Related Images

Professor Craig Valli

Professor Craig Valli

Professor Craig Valli

Professor

Telephone: (61 8)  6304 5109  
Email: c.valli@ecu.edu.au   
Campus: Joondalup  
Room: JO23.306  

 

Responsibilities

Craig is currently the Head of School and a Professor (Digital Forensics) within the School of Computer and Security Science at Edith Cowan University (ECU). He is also the Director of the secau - Security Research Centre within ECU.

Background / Employment History

Craig has over 20 years experience in the IT Industry and consults to industry and government on network security and digital forensics issues. His main consultancy focus is on securing networks and critical infrastructures, detection of network borne threats and forensic analysis of cyber security incidents.

Staff Qualifications

Dip.Teach(WACAE), B.Ed (ECU), M.Manag.Inf.Sys(ECU), DIT(ECU) 

Professional Memberships

  • Australian Computer Society
  • Australian Information Security Association 

Awards and Recognition

  • 2010 WAITTA - IT Achiever of the Year Award
  • 2010 Inventor of the Year Award Finalist

Research

Research Interests

Network Security and Forensics, Honeypots, Intrusion Detection Systems, Internet Misuse, Compute Clustering (Beowulf), Computer Forensics, Wireless Security and SCADA Security

Craig is the Founder of the Australian Digital Forensics Conference and the Australian Information Security Management Conference which run as part of the annual secau - Security Congress. Craig is the Editor of the Journal of Network Forensics and also a Co-Editor of the Journal of Information Warfare. He also serves on numerous security related conference committees and journal editorial committees.

Recent Research Grants

  • EU FP7 - SMART
  • Use of smart surveillance systems, data protection, integrity and sharing information within privacy rules. Total project value: EU 3.4 million
  • NSST - Review of vulnerability in smart grid appliances and networks. The project will investigate vulnerabilities of smart electricity grids through examination enabling technologies such as meters and controllers. Total project value: $195,723.00
  • NSST - Update on Investigation into RFID Threats and Vulnerabilities. The project will investigate RFID (Radio Frequency Identification) vulnerabilities and countermeasure requirements Total project value: $20,000
  • AFFIN NIRAP - RFID for Disaster Victim Identification - This project will design and RFID integrated system for Disaster Victim Identification.

Recent Publications

Books

  • Jones, A & Valli.C (2009) Building a Digital Forensic Laboratory, Butterworth-Heinemann

Refereed Journal Articles

  • Brand, M., C. Valli, et al. (2010). "Malware Forensics: Discovery of the Intent of Deception." Journal of Digital Forensics, Security and Law 5(4): 31-42.
  • Jones, A., C. Valli, et al. (2010). "The 2009 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market." Journal of Digital Forensics, Security and Law 5(4): 43-64.
  • Valli, C. (2010). "Developing VoIP Honeypots: a Preliminary Investigation into Malfeasant Activity." Journal of Digital Forensics, Security and Law 5(2): 35-44.
  • Szewczyk, P. & Valli. C (2009) "Insecurity by Obscurity: A Review of SoHo Router Literature from a Network Security Perspective",Journal of Digital Forensics, Security and Law, 4(3), pp. 5-16
  • Valli, C. (2009). "Visualisation of Honeypot Data Using Graphviz and Afterglow", Journal of Digital Forensics, Security and Law, 4(2), pp. 27-38
  • Jones, A., C. Valli, et al. (2009). “The 2007 analysis of information remaining on disks offered for sale on the second hand market.”, International Journal of Liability and Scientific Enquiry 2(1): 53 – 68
  • Jones, A., Valli, C., & Sutherland, I. (2008). Analysis of Information Remaining on Hand Held Devices Offered for Sale on the Second Hand Market. Journal of Digital Forensics, Security and Law, 3(2).
  • Jones, A., Valli, C., Sutherland, I. and G. Dardick (2008), The 2007 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market, Journal of Digital Forensics, Security and Law, Vol 3, Number 1, page 23-36
  • Valli, C. (2007) Using honyepots as a strategic internal countermeasure, Journal of Information and Computer Security, 2007, Vol 1, Issue 4 pp 430-436
  • Valli, C. (2006) A Preliminary Investigation into Malware Propagation on Australian ISP networks using the mwcollect Malware Collector daemon, Journal of Information Warfare, Vol 5, Issue 1
  • Jones, A., Valli, C., Sutherland, I. and Thomas, P (2006) The 2006 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market, Journal of Digital Forensics, Security and Law, Vol 1, Number 3, page 23-36
  • Morfitt, K and Valli, C. (2006) A Forensic Log File Extraction Tool for ICQ Instant Messaging Clients, Journal of Digital Forensics, Security and Law, Vol 1, Number 3, page 51-64

