IT IS another escalation in the computer security arms race. Software that can uncover all of a person鈥檚 online activity could, in the hands of the police, put more sex offenders behind bars 鈥� but it may also be exploited to develop new ways of avoiding being caught.
from Stanford University in California have managed to bypass the encryption on a PC鈥檚 hard drive to find out what websites a user has visited and whether they have any data stored in the cloud.
鈥淐ommercial forensic software concentrates on extracting files from a disc, but that鈥檚 not super-helpful in understanding online activity,鈥� says , whose team developed the software. 鈥淲e鈥檝e built a tool that can reconstruct where the user has been online, and what identity they used.鈥� The open-source software, , was launched at the security conference and works with PCs running on the Windows operating system.
Advertisement
聯We鈥檝e built a tool that can reconstruct where the user has been online, and what identity they used聰
The majority of sensitive data on a hard drive, including browsing history, site logins and passwords, uses an algorithm to generate an encryption key based on the standard Windows login.
Last year, Bursztein and his colleagues discovered how this system works 鈥� making them the only team in the world, other than Microsoft, able to decrypt the files. Now the team have made their discovery public, with free access.
The OWADE software combines this new knowledge with existing data-extraction techniques to create a single package that can uncover illegal online activities.
鈥淪ay you鈥檙e working on a paedophilia case and you might want to know if people had interactions with minors on social networking sites,鈥� says Bursztein. Previously, with only access to a hard drive, the police would not be able to match suspects to online identities, let alone gain access to their accounts. 鈥淣ow, law enforcement organisations can extract information from websites like Facebook to find out,鈥� he says.
However, those intent on remaining anonymous could exploit the system. 鈥淚f somebody knows what they鈥檙e doing with their data, they will try and hide it and work around [solutions like this] as much as they can,鈥� says from the University of Salford, UK.
