Dr John Haggerty

Lecturer in Information Systems Security

• Newton Building Room 203
• T: +44 (0)161 295 6329
• E: J.Haggerty@salford.ac.uk
• SEEK: Research profile

After some years working in the 'real world', I returned to academia in 1999 to undertake my MSc in Computing and Information Systems and then my PhD entitled "DiDDeM: A System for Early Detection of Denial-of-Service Attacks" (2004), both at Liverpool John Moores University. I have continued to actively research the areas of computer security and digital forensics.

I am Programme Leader for MSc Information Security at the University of Salford. Students from this Programme took part in the EU-funded Erasmus Intensive Programme 'e-Discovery: Detectives in the Digital Age' in February 2012. Prior to joining CSE at the University of Salford in September 2009, I was Lecturer in Computer Security and Digital Forensics at Liverpool John Moores University (2003-2009).

I am teaching the following during the 2012-2013 academic year:

Semester 1

Information Security Technologies (Level 7)

Computer Forensics (Level 6)

Semester 2

Security in Practice (Level 7)

EU-funded Erasmus Intensive Programme 'e-Discovery: Detectives in the Digital Age'

My main research interests include network security, computer forensics, signature matching and mobile computing. I continue to have active links with practitioners within these fields and I hope that some of these help to shape my research, and vice versa. As such, I hold patents for new computer forensics approaches that I have developed. These have received major investment from a university and commercial collaboration to develop the tools for market.

I am also currently working on an inter-disciplinary, collaborative project with the School of History, University of Nottingham, analysing 18th century British-Atlantic business networks using tools and techniques associated with digital forensics investigations.

BA(Hons), MSc, PhD, MBCS

Haggerty, J., Haggerty, S. & Taylor, M.J., "Visual Triage of Email Network Narratives for Digital Investigations", Proceedings of the European Information Security Multi-Conference, Lisbon, Portugal, 8-9 May, pp. 102-111, 2013.

Roberts, M.P. & Haggerty, J., "MetaFor: Metadata Signatures for Automated Remote File Identification in Forensic Investigations", Proceedings of the European Information Security Multi-Conference, Lisbon, Portugal, 8-9 May, pp. 123-132, 2013.

Haggerty, J., Casson, M.C., Haggerty, S. & Taylor, M.J., "A Framework for the Forensic Analysis of User Interaction with Social Media", International Journal of Digital Crime and Forensics, 4 (4), pp. 15-30, 2012.

Taylor, M., Hughes, G., Haggerty, J., Gresty, D. & Almond, P., "Digital Evidence from Mobile Telephone Applications", Computer Law and Security Review, 28 (3), pp. 335-339, 2012.

Haggerty, J., Casson, M.C., Haggerty, S. & Taylor, M.J., "Forensic Analysis of User Interaction with Social Media: A Methodology", Proceedings of the 7th Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 12), Crete, Greece, 6 - 8 June, pp. 66 - 75, 2012.

Taylor, M., Haggerty, J., Gresty, D. & Berry, T., "Digital Evidence from Peer-to-Peer Networks", Computer Law and Security Review, 27 (6), pp. 647-652, 2011.

Haggerty, J., Karran, A.J., Lamb, D.J. & Taylor, M.J., "A Framework for the Forensic Investigation of Unstructured Email Relationship Data", International Journal of Digital Crime and Forensics, 3 (3), pp. 1-18, 2011.

Karran, A., Haggerty, J., Lamb, D., Taylor, M. & Llewellyn-Jones, D., "A Social Network Discovery Model for Digital Forensics Investigations", Proceedings of the 6th Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 11), Kingston, UK, 7 - 8 July, pp. 160-170, 2011.

Haggerty, J. & Haggerty, S., "The Life Cycle of a Metropolitan Business Network: Liverpool 1750-1810", Explorations in Economic History, 48 (2), pp. 189 - 206, 2011.

Haggerty, J. & Haggerty, S., "Temporal Social Network Analysis for Historians: A Case Study", Proceedings of the International Conference on Visualization Theory and Applications (IVAPP 2011), Algarve, Portugal, 5 - 7 March, pp. 207 - 217, 2011.

Fergus, P., Taylor, M., Haggerty, J., Bracegirdle, L. & Merabti, M., "Next Generation Body Area Networks and Smart Environments for Healthcare", in Smart Healthcare Applications and Services: Developments and Practices, Rocker, C. & Ziefle, M. (eds.), IGI Global, pp. 46 - 74, 2011.

