Electrical and Computer Engineering Commons^™

The Defiance College Undergraduate Major In Digital Forensic Science: Setting The Bar Higher, Gregg H. Gunsch

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper provides background information to accompany the panel discussion on Curriculum Design and Implementation in Computer Forensics Education. It is specifically focused on the content and delivery of Defiance College’s undergraduate (B.S.) program majoring in Digital Forensic Science (DFS). The genesis and evolution of the Defiance College DFS program are described, along with its successes, challenges and known opportunities for improvement. The desired outcomes of the panel discussion include articulating the necessary components of an undergraduate program, refining expectations of knowledge and skills required of students upon graduation, and suggesting strategies for achieving those expectations despite inevitable resource limitations …

Digital Records Forensics: A New Science And Academic Program For Forensic Readiness, Luciana Duranti, Barbara Endicott-Popovsky

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper introduces the Digital Records Forensics project, a research endeavour located at the University of British Columbia in Canada and aimed at the development of a new science resulting from the integration of digital forensics with diplomatics, archival science, information science and the law of evidence, and of an interdisciplinary graduate degree program, called Digital Records Forensics Studies, directed to professionals working for law enforcement agencies, legal firms, courts, and all kind of institutions and business that require their services. The program anticipates the need for organizations to become “forensically ready,” defined by John Tan as “maximizing the ability …

Canvass - A Steganalysis Forensic Tool For Jpeg Images, Jennifer L. Davidson, Jaikishan Jalan

Annual ADFSL Conference on Digital Forensics, Security and Law

Steganography is a way to communicate a message such that no one except the sender and recipient suspects the existence of the message. This type of covert communication lends itself to a variety of different purposes such as spy-to-spy communication, exchange of pornographic material hidden in innocuous image files, and other illicit acts. Computer forensic personnel have an interest in testing for possible steganographic files, but often do not have access to the technical and financial resources required to perform steganalysis in an effective manner. This paper describes the results of a funded effort by a grant from the National …

A Layered Framework Approach To Mitigate Crimeware, Mathew Nyamagwa

Annual ADFSL Conference on Digital Forensics, Security and Law

Crimeware attacks are growing at such an alarming rate and are becoming so prevalent that the FBI now rank cybercrime among its top priorities after terrorism and espionage. New studies estimate cyber crimes cost firms an astounding $1 trillion annually. But the good news? Over 80% of them are preventable. Crimeware is not a purely technical threat but more or a socio-technical affair. This clearly brings out the fact that computers do not commit a crime, but we (humans) do! In this paper I propose a layered approach that involves all stakeholders from end-users to service-providers and law enforcement to …

Measuring Whitespace Patterns As An Indication Of Plagiarism, Ilana Shay, Nikolaus Baer, Robert Zeidman

Annual ADFSL Conference on Digital Forensics, Security and Law

There are several different methods of comparing source code from different programs to find copying1 . Perhaps the most common method is comparing source code statements, comments, strings, identifiers, and instruction sequences. However, there are anecdotes about the use of whitespace patterns in code. These virtually invisible patterns of spaces and tabs have been used in litigation to imply copying, but no formal study has been performed that shows that these patterns can actually identify copied code. This paper presents a detailed study of whitespace patterns and the uniqueness of these patterns in different programs.

Keywords: Copyright Infringement, Intellectual Property, …

Electronic Discovery: A Fool’S Errand Where Angels Fear To Tread?, Milton Luoma, Vicki Luoma

Annual ADFSL Conference on Digital Forensics, Security and Law

Electronic discovery has transformed the discovery phase of civil litigation in recent years. The expectations of lawyers and parties were initially established in the Rowe and Zubulake cases that led to a complete revision of the electronic discovery rules contained in the Federal Rules of Civil Procedure. Subsequent cases have underscored the importance of document search methodologies and implications for attorneys, IT professionals, and digital forensics professionals. The authors review how electronic discovery has evolved thus far and offer recommendations regarding the electronic discovery process.

