The TJX and Heartland cases took place over many years (approximately 2005 to 2010), from the time that networks were initially breached and millions of credit card numbers were compromised, through forensics investigation involving many agencies and organizations, to prosecution and final sentencing. Cases of this type are becoming more the norm, particularly when conducted on the internet. They present daunting challenges in conducting forensics analysis and investigation involving terabytes of information.

In this podcast, Kevin Moore and Cal Waits, members of CERT’s Forensics Team, discuss CERT contributions to helping solve the TJX and Heartland data breach cases, the increasing sophistication and organization of the intruder community, and forensics analysis approaches for complex, distributed investigations including CERT’s Clustered Computing Analysis Platform (C-CAP).

PODCAST

MP3 (8.06 MB)