Designed for security managers and investigators, the book moves through the basic phases of a computer crime investigation. It starts with establishing evidence of a crime and then moves on to determining how the crime occurred, identifying likely suspects, developing the case for prosecution, proving damages, and assessing perpetrators as targets for civil litigation. The book specifically covers investigative measures, information security, and fraud on the Internet, as well as preserving evidence from attacks on computer hardware and environmental support systems and computer hardware. Countermeasures security managers can implement to deal with computer crime are described. An appendix contains further information on information warfare and computer security. References, tables, and figures