2026-06-11T12:17:31.070Z http://ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai

ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai:2:224 2013-10-29T14:05:48Z 2

THE USE OF ETHICAL HACKING IN ACTIVE FORENSIC INVESTIGATION 2013 http://ezaposleni.singidunum.ac.rs/rest/sciNaucniRezultati/oai/record/2/224 www.metalurgia.ro I. Franc G. Grubor A. NJeguš In this work the valuable definition of hacking is implied. In the context of justified application it is called ethical hacking. For the use of hacking in digital forensic numerous questions are raised concerning conditions for ethical acceptance. However, in some cases of computer crime, system owner’s consent is not necessary or it is not realizable. Therefore, it should be a trading between forensic requirements (secrecy, consistency, authenticity etc.) and real ethical hacking limits. Ethical hacking methodology is applicable only to the processes of remote live forensic. The tools for data acquisition can be used locally or transferred through available network connection. In the experimental stage of this work, the four virtual machines (VMs) were used. The hacker distribution Back Track v.5 R3, based on Ubuntu 10.04 (Lucid Lynx LTS), KDE 4.5 and Gnome 2.30 is applied to a hybrid active forensic model in virtualized and simulated investigation scenario, using Windows 7, 32b, and Windows 7, 64b, and Windows XP, SP3 VMs, connected by a network switch. The Social Engineering methods are implicitly used for making a user to somehow start payload file, transferred to Windows 7 OS. The VM Windows XP, SP3 is used as the forensic acquisition tool and data become available for the DF investigation as ordinary files. VMWare Workstation 9 is used for the virtualization processes article XVIII 8 265 269 1582-2214 Metalurgia International