A unique Cloud environment has been used by Edinburgh Napier researchers to analyse the impact of the Heartbleed vulnerability. This environment allows researchers to study the operation of the vulnerability without accessing any sensitive information on Web sites. It is currently being used within undergraduate and postgraduate teaching within the School of Computing at Edinburgh Napier, but can easily be setup to analyse malware within an isolated and sandboxed environment.
The work has identified unique viewpoints on the vulnerability, including related to the viewing of sensistive information by intruders related to the scanning for the vulnerabilty [here].
Along with this the Forensics Cloud – known as DFET (Digital Forensics Evaluation and training – integrates into a funded EU Project, which aims to train law enforcement professionals around the World on state-of-the-art cyber infrastructures. It also integrates into a Europe Centre for Excellence for training for Law Enforcement, of which Scotland is defined a key member.
Work is on-going with a number of training partners, including with Police Scotland, on advanced digital forensics and cybercrime training.