Engineering Commons^™

From The Editor-In-Chief, Ibrahim Baggili

Journal of Digital Forensics, Security and Law

Welcome to JDFSL’s fourth and final issue for 2014! First, I would like to thank our editorial board, reviewers, and the JDFSL team for bringing this issue to life. It has been a big year for JDFSL as the journal continues to progress. I would like to highlight our critical achievements for 2014 before touching on the papers that were accepted in this issue: 1. JDFSL has gone to a fully open access model without author payment through support from academic institutions. 2. JDFSL has formed and continues to form partnerships with various conferences that relate to cyber security and …

Book Review: Judiciary-Friendly Forensics Of Software Copyright Infringement (Vinod Polpaya Bhattathiripad), Pedro L. P. Sanchez

Journal of Digital Forensics, Security and Law

Judiciary-Friendly Forensics of Software Copyright Infringement is a book by Dr. Vinod Polpaya Bhattathiripad, published by IGI-Global as part of its Research Essentials series. The book discusses the forensics of software copyright infringement and highlights theoretical, functional, and procedural matters in the investigation of copyright infringement of software products, as well as the development of forensic technologies to detect and avoid software piracy. It is of interest to software forensic experts, lawyers in the field of copyright infringement, judges, software professionals, and students.

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Personal Denial Of Service (Pdos) Attacks: A Discussion And Exploration Of A New Category Of Cyber Crime, Michael R. Bartolacci, Larry J. Leblanc, Ashley Podhradsky

Journal of Digital Forensics, Security and Law

The growth of the Internet has created a corresponding growth in Internet-based crimes and online misbehavior, particularly among younger computer-savvy people. Younger generations have grown up in a world where internet access, social networking, e-commerce and smartphones are commonplace. Given this fact, they have learned how to use, and how to abuse, technology. This leads us to define a new category of cybercrime called a Personal Denial of Service attack (PDOS). A PDOS is a cyber-crime in which an individual deliberately prevents the access of another individual or small group to online services such as email or banking. Due to …

File Detection On Network Traffic Using Approximate Matching, Frank Breitinger, Ibrahim Baggili

Journal of Digital Forensics, Security and Law

In recent years, Internet technologies changed enormously and allow faster Internet connections, higher data rates and mobile usage. Hence, it is possible to send huge amounts of data / files easily which is often used by insiders or attackers to steal intellectual property. As a consequence, data leakage prevention systems (DLPS) have been developed which analyze network traffic and alert in case of a data leak. Although the overall concepts of the detection techniques are known, the systems are mostly closed and commercial. Within this paper we present a new technique for network traffic analysis based on approximate matching (a.k.a …

Fast Rtp Detection And Codecs Classification In Internet Traffic, Petr Matousek, Ondrej Rysavy, Martin Kmet

Journal of Digital Forensics, Security and Law

This paper presents a fast multi-stage method for on-line detection of RTP streams and codec identification of transmitted voice or video traffic. The method includes an RTP detector that filters packets based on specific values from UDP and RTP headers. When an RTP stream is successfully detected, codec identification is applied using codec feature sets. The paper shows advantages and limitations of the method and its comparison with other approaches. The method was implemented as a part of network forensics framework NetFox developed in project SEC6NET. Results show that the method can be successfully used for Lawful Interception as well …

Relating Admissibility Standards For Digital Evidence To Attack Scenario Reconstruction, Changwei Liu, Anoop Singhal, Duminda Wijesekera

Journal of Digital Forensics, Security and Law

Attackers tend to use complex techniques such as combining multi-step, multi-stage attack with anti-forensic tools to make it difficult to find incriminating evidence and reconstruct attack scenarios that can stand up to the expected level of evidence admissibility in a court of law. As a solution, we propose to integrate the legal aspects of evidence correlation into a Prolog based reasoner to address the admissibility requirements by creating most probable attack scenarios that satisfy admissibility standards for substantiating evidence. Using a prototype implementation, we show how evidence extracted by using forensic tools can be integrated with legal reasoning to reconstruct …

