1. “Information provided in an Intrusion Detection System is useful in dealing with computer crimes.” Based on what you’ve read in this chapter, discuss the legal admissibility of such information. What information could complement this information to build a stronger case?
2. Security experts perform the difficult task of balancing the art and science of security. While the art relates to aspects of diplomacy, persuasion, and understanding different mind-sets, the science deals with establishing measures, forensics, and intrusion detection. Given that security is both an art an d a science, discuss the role of computer forensics in the overall security of the enterprise.