicate that a broad cross-section of organisations are failing to adequately protect or erase confidential data stored on hard disk drives before subsequent disposal. Over 90% of hard disks that were examined as a result of the two Independent studies were in an easily recoverable state with some drives simply requiring a boot. This paper will g...

Craig Valli, Andy Jones, Dr. Craig Valli and Dr. Andrew Woodward (2005) : 74-78

Honeypot technologies and their applicability as an internal countermeasure

2009-01-29T16:21:00Z

Honeypots or honeynets are a technology that is rapidly maturing and establishing this archetype of countermeasure as viable and useful in modern network defence. Honeypot technology is now at a point of development where near real-time monitoring and forensic analysis of security events can occur. This paper explores the hurdles to be overcome for the internal deployment of honeypot technologies.

Craig Valli, Dr. Craig Valli and Dr. Andrew Woodward (2005) : 68-73

Throwing the Enterprise out with the Hard Disk

2009-01-29T16:21:00Z

Organisations and individuals are increasingly store information and data about themselves on a wide variety xD;of digital devices. These devices form an organisation’s ‘digital memory’ and as should be safeguarding xD;against disclosure and breaches of integrity. Many organisations and individuals are employing various xD;countermeasures often at considerable expense to protect this data. H...

Craig Valli, Craig Valli (2004) :

WITS - Wireless Intrusion Tracking System

2009-01-29T16:21:00Z

Craig Valli (2004) :

802.11b Wireless Networks Insecure at Any Speed

2009-01-29T16:21:00Z

Craig Valli, Peter Wolski, Hamid R Arabnia, Selim Aissi, Youngsong Mun (2004) : 154-158

Wireless Snort - A WIDS in Progess

2009-01-29T16:21:00Z

The Snort intrusion detection system is a widely used and well-regarded open sourcesystem used for the xD;detection of malicious activity in conventional wired networks. Recently, software patches to enable 802.11 xD;wireless intrusion detection capability in Snort have been released. This paper focuses on the lessons learned xD;from a live deployment of these wireless extensions to the Snort IDS....

Craig Valli, Craig Valli (2004) :

A case study in the security of network-enabled devices

2009-01-29T16:21:00Z

S Xenitellis, C Valli (2004) Journal of Information Warfare 3: 1 54-62

Throwing out the Enterprise with the Hard Disk

2009-01-29T16:21:00Z

Organisations and individuals are increasingly store information and data about themselves on a wide variety of digital devices. These devices form an organisation’s ‘digital memory’ and as should be safeguarding against disclosure and breaches of integrity. Many organisations and individuals are employing various countermeasures often at considerable expense to protect this data. However, e...

Craig Valli (2004) : 124-129

Non-Business use of the WWW in three Western Australian Organisations

2009-01-29T16:21:00Z

Craig Valli (2004) Internet Research 14: 5 353-359

An Initial Investigation into the Performance of the Honeyd Virtual Honeypot System

2009-01-29T16:21:00Z

Nirbhay Gupta, Craig Valli, Jill Slay (2003) :

Honeyd - A fingerprinting Artifice

2009-01-29T16:21:00Z

Craig Valli, Craig Valli, Matthew Warren (2003) :

Industry Certifications : Challenges For The Conduct Of University Security Based Courses

2009-01-29T16:21:00Z

Craig Valli, Dr. Jill Slay (2003) :

A Case Study in the Security of Network Enabled Devices

2009-01-29T16:21:00Z

Simos Xenitellis, Craig Valli, W Hutchinson (2003) :

The Proxy Bakers Dirty Dozen - An analysis of abusive users of a WWW cache

2009-01-29T16:21:00Z

Craig Valli, Carole Alcock, Lois Burgess, Khin Than Win Joan Cooper (2002) :

If You go Down the Internet Today - Deceptive Honeypots

2009-01-29T16:21:00Z

Craig Valli, Suen Yek, W x9;Hutchinson (2002) :

The New Homeland Defence

2009-01-29T16:21:00Z

Craig Valli, Bill Hutchinson (2002) : 143-148

An Examination Of Non-Business Usage of the World Wide Web in Two Western Australian Organisations

2009-01-29T16:21:00Z

Craig Valli, M Warren, J Barlow (2002) :

With Speed the Hacker Cometh

2009-01-29T16:21:00Z

Craig Valli, William Hutchinson (2002) : 203-209

The Misuse of the Internet at Work

2009-01-29T16:21:00Z

Craig Valli, P S Dowland S. F. Furnell (2002) : 591-597

NIDH - Network Intrusion Detection Hierarchy - A model for gathering attack intelligence

2009-01-29T16:21:00Z

Craig Valli (2001) Journal of Information Warfare 1: 1

Automaton hackers

2009-01-29T16:21:00Z

Craig Valli, Alice Voeten-Lim, W Hutchinson, M Warren, J Burn (2001) : 133-143

An Initial Study of Australian On-Line Bookstores

2009-01-29T16:21:00Z

Craig Valli, Peter Marshall (2001) :

The Stumbling Blocks of Trust in Virtual Organising

2009-01-29T16:21:00Z

Craig Valli, Business Information Technology Management (2001) :

Digital chimney sweeps - maximising your internet connections business potential

2009-01-29T16:21:00Z

Craig Valli, Sue Stoney, Janice Burn (2001) : 299-307

NIDH - Network Intrusion Detection Hierarchy - A model for gathering attack intelligence

2009-01-29T16:21:00Z

Craig Valli, We-BCentre. COM (2001) :

Key Knowledge Matrix - A Tool for Guiding an Intranet Based Knowledge Management System

2009-01-29T16:21:00Z

Craig Valli, We-BCentre. COM (2001) :

The Well Bookshop - Moving to Virtuality

2009-01-29T16:21:00Z

Craig Valli, Business Information Technology Management (2001) :

Achilles is Alive & Well - Trust and Virtual Organising

2009-01-29T16:21:00Z

Craig Valli, We-BCentre. COM (2000) :