Keywords: Electronic discovery, e-discovery, keyword search, concept search,

Social Networking: A Boon To Criminals, Tejashree D. Datar, Richard Mislan

Annual ADFSL Conference on Digital Forensics, Security and Law

With the world getting more and more digitized, social networking has also found a place in the cyber world. These social networking sites (SNSs) which enable people to socialize, and build and maintain relationships are attracting attention of all kinds of people such as teens, adults, sports persons, and even businesses. But these SNSs are also getting unwanted attention from people like sexual predators, spammers, and people involved in criminal and illegal activities. This paper talks about SNSs and how these sites are exploited for criminal or illegal activity. The SNSs are discussed in detail with respect to user profiles, …

Hard Disk Storage: Firmware Manipulation And Forensic Impact And Current Best Practice, Gareth Davies, Iain Sutherland

Annual ADFSL Conference on Digital Forensics, Security and Law

The most common form of storage media utilized in both commercial and domestic systems is the hard disk drive, consequently these devices feature heavily in digital investigations. Hard disk drives are a collection of complex components. These components include hardware and firmware elements that are essential for the effective operation of the drive. There are now a number of devices available, intended for data recovery, which can be used to manipulate the firmware components contained within the drive. It has been previously shown that it is possible to alter firmware for malicious purposes, either to conceal information or to prevent …

Organizational Handling Of Digital Evidence, Sheona A. Hoolachan, William B. Glisson

Annual ADFSL Conference on Digital Forensics, Security and Law

There are a number of factors that impact a digital forensics investigation. These factors include: the digital media in question, implemented processes and methodologies, the legal aspects, and the individuals involved in the investigation. This paper presents the initial idea that Digital Forensic Practice (DFP) recommendations can potentially improve how organizations handle digital evidence. The recommendations are derived from an in-depth survey conducted with practitioners in both commercial organizations and law enforcement along with supporting literature. The recommendations presented in this paper can be used to assess an organization’s existing digital forensics practices and a guide to Digital Forensics Improvement …

A Framework To Integrate The Data Of Interview Investigation And Digital Evidence, Fahad Alshathry

Annual ADFSL Conference on Digital Forensics, Security and Law

The physical interview process in crime investigation produces an extremely large amount of data, particularly in big cases. In comparison, examiners of digital evidence have enormous amounts of data to search through whilst looking for data relating to the investigation. However, the links between their results are limited. Whilst investigators need to refute or support their hypothesis throughout, digital evidence examiners often use search based keywords. These keywords are usually created from evidence taken from the physical investigation reports and this basic method has been found to have many shortcomings and limitations. This paper proposes a highly automatic framework to …

Developing Voip Honeypots: A Preliminary Investigation Into Malfeasant Activity, Craig Valli

Annual ADFSL Conference on Digital Forensics, Security and Law

30 years ago PABX systems were compromised by hackers wanting to make long distance calls at some other entities expense. This activity faded as telephony became cheaper and PABX systems had countermeasures installed to overcome attacks. Now the world has moved onto the provision of telephony via broadband enabled Voice over Internet Protocol (VoIP) with this service now being provided as a replacement for conventional fixed wire telephony by major telecommunication providers worldwide. Due to increasing bandwidth it is possible for systems to support multiple voice connections simultaneously. The networked nature of the Internet allows for attackers of these VoIP …

Higate (High Grade Anti‐Tamper Equipment) Prototype And Application To E‐Discovery, Yui Sakurai, Yuki Ashino, Tetsutaro Uehara, Hiroshi Yoshiura, Ryoichi Sasaki

Annual ADFSL Conference on Digital Forensics, Security and Law

These days, most data is digitized and processed in various ways by computers. In the past, computer owners were free to process data as desired and to observe the inputted data as well as the interim results. However, the unrestricted processing of data and accessing of interim results even by computer users is associated with an increasing number of adverse events. These adverse events often occur when sensitive data such as personal or confidential business information must be handled by two or more parties, such as in the case of e-Discovery, used in legal proceedings, or epidemiologic studies. To solve …

Real-Time Transient Stability Assessment Of A Power System During Energy Generation Shortfall, Y. Yare, Ganesh K. Venayagamoorthy

Electrical and Computer Engineering Faculty Research & Creative Works

Real-time transient stability assessment (TSA) in power system is to determine a power system's ability to continue to provide service (electric energy) in case of an unforeseen catastrophic contingency in real-time. during system operation, the online determination of the dynamic security level is fundamental in order to take appropriate countermeasures, with the aim of restoring the system, if necessary, to a more secure operation condition. to assess the level of system strength or weakness relative to the occurrence of an undesired event, a quantitative measure based on transient stability index is often considered. in this paper, a practical generator maintenance …

The Challenge Of Operating Wind Power Plants Within A Microgrid Framework, Badrul H. Chowdhury, Hong T. Ma, Nikhil Ardeshna