Indrasinghe, S., Pereira, R. & Haggerty, J., "Efficient Address Management for Mobile Ad Hoc Networks", Proceedings of the 5th International Conference on Broadband and Wireless Computing (BWCCA 2010), Fukoka, Japan, 4 - 6 November, pp. 1 - 8, 2010.

Taylor, M., Haggerty, J., Gresty, D. & Fergus, P., "Forensic Investigation of Peer-to-Peer Networks", Network Security, pp. 12 - 15, September, 2010.

Taylor, M., Haggerty, J., Gresty, D. & Hegarty, R., "Digital Evidence in Cloud Computing Systems", Computer Law and Security Review, 26 (3), pp. 304 - 308, 2010.

Haggerty, J. & Haggerty, S., "Visual Analytics of an Eighteenth-Century Business Network", Enterprise and Society, 11 (1), pp. 1 - 25, 2010.

Taylor, M., Haggerty, J. & Gresty, D., "The Legal Aspects of Corporate Computer Usage Policies", Computer Law and Security Review, 26 (1), pp. 72 - 76, 2010.

Taylor, M., Jones, R., Haggerty, J. & Gresty, D., "Teaching Information Technology Law", Journal of Further and Higher Education, 33 (4), pp. 473 - 481, 2009. 

Taylor, M., Haggerty, J. & Gresty, D., "The Legal Aspects of Corporate Email Investigations", Computer Law and Security Review, 25 (4), pp. 372 - 376, 2009.

Indrasinghe, S., Pereira, R. & Haggerty, J., "Disjointed Conflict Free Address Auto-Configuration for Mobile Ad Hoc Networks", Proceedings of the 12th International Conference on Network-Based Information Systems (NBiS 2009), Indiana, USA, 19 - 21 August, 2009.

Haggerty, J., Lamb, D. & Taylor, M., "Social Network Visualization for Forensic Investigation of E-Mail", Proceedings of the 4th Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 09), Athens, Greece, 25 - 26 June, 2009, pp. 81 - 92.

Haggerty, J., Taylor, M. & Gresty, D., "Determining Culpability in Investigations of Malicious E-Mail Dissemination Within the Organisation", Proceedings of the 3rd Annual Workshop on Digital Forensics and Incident Analysis (WDFIA 08), Malaga, Spain, 9 October, 2008, pp. 12 - 20.

Haggerty, J. & Merabti, M. (eds.), Proceedings of the 3rd Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 10 - 11 July, 2008. 

Wren, C., Haggerty, J. & Taylor, M., "An Evaluation of Signature-Based Forensic Searches for Malicious Digital Pictures", Proceedings of the 3rd Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 10 - 11 July, 2008, pp. 15 - 20.

Taylor, M.J., Haggerty, J., Gresty, D. & Lisboa, P., "A Corporate Computer Forensic Investigation Scoping Model", Proceedings of the 3rd Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 10 - 11 July, 2008, pp. 60 - 66.

Indrasinghe, S., Pereira, R. & Haggerty, J., "Protocol Specification for Conflict-Free MANET Address Allocation Mechanisms", Proceedings of IEEE Advanced Information Networking Applications (AINA-08) 2008/TeNAS 2008, Okinawa, Japan, 25 - 28 March 2008, pp. 1434 - 1439.

Haggerty, J., Llewellyn-Jones, D. & Taylor, M., "FORWEB: File Fingerprinting for Automated Network Forensics Investigations", Proceedings of e-Forensics 2008, Adelaide, Australia, 21 - 23 January, 2008. 

Taylor M.J., Haggerty, J. & Gresty, D., "The Legal Aspects of Corporate Computer Forensic Investigations", Computer Law and Security Report, 23 (6), 2007, pp. 562 - 566.

Haggerty, J. & Merabti, M. (eds.), Proceedings of the 2nd Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 12 - 13 July, 2007. 

Taylor, M., Haggerty, J. & Gresty, D., "Criminal Offences and Corporate Computer Forensics", Proceedings of the 2nd Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 12-13 July, 2007, pp. 27 - 31. 

Haggerty, J. & Taylor, M., "Improving Performance in Computer Forensics Investigations of Malicious Digital Pictures Resident on the Hard Drive", Proceedings of the 23rd Annual UK Performance Engineering Workshop, Edge Hill University, UK, 9-10 July, 2007, pp. 58 - 65. 

