Digital Commons Network^™

Malware In The Mobile Device Android Environment, Diana Hintea, Robert Bird, Andrew Walker

Annual ADFSL Conference on Digital Forensics, Security and Law

exploit smartphone operating systems has exponentially expanded. Android has become the main target to exploit due to having the largest install base amongst the smartphone operating systems and owing to the open access nature in which application installations are permitted. Many Android users are unaware of the risks associated with a malware infection and to what level current malware scanners protect them. This paper tests how efficient the currently available malware scanners are. To achieve this, ten representative Android security products were selected and tested against a set of 5,560 known and categorized Android malware samples. The tests were carried …

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Crime In Developing Countries: The Contribution Of Crime Science, Mangai Natarajan

Publications and Research

No abstract provided.

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …

Current Challenges And Future Research Areas For Digital Forensic Investigation, David Lillis, Brett A. Becker, Tadhg O’Sullivan, Mark Scanlon

Annual ADFSL Conference on Digital Forensics, Security and Law

Given the ever-increasing prevalence of technology in modern life, there is a corresponding increase in the likelihood of digital devices being pertinent to a criminal investigation or civil litigation. As a direct consequence, the number of investigations requiring digital forensic expertise is resulting in huge digital evidence backlogs being encountered by law enforcement agencies throughout the world. It can be anticipated that the number of cases requiring digital forensic analysis will greatly increase in the future. It is also likely that each case will require the analysis of an increasing number of devices including computers, smartphones, tablets, cloud-based services, Internet …

Forensic Analysis Of Ares Galaxy Peer-To-Peer Network, Frank Kolenbrander, Nhien-An Le-Khac, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

Child Abuse Material (CAM) is widely available on P2P networks. Over the last decade several tools were made for 24/7 monitoring of peer-to-peer (P2P) networks to discover suspects that use these networks for downloading and distribution of CAM. For some countries the amount of cases generated by these tools is so great that Law Enforcement (LE) just cannot handle them all. This is not only leading to backlogs and prioritizing of cases but also leading to discussions about the possibility of disrupting these networks and sending warning messages to potential CAM offenders. Recently, investigators are reporting that they are creating …

Keynote Speaker, Chuck Easttom

Annual ADFSL Conference on Digital Forensics, Security and Law

Conference Keynote Speaker, Chuck Easttom

Restorative Resources: A New Theory In Juvenile Offender Control ~ Examining The Successes Of Restorative Resources In Sonoma County And The Impact It Had On One Police Sergeant’S Journey, Stephen Wayne Cramer

The International Undergraduate Journal For Service-Learning, Leadership, and Social Change

No abstract provided.

John M. Hagedorn, The Insane Chicago Way: The Daring Plan By Chicago Gangs To Create A Spanish Mafia, Thomas Barker

Qualitative Criminology (QC)

"In The Insane Chicago Way, Professor Hagedorn opines that the super street gangs in Chicago have fundamentally changed since the 1990s. He provides an “institutionalized history” of the rise and fall of the Spanish Growth and Development (SGD) alliance to document the fundamental changes in Chicago. He rightly concludes that the SGD is “almost completely unknown to the public, the police, the professors and even most gang members” (p. 1). This powerful SGD case study is supported by the author’s long history of gang study and his interviews with gang leaders and street gang members, and with organized crime—Chicago …

Editorial, Tom Holt

Qualitative Criminology (QC)

"Welcome to the first issue of the fourth volume of the Journal of Qualitative Criminal Justice & Criminology. This is my first issue as editor, and I am pleased to continue along the path established by Will Oliver. It has been both exciting and challenging to take the reins and transition into this role. Thankfully Will already had a great crop of articles prepared for this issue. In a way, you could argue this issue is a result of both of our efforts. To that end, this issue highlights the journal’s continued emphasis on high-quality qualitative scholarship. The first …

Mass Murder And The Mass Media: Understanding The Construction Of The Social Problem Of Mass Shootings In The Us, Jaclyn Schildkraut

Qualitative Criminology (QC)

"Nearly as soon as the first shot is fired in a mass shooting, the news media already are rushing to break coverage, the likes of which typically last days or, in the more extreme cases, weeks. Though mass shootings are rare in occurrence, the disproportionate amount of coverage they receive in the media leads the public to believe that they occur at a much more regular frequency than they do. In order to understand how the public comes to understand mass shooting events, however, one first must understand how the stories are constructed by the media. The present study takes …