Electrical and Computer Engineering Faculty Research & Creative Works

The challenges facing the operation of intermittent power sources, such as wind power, in capacity-limited microgrids are discussed. Solutions are explored for stable operation of the microgrid in islanded mode in the presence of wind power generations. Energy storage can be used to provide ride through for momentary drop in wind power or for sudden increase in loads. a wind plant pitch angle controller (PAC) and a rotor speed controller (RSC) are introduced for wind power plant active power adjustment to help with frequency regulation. the use of Static Synchronous Compensator (STATCOM) is discussed for stabilizing the microgrid voltage during …

Enhanced Wide Area Monitoring System, Bipul Luitel, Ganesh K. Venayagamoorthy, Cameron E. Johnson

Electrical and Computer Engineering Faculty Research & Creative Works

This paper focuses on the design of a wide area monitoring system (WAMS) in a multimachine power system with enhanced reliability, integrity and security. a two-area four-machine power system is considered for the studies. the voltage and speed deviation information coming from the generators is used by the WAM to feed useful information to the wide area control system (WACS), which will then send control signals back to the power system. the proposed WAM uses current and past information from the generators to predict their future values. by combining features such as missing sensor fault tolerance, intrusion detection system and …

2010 Spring Engr333 Project Final Report, Eric Ledy, Rachel Jelgerhuis, Jasper Gondhi, Michael Gondhi, Steve Brink, John Mantel, Kyle Harvey, Jim Vanleeuwen, Jacob Speelman, Mitch Brummel, Tyler Van Dongen, Nathan Van Heukelum, Lynette Hromada, Jen Meneely, Matthew Brouwer, Marc Eberlein, Steve Demaagd, Tim Opperwall, Andrew Dejong, Joel Love, Alex Boelkins, Amanda Hollinger, Betsy Huyser, Jason Dornbos, Jason Handlogten, Justin Karsten, Matt Milan

ENGR 333

Calvin is developing plans for a new data center to provide business continuity and quick recovery in the event of a disaster. The new data center will not replace the existing data center; rather, it will provide redundancy for the operations of the campus. Because of the energy demands of data centers, there is a worldwide push for energy efficiency. So-called “green data centers” provide the same functionality as a normal data center with reduced energy usage and reduced energy costs. Calvin, like most organizations, must weigh the long-term economic benefits of energy efficiency projects against higher initial cost. The …

Simulation Of Three-Fold Symmetric Photonic Crystal Structures On Top Of Gan Leds, Simeon Trieu, Xiaomin Jin, Chang Xiong, Xingxing Fu, Xiangning Kang, Guoyi Zhang, Bei Zhang

Electrical Engineering

A 3-fold symmetric photonic-crystal grating is simulated using improved FDTD-model. Transmission gratings are optimized. Then, the best cases are simulated in GaN-LED models. The maximum extraction efficiency improvement is 40× greater compared to conventional LEDs.

Assembly Of Ordered Carbon Shells On Semconducting Nanomaterals, Eli Anguelova Sutter, Peter Werner Sutter

Department of Electrical and Computer Engineering: Faculty Publications

In some embodiments of the invention, encapsulated semiconducting nanomaterials are described. In certain embodiments the nanostructures described are semiconducting nanomaterials encapsulated with ordered carbon shells. In some aspects a method for producing encapsulated semiconducting nanomaterials is disclosed. In some embodiments applications of encapsulated semiconducting nanomaterials are described.

An Ensemble-Based Computational Approach For Incremental Learning In Non-Stationary Environments Related To Schema- And Scaffolding-Based Human Learning, Ryan Elwell

Theses and Dissertations

The principal dilemma in a learning process, whether human or computer, is adapting to new information, especially in cases where this new information conflicts with what was previously learned. The design of computer models for incremental learning is an emerging topic for classification and prediction of large-scale data streams undergoing change in underlying class distributions (definitions) over time; yet currently, they often ignore significant foundational learning theory that has been developed in the domain of human learning. This shortfall leads to many deficiencies in the ability to organize existing knowledge and to retain relevant knowledge for long periods of time. …

A Locally Adaptable Iterative Rx Detector, Yuri P. Taitano, Brian G. Geier, Kenneth W. Bauer

Faculty Publications

We present an unsupervised anomaly detection method for hyperspectral imagery (HSI) based on data characteristics inherit in HSI. A locally adaptive technique of iteratively refining the well-known RX detector (LAIRX) is developed. The technique is motivated by the need for better first- and second-order statistic estimation via avoidance of anomaly presence. Overall, experiments show favorable Receiver Operating Characteristic (ROC) curves when compared to a global anomaly detector based upon the Support Vector Data Description (SVDD) algorithm, the conventional RX detector, and decomposed versions of the LAIRX detector. Furthermore, the utilization of parallel and distributed processing allows fast processing time making …