Audit: Automated Disk Investigation Toolkit, Umit Karabiyik, Sudhir Aggarwal

Journal of Digital Forensics, Security and Law

Software tools designed for disk analysis play a critical role today in forensics investigations. However, these digital forensics tools are often difficult to use, usually task specific, and generally require professionally trained users with IT backgrounds. The relevant tools are also often open source requiring additional technical knowledge and proper configuration. This makes it difficult for investigators without some computer science background to easily conduct the needed disk analysis. In this paper, we present AUDIT, a novel automated disk investigation toolkit that supports investigations conducted by non-expert (in IT and disk technology) and expert investigators. Our proof of concept design …

Evidentiary Power And Propriety Of Digital Identifiers And The Impact On Privacy Rights In The United States, Michael Losavio, Deborah Keeling

Journal of Digital Forensics, Security and Law

Media and network systems capture and store data about electronic activity in new, sometimes unprecedented ways; computational systems make for new means of analysis and knowledge development. These new forms offer new, powerful tactical tools for investigations of electronic malfeasance under traditional legal regulation of state power, particular that of Fourth Amendment limitations on police searches and seizures under the U.S. Constitution. But autonomy, identity and authenticity concerns with electronic data raise issues of public policy, privacy and proper police oversight of civil society. We examine those issues and their implications for digital and computational forensics

Effects Of The Factory Reset On Mobile Devices, Riqui Schwamm, Neil C. Rowe

Journal of Digital Forensics, Security and Law

Mobile devices usually provide a “factory-reset” tool to erase user-specific data from the main secondary storage. 9 Apple iPhones, 10 Android devices, and 2 BlackBerry devices were tested in the first systematic evaluation of the effectiveness of factory resets. Tests used the Cellebrite UME-36 Pro with the UFED Physical Analyzer, the Bulk Extractor open-source tool, and our own programs for extracting metadata, classifying file paths, and comparing them between images. Two phones were subjected to more detailed analysis. Results showed that many kinds of data were removed by the resets, but much user-specific configuration data was left. Android devices did …

Testing Framework For Mobile Device Forensics Tools, Maxwell Anobah, Shahzad Saleem, Oliver Popov

Journal of Digital Forensics, Security and Law

The proliferation of mobile communication and computing devices, in particular smart mobile phones, is almost paralleled with the increasing number of mobile device forensics tools in the market. Each mobile forensics tool vendor, on one hand claims to have a tool that is best in terms of performance, while on the other hand each tool vendor seems to be using different standards for testing their tools and thereby defining what support means differently. To overcome this problem, a testing framework based on a series of tests ranging from basic forensics tasks such as file system reconstruction up to more complex …

Technical Soddi Defenses: The Trojan Horse Defense Revisited, Chad M. Steel

Journal of Digital Forensics, Security and Law

In 2004, the Trojan horse defense was at a crossroads, having been successfully employed in two child pornography cases in the United Kingdom, resulting in acquittals. Despite the early successes, the Trojan horse defense has failed to become a regularly employed strategy. The original Trojan horse defense has now become part of the more general technical SODDI (Some Other Dude Did It) defense, which includes the possibility of unknown actors using unsecured Wi-Fi connections or having physical access to a computer to perform criminal acts. In the past ten years, it has not been effective in the United States for …

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

A State-Of-The-Art Review Of Cloud Forensics, Sameera Almulla, Youssef Iraqi, Andrew Jones

Journal of Digital Forensics, Security and Law

Cloud computing and digital forensics are emerging fields of technology. Unlike traditional digital forensics where the target environment can be almost completely isolated, acquired and can be under the investigators control; in cloud environments, the distribution of computation and storage poses unique and complex challenges to the investigators. Recently, the term “cloud forensics” has an increasing presence in the field of digital forensics. In this state-of-the-art review, we included the most recent research efforts that used “cloud forensics” as a keyword and then classify the literature into three dimensions: (1) survey-based, (2) technology-based and (3) forensics-procedural-based. We discuss widely accepted …

Understanding Computer Forensics Requirements In China Via The “Panda Burning Incense” Virus Case, Frank Law, K. P. Chow, Y. H. Mai

Journal of Digital Forensics, Security and Law

In March 2012, Mainland China has amended its Criminal Procedure Law, which includes the introduction of a new type of evidence, i.e., digital evidence, to the court of law. To better understand the development of computer forensics and digital evidence in Mainland China, this paper discusses the Chinese legal system in relation to digital investigation and how the current legal requirements affect the existing legal and technical usage of digital evidence at legal proceedings. Through studying the famous “Panda Burning Incense (Worm.WhBoy.cw)” virus case that happened in 2007, this paper aims to provide a better understanding of how to properly …