Old Message In A New Bottle: Taking Gang Rivalries Online Through Rap Battle Music Videos On Youtube, Joseph D. Johnson, Natalie Schell-Busey

Qualitative Criminology (QC)

"The Internet is changing society, including criminal behavior. It has been shown that gangs are active online, but it is unclear how gangs are using the Internet. Most studies seem to conclude that gang members are not using the Internet instrumentally to commit or promote criminal behavior, but these same studies show that gang members use social media for flame wars— to insult and threaten one another. We argue that using social media in this way is actually an instrumental use of the Internet because it promotes violence. According to the code of the street, a diss requires a response, …

Jody Miller And Wilson R. Palacios, Editors, Qualitative Research In Criminology, Carl Root

Qualitative Criminology (QC)

"Qualitative Research in Criminology is Volume 20 in the series titled Advances in Criminological Theory edited by William S. Laufer and Freda Adler. The title of Miller and Palacios’ contribution brings to mind the saying “one of these things is not like the others.” In fact, they acknowledge as much on page three of the introduction, as they state, “For some readers, our strategy may beg the question, why does a volume oriented around methodology belong in a theoretical series?” Miller and Palacios give a brief answer to this question, but allow the seventeen chapters that comprise their volume …

Homeland Security In The Post-9/11 Era: Forced Compliance Along The Northern Border, Nancy E. Marion, Ronald Gelleny

Qualitative Criminology (QC)

"The border relationship between the U.S. and Canada has traditionally been very trusting, allowing for an ease of trade and travel. However, the terrorist attacks of 9/11 altered this comfortable association. Now, U.S. policy is geared toward protecting the homeland from illegal immigration and potential terrorist actions. In other words, for Americans, security concerns trump trade. At the same time, Canada remains concerned with maintaining an ease of trade and travel with the U.S. To do this, Canada has been forced to establish and implement increased security measures as outlined by U.S. officials, even though there is strong opposition from …

When The Watchers Are Watched: An Interpretive Phenomenological Analysis Of Body-Worn Cameras, David A. Makin

Qualitative Criminology (QC)

"This research explores the individual construction of the bodyworn camera (BWC) within what would be labeled as an average size police agency. Using a pre- and post-implementation qualitative design and leveraging interpretive phenomenological analysis as the analytical strategy, this research explores the nuanced reaction to this technological diffusion within the agency. Results reveal global themes spanning a continuum of negative and positive reactions to the diffusion, with an overwhelming acceptance of the device and individual construction of how best to use the device. While providing an initial lens of analysis for future researchers, the research includes considerable unanswered questions concerning …

Parental Substance Use And The Need For Family Dependency Treatment Court In Taylor County, Rebekah Rich

Electronic Theses and Dissertations

The impact of parental substance use and the need for Family Dependency Treatment Court in Taylor County are qualitatively explored and described, analyzing interviews of identified key informants. The areas explored are the current practices and process in Taylor County when a substance use issue is identified in a parent during a child welfare case, the impact of parental substance use on the child welfare system, knowledge and opinions regarding treatment options, and knowledge and opinions of Family Dependency Treatment Court. The sample size was 8 professionals who worked as attorney ad litems, Department of Family and Protective Services workers, …

Expanding Coercive Mobility Theory: Women's Forms Of Capital And Neighborhood Social Control, Jaclyn Marie Cwick

Dissertations

This dissertation proposes a gendered theory of coercive mobility, synthesized from the collateral consequences of incarceration, along with coercive mobility theory and literature on forms of capital. Previous work has shown that the removal of residents due to mass incarceration contributes to disruptions in neighboring relationships and therefore, impedes the community’s ability to prevent crime, commonly referred to as informal social control. This involuntary mobility due to prison admissions and returns, known as coercive mobility, has focused almost entirely on the collateral consequences to the incarcerated, a predominantly male population. However, those who remain in the community, primarily women, also …

Failure Of The Rockefeller Drug Laws, Alex Felker

Criminal Justice

No abstract provided.

Intersectionality In Queer Activism: A Case Study, Haley Adams

Undergraduate Theses

This paper explores the relationships between intersectionality and queer activism through a case study of the Louisville, Kentucky LGBTQ+ organization The Fairness Campaign. Intersectionality has been increasingly explored by academia, but rarely ventures beyond the “big three” categorical divisions of race, gender, and class; even rarer are studies of the practical application of intersectionality in activism, particularly queer activism. Through analysis of secondary data, I examine the ways in which intersectionality has, consciously or not, played a part in the history of the Fairness Campaign, as well as its role in the future of the organization.

