Forensic computing studies the anatomy of computer crime
Good article on The Honeypot Project, abstract:
...computer forensics is a growing commercial and legal activity. It even has its own academic literature. Computer forensics refers to the set of tools and techniques that is needed to find, preserve and analyse fragile digital evidence, which is susceptible to alteration and erasure at many levels. Its practitioners gather these data, and create a so-called “audit trail” for criminal prosecutions. They search for information which may be encrypted or hidden in graphics files, unallocated disk-space and even random memory dumps known as file slack. Most cunningly of all, they set up “honeypot” computers that lure malicious hackers (as the branch of the hacking fraternity that aims to damage the machines it gains access to is known) into giving themselves, and their techniques, away.