Conference Papers

  • Brand, M., C. Valli, et al. (2011). A Threat to Cyber Resilience: A Malware Rebirthing Botnet. The 2nd International Cyber Resilience Conference, The Duxton Hotel, Perth, Western Australia.
  • Limwiriyakul, S. and C. Valli (2011). An IT Security Investigation into the Online Payment Systems of Selected Local Government Councils in WA. SAM 2011 - Security and Management. Las Vegas, Nevada, CSREA Press: 598-604.
  • Valli, C., A. Woodward, et al. (2011). Backtrack in the Outback - A Report on Cyber Security Evaluation of Organisations in Western Australia Conference on Digital Forensics, Security and Law. G. Dardick. Richmond, Virginia, USA CSREA Press: 191-197.
  • M. Brand, C. Valli, and A. Woodward, (2010) Lessons Learned from an Investigation into the Analysis Avoidance Techniques of Malicious Software, 8th Australian Digital Forensics Conference, Duxton Hotel, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 31-38.
  • M. Brand, C. Valli, and A. Woodward, (2010) Malware Forensics: Discovery of the Intent of Deception, 8th Australian Digital Forensics Conference, Duxton Hotel, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 39-45.
  • A. Jones, C. Valli, G. S. Dardick, I. Sutherland, G. Dabibi, and G. Davies, (2010) The 2009 Analysis of Information Remaining on Disks Offered for Sale on the Second Hand Market in 8th Australian Digital Forensics Conference, Duxton Hotel, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 92-105.
  • C. Valli, (2010) An Analysis of Malfeasant Activity Directed at a VoIP Honeypot," in 8th Australian Digital Forensics Conference, Duxton Hotel, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 169-174.
  • Szewczyk, P., Valli, C. (2010). Ignorant Experts: Computer and Network Security Support from Internet Service Providers. Paper presented at the IEEE 4th International Conference on Network and System Security, Crown Conference Centre Melbourne, Victoria.
  • M. Nur-E-Alam, M. Vasiliev, K. Alameh, and C. Valli,(2010) "Magneto-Optical Visualisation for High-Resolution Forensic Data Recovery Using Advanced Thin Film Nano-Materials," in The 1st International Cyber Resilience Conference, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 78-82.
  • C. Valli and M. A.-. Lawati,(2010) "Developing Robust VoIP Router Honeypots Using Device Fingerprints," in The 1st International Cyber Resilience Conference, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 90-96.
  • A. Woodward and C. Valli,(2010) "Which Organisational Model Meets Best Practice Criterion for Critical Infrastructure Providers: An Examination of The Australian Perspective Based on Case Studies," in The 1st International Cyber Resilience Conference, Perth, Western Australia: secau - Security Research Centre, Edith Cowan University, 2010, pp. 118-125.
  • Valli, C. & Hannay, P., (2010) Geotagging Where Cyberspace Comes to Your Place,Proceedings of the 2010 International Conference on Security & Management, SAM 2010, Las Vegas Nevada, USA
  • Valli, C. & Al Lawati, M. (2010) Developing VoIP Router honeypots,Proceedings of the 2010 International Conference on Security & Management, SAM 2010, Las Vegas Nevada, USA
  • Valli, C. (2010) Developing VoIP Honeypots: a Preliminary Investigation into Malfeasant Activity, The 2010 ADFSL Conference on Digital Forensics, Security and Law, May 19-21, 2010
  • Valli, C., (2009). The not so smart, smart grid – potential security risks associated with the deployment of smart grid technologies. Proceedings of The 7th Australian Digital Forensics Conference, 1st - 3rd December, 2009 Edith Cowan University, Perth, Western Australia. pp 22-26