Judicial Differences In Protective Orders Issuance Rates: An Examination Of Courtroom Actors, Case Aspects, And Individual Characteristics, Elena Alexandra Bejinariu

UNLV Theses, Dissertations, Professional Papers, and Capstones

Using a mixed methods approach, this study examines whether: (1) courtroom actors (i.e., presence of legal counsel, translator, victim advocate, or informal support person; and presiding judge), (2) case aspects (i.e., abuse mentioned, type of abuse mentioned; weapon mentioned; children mentioned; and session time), and (3) individual characteristics (i.e., presence of applicant and/or adverse party; and race and gender of applicant and adverse party) influence an applicant’s likelihood of being granted a civil protective order and the length of time it is granted for. Several types of analytic methods were conducted (i.e., bivariate analyses, logistic regression analyses, and sets of …

Bolling V. Sharpe And Beyond: The Unfinished And Untold History Of School Desegregation In Washington, D.C., Bryce Celotto

Honors College Theses

While the Brown V. Board of Education case is constantly referenced when discussing educational equity and desegregation, Bolling v. Sharpe stands as another important education civil rights case and is perhaps more telling of the story of education in the United States. Bolling V. Sharpe was argued and decided in the United States Supreme Court over the course of 1952 to 1954. Similar to Brown v. Board in terms of intent, Bolling v. Sharpe aimed to desegregate public schools in Washington, D.C. in order to give African-American students equal access to a high quality public education on par with that …

Analyzing The Relationship Between Job Demands, Job Resources, And Personal Resources On Employee Engagement And Exhaustion Of Juvenile Probation/Parole Officers, Danilo Estuardo Chavarria

UNLV Theses, Dissertations, Professional Papers, and Capstones

Organizations should constantly strive to improve their levels of employee engagement, because improving employee engagement influences the well-being of both employees and organizations (Bakker, 2011, p. 268). In today’s workplaces, organizations need employees who are psychologically connected to their work, who are willing and able to invest themselves in their roles, and who are proactive and committed to high quality standards.” (Bakker, Albrecht, & Leiter, 2011, pp. 4-5). This is important; not only for private organizations but for public organizations as well, especially organizations in the criminal justice system who continuously strive to keep the peace, have constant contact with …

#Therighttoremainsilent: Police Department Adoption And Deployment Of Social Media, 2010-~2015, Paul Geary

UNLV Theses, Dissertations, Professional Papers, and Capstones

Police have a complex myriad of ever-changing responsibilities and fluid expectations from the public, and traditional media has performed a largely ambivalent self-appointed oversight and agenda-setting function vis-à-vis police for decades. But in the last five years, the second wave of the first new mass communications medium since the 1940s, social media, has democratized both that oversight function as well as traditional media's agenda-setting ability. Meanwhile, police have been characterized as slow to adapt to change and to adopt new practices in response to a changing world. This work analyzed police agency social media adoption and explained the rate at …

Problem Analysis In Community Violence Assessments: Reavealing Early Childhood Trauma As A Driver Of Youth And Gang Violence, Laurie Ross Phd, Samantha Arsenault, Sergeant Miguel Lopez

Mosakowski Institute for Public Enterprise

Problem analysis conducted by a university-based research partner can provide communities with data-driven options to address the local drivers of serious youth and gang violence. Situated in Worcester, Massachusetts, this article describes how after early childhood trauma was identified as a potential driver of adolescent and young adult violence, problem analysis using local data confirmed that being the victim or witness of a traumatic incident before the age of 12 was significantly correlated with involvement in violence in adolescence or young adulthood. While there is a robust literature on the relationship between early childhood trauma and later delinquency, local decision-makers …

Rape And Sexual Violence: Questionable Inevitability And Moral Responsibility In Armed Conflict, Katherine W. Bogen

Scholarly Undergraduate Research Journal at Clark (SURJ)

Wartime sexual violence is a critical human rights issue that usurps the autonomy of its victims as well as their physical and psychological safety. It occurs in both ethnic and non-ethnic wars, across geographic regions, against both men and women, and regardless of the “official” position of commanders, states, and armed groups on the use of rape as tactic of war. This problem is current, pervasive, and global in spite of the status of wartime sexual violence perpetration as a crime against humanity and the capacity of the international criminal court to indict offenders. Though some scholars have argued that …