Problem

(a) As a forensic investigator, you are needed to trace the source of an email. It is suspected that the email header has been forged. Show how you would proceed to be able to find the IP address of the person who has sent the email. Your discussion should involve the different approaches you would use considering the presence or absence of a proxy server in the sender's network.

(b) Attackers use anonymous remailers to send email to recipients.

(i) Contrast and Compare pseudonymous remailers and cypherpunk remailers.

(ii) Show the main disadvantage of the penet.fi anonymous remailer.

(iii) Does the MixMinion remailer (Type III) provides two way communication? Justify your answer.

(c) Name three email forensics tools.