  • Jones, A. Valli, C & Dabibi, G. (2009) The 2009 Analysis of Information Remaining on USB Storage Devices Offered for Sale on the Second Hand Market, Proceedings of The 7th Australian Digital Forensics Conference, 1st - 3rd December, 2009 Edith Cowan University, Perth, Western Australia. pp 8 - 15
  • Valli, C. (2009). Visualisation of Honeypot data using Graphviz and Afterglow. ADFSL Conference on Digital Forensics, Security and Law, Burlington, Vermont, USA.
  • Valli, C. (2009) SCADA Forensics with Snort IDS, Presented at WORLDCOMP2009, Security and Management Conference 2009, Las Vegas, 13-17th July, 2009
  • Valli, C. & Woodward, A. (2009) SCADA – Slowly Circling A Disaster Area, Presented at WORLDCOMP2009, Security and Management Conference 2009, Las Vegas, 13-17th July, 2009
  • Williams, P.A.H & Valli.C (2008) Trust me. I am a Doctor. Your records are safe…, Paper presented at the The 6th Australian Information Security Management Conference, Edith Cowan University, Mount Lawley Campus, Western Australia
  • Valli, C., & Woodward, A. (2008). Oops The 2008 Australian study of remnant data contained on 2nd hand hard disks: the saga continues. Paper presented at the The 6th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia.
  • Woodward, A. & Valli.C (2008) Issues common to Australian critical infrastructure providers SCADA networks discovered through computer and network vulnerability analysis, Paper presented at the The 6th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia
  • Valli, C and Jones, A (2008) A study of 2nd Hand Blackberry for sale - World class security foiled by humans, Proceedings of the 2008 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM 2008 - The 2008 International Conference on Security & Management, Las Vegas, USA
  • Valli, C (2008), SIMPLE - Rethinking the monolithic approach to digital forensics, 3rd Conference on Digital Forensics, The 2008 Proceedings of the Conference on Digital Forensics, Security and Law Oklahoma City, Oklahoma, USA on April 23-25, 2008
  • Valli, C., & Woodward, A. (2007, 3rd December, 2007). Oops They Did it Again: Results of the 2007 Australian Remnant Hard Disk Study. Paper presented at the The 5th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia.
  • Valli, C., & Wooten, A. (2007, 3rd December, 2007). An Overview of ADSL Homed Nepenthes Honeypots In Western Australia. Paper presented at the The 5th Australian Digital Forensics Conference, Edith Cowan University, Mount Lawley Campus, Western Australia.
  • Valli, C. (2007). IT Sharps: Disposing of your IT medical waste, In H.R. Arabnia & S. Aissi (Eds.) Proceedings of the 2007 World Congress in Computer Science, Computer Engineering, and Applied Computing - SAM 2007 - The 2007 International Conference on Security & Management, pp. USA: CSREA Press.
  • Woodward, A. & Valli, C. (2007) Do Current Erasure Programs Remove Evidence of BitTorrent Activity? 2nd Conference on Digital Forensics, Crystal City, Arlington, Virginia
  • Valli, C. (2006) The Insider Threat to Medical Records; Has the Network Age Changed Anything?, SAM2006: Proceedings of The 2006 International Conference on Security and Management, Las Vegas Nevada, June 26-29, pp 410-414
  • Valli, C. (2006) SQL Injection - Threats to Medical Systems; Issues and Countermeasures, SAM2006: Proceedings of The 2006 International Conference on Security and Management, Las Vegas Nevada, June 26-29, pp 421-425
  • Valli, C. (2006) A Tale of Two Daemons - mwcollect, 1st Conference on Digital Forensics, Imperial Palace, Las Vegas, Nevada.
  • Woodward, A. & Valli, C. (2006) Do Current Erasure Programs Remove Evidence of BitTorrent Activity?, 1st Conference on Digital Forensics, Imperial Palace, Las Vegas, Nevada.