United States v Gorshkov detailed forensics and case study: expert witness perspective

摘要

Numerous high-profile computer intrusions and denial of service (DOS) incidents occurred during the latter months of 1999 and early 2000, including a significant intrusion of Speakeasy, an Internet service provider based in Seattle. The Federal Bureau of Investigation, Seattle Division, responded to the Speakeasy complaint and subsequently launched a nationally coordinated investigation. Vasily Gorshkov and Alexey Ivanov of Chelyabinsk Russia were subsequently identified as suspects and lured to Seattle as part of the F.B.I.'s Invita undercover operation. Both individuals were arrested as a result of the Invita sting. Vasily Gorshkov was tried by jury in federal court in Seattle and convicted on twenty charges in relation to the 1999 and 2000 computer and network incidents. This paper discusses incident history, case development, investigation, computer forensic data analysis, trial strategy and presentation as well as technology and technical observations/impacts based on expert witness experience in the case.