Book Review: Haggin, D. J. (2005). Advanced DUI Investigation: A Training and Reference Manual. Springfield, IL: Charles C Thomas. 223 pp

• Author: David J. Hanson
• DOI: 10.1177/0734016807304855
• Date: 01 September 2007
• Published date: 01 September 2007
• Subject Matter: Articles

understand how digital evidence is acquired from computer systems, as well as how the

forensic science process is applied to computers. The rest of this section has chapters on

the forensics examination of Windows, Unix, Mac, and handheld computers.

Part 3 (five chapters, 162 pages) is called “Networks.” Like the previous section, this one

starts out with two chapters that provide the necessary technology and protocol background

for understanding how digital evidence is acquired from networks, as well as how the

forensic science process is applied to network data. Networks are particularly complex to

examine because they are dynamic and can be large (spanning several states, countries, or

continents), as well as because it is impossible to “secure the scene.” The remaining chap-

ters cover ways in which information can be acquired from network devices, network logs,

TCP/IP (the Transmission Control Protocol/Internet Protocol suite from the lingua franca

of the Internet), and Internet applications.

Part 4 (four chapters, 106 pages) is called “Investigating Computer Crime.” This section

takes a step back and looks at the big picture of investigating crimes involving computers.

The chapters here discuss the investigation of computer intrusions, Internet sex offenders, and

cybertsalking. Digital evidence as an alibi—and how to corroborate or refute such evidence—

is also discussed.

The final part is titled “Guidelines” (two chapters, 20 pages) and provides some basic

procedures for handling and examining digital evidence. This section is followed by a

detailed bibliography, glossary, and index.

Casey’s book is extraordinarily well written and very thorough; the few missing or

sparsely covered topics (e.g., more could be written about TCP/IP and various file systems,

the coverage of cryptography is a little weak, and there is no mention of whole-disk encryp-

tion or steganography) are amply covered by other literature, and any such deficiencies are

more than made up for by the overall contents and quality of the book.

Digital Evidence and Computer Crime is a must-have in the reference library of any

computer forensics professional, laboratory, and/or practice. Despite the focus on law and

forensics process, the book is not intended just for the law enforcement community; it can

be used equally well in the private sector, by either third-party forensics examiners or foren-

sics investigators that are part of an organization’s information security group. The infor-

mation is timely and practical, and presented in a very readable manner.

The bottom-line is this: I spent my own money to purchase (the first copy of) this book.

No volume can get a higher recommendation than that.

Gary C. Kessler

Champlain College, Burlington, VT

Haggin, D. J. (2005). Advanced DUI Investigation:

A Training and Reference Manual.

Springfield, IL: Charles C Thomas. 223 pp.

DOI: 10.1177/0734016807304855

Although all law enforcement officers who have graduated from a police academy have

received some basic training in the detection and arrest of impaired drivers, the time

282 Criminal Justice Review