Haggerty, J. & Taylor, M., 2007, "FORSIGS: Forensic Signature Analysis of the Hard Drive for Multimedia File Fingerprints", in IFIP International Federation for Information Processing, Volume 232, New Approaches for Security, Privacy and Trust in Complex Environments, Venter, H., Eloff, M., Labuschagne, L., Eloff, J. & von Solms, R. (eds.), (Boston, Springer), pp. 1 - 12. [Presented atIFIP/SEC, Sandton, South Africa, 14 - 16 May, 2007.] 

Indrasinghe, S., Pereira, R. & Haggerty, J., "Dynamic Auto-Address Configuration for Mobile Ad-Hoc Networks", Proceedings of IEEE Advanced Information Networking Applications (AINA-07) 2007, Niagra Falls, Canada, 21 - 23 May, 2007, pp. 852 - 857. 

Haggerty, J. & Merabti, M. (eds.), Proceedings of the 1st Conference on Advances in Computer Security and Forensics, Liverpool John Moores University, UK, 13-14 July, 2006.

Haggerty, J., Berry, T. & Gresty, D., "Forensic Signature Analysis of Digital Image Files", Proceedings of the 1st Conference on Advances in Computer Security and Forensics, Liverpool, UK, 13-14 July, 2006, pp. 1-10. 

Haggerty, J. & Taylor, M., "Managing Corporate Computer Forensics", Computer Fraud and Security, June 2006, pp. 14-16. 

Haggerty, J., "Early Detection and Prevention of Denial-of-Service Attacks Within the Routing Infrastructure", Computer Networking and Networks, Shannon S. (ed.), Nova Science Publishers, USA, 2006, pp. 1-39. 

Haggerty, J., Shi, Q., Fergus, P. & Merabti, M., "Data Authentication and Trust Within Distributed Intrusion Detection System Inter-Component Communications", Proceedings of EC2ND 2005, Blyth, A. (ed.), pp. 197-206 (Springer-Verlag, London, 2006). [Presented at The 1st European Conference on Computer Network Defence (EC2ND), Glamorgan, UK, 15 - 16 December 2005.]

Haggerty, J., Shi, Q. & Merabti, M., "Early Detection and Prevention of Denial-of-Service Attacks: A Novel Mechanism with Propagated Traced-Back Attack Blocking", IEEE Journal on Selected Areas in Communications, vol. 23, no. 10, October 2005. 

Haggerty, J., Shi, Q. & Merabti, M., "Statistical Signatures for Early Detection of Flooding Denial-of-Service Attacks", in Security and Privacy in the Age of Ubiquitous Computing, Sasaki, R., Qing, S., Okamato, E. & Yoshiura, H. (eds.), pp. 327-342, (IFIP/Springer, New York , 2005). [Presented at IFIP/SEC 2005, Chiba , Japan, 30 May - 1 June 2005.] 

Haggerty, J. and Taylor, M., "One born every minute", The Computer Bulletin, British Computer Society, January 2005, pp. 26-27. 

Haggerty, J., Berry, T., Shi, Q. & Merabti, M., "DiDDeM: A System for Early Detection of TCP SYN Flood Attacks," Proceedings of Globecom 2004, Dallas, Texas USA, 29 November - 3 December 2004. 

Haggerty, J., Shi, Q. & Merabti, M., "Beyond the Perimeter: the Need for Early Detection of Denial of Service Attacks," Proceedings of the 18th Annual Computer Security Applications Conference (ACSAC) 2002, Las Vegas USA, 9-13 December 2002, pp. 413-422. 

Haggerty, J., Shi, Q. & Merabti, M., "The Threat from Within: An Analysis of Attacks on an Internal Network," in Ghonaimy, M. A., El-Hadidi, M. T., & Aslan, H. K. (eds.) Security in the Information Society - Visions and Perspectives, pp. 133-146 (Kluwer Acadaemic Press/IFIP, 2002). [Presented at IFIP/SEC 2002, Cairo, Egypt, 7 - 9 May 2002] 

Haggerty, J., Shi, Q. & Merabti, M., "Defending Against Denial of Service: A Network Filtering Based Approach," 2nd Annual Post-Graduate Symposium on the Convergence of Telecommunications, Networking & Broadcasting, Liverpool, pp. 119-124, 2001.