Forensics Of Software Copyright Infringement Crimes: The Modern Posar Test Juxtaposed With The Dated Afc Test, Vinod P. Bhattathiripad

Journal of Digital Forensics, Security and Law

This paper presents a new development in the forensics of software copyright through a juxtaposed comparison between the proven AFC test and the recent POSAR test, the two forensic procedures for establishing software copyright infringement cases. First, the paper separately overviews the 3-stage, linear sequential AFC test and then the 5-phase, cyclic POSAR test (as AFC’s logical extension). The paper then compares the processes involved in each of the 5 phases of the POSAR test with the processes involved in the 3 stages in the AFC test, for the benefit of forensic practitioners and researchers. Finally, the paper discusses some …

Fighting Child Pornography: A Review Of Legal And Technological Developments, Jasmine V. Eggestein, Kenneth J. Knapp

Journal of Digital Forensics, Security and Law

In our digitally connected world, the law is arguably behind the technological developments of the Internet age. While this causes many issues for law enforcement, it is of particular concern in the area of child pornography in the United States. With the wide availability of technologies such as digital cameras, peer-to-peer file sharing, strong encryption, Internet anonymizers and cloud computing, the creation and distribution of child pornography has become more widespread. Simultaneously, fighting the growth of this crime has become more difficult. This paper explores the development of both the legal and technological environments surrounding digital child pornography. In doing …

A Study Of Forensic Imaging In The Absence Of Write-Blockers, Gary C. Kessler, Gregory H. Carlton

Journal of Digital Forensics, Security and Law

Best practices in digital forensics demand the use of write-blockers when creating forensic images of digital media, and this has been a core tenet of computer forensics training for decades. The practice is so ingrained that the integrity of images created without a write-blocker are immediately suspect. This paper describes a research framework that compares forensic images acquired with and without utilizing write-blockers in order to understand the extent of the differences, if any, in the resultant forensic copies. We specifically address whether differences are superficial or evidentiary, and we discuss the impact of admitting evidence acquired without write blocking. …

Measuring The Educational Benefits Of Diversity In Engineering Education: A Multi-Institutional Survey Analysis Of Women And Underrepresented Minorities, Terrell Lamont Strayhorn, Leroy L. Long Iii, Michael Steven Williams, Marjorie Luce Dorime-Williams, Derrick L. Tillman-Kelly

Publications

Changing demographics of the U.S. population drive growing emphases on diversity in engineering education. Still, questions persist about the educational benefits of race and gender diversity within the student population, despite decades of supportive research. The present study sought to estimate the educational benefits that accrue to undergraduate engineering students who interact with diverse peers and perspectives. Furthermore, differences across gender and race were explored. Multi-institutional survey data were analyzed for over 100 undergraduate engineering students using a 2007 administration of the National Survey of Student Engagement (NSSE). Findings show that encouraging contact among students from different economic, social, or …

African American And Hispanic Stem Students' Engagement At Predominantly White Institutions, Terrell Lamont Strayhorn, Fei Bie, Leroy L. Long Iii, Blossom A. Barrett

Publications

Although research has shown that involvement is a helpful predictor of students’ future success, underrepresented minorities (i.e., African Americans and Hispanics) face unique obstacles at predominantly White institutions, which limit their engagement in educationally purposeful activities. Survey data from a 2007 administration of the National Survey of Student Engagement (NSSE) were analyzed to measure African American and Hispanic students’ engagement in educationally purposeful activities. Results from the present study found that student satisfaction in college is positively related to time spent preparing for class and frequency of interactions with faculty members about careers. Furthermore, African American and Hispanic science, technology, …

Differential Spectral Imaging Of The Cn Violet Band In Laser-Induced Plasmas On Tnt Simulant Molecules, J. Merten, M. Jones, S. Hoke, S. Allen

Publications

Dual channel emission imaging of m-nitrobenzoic acid and benzoic acid was performed in order to visualize the morphology of the CN violet band emission of a TNT analogue. The CN channel was corrected for continuum emission using a simultaneously imaged background channel. Simultaneous dual channel imaging alleviated problems with shot to shot variation in the plasma morphology due to the friable substrates and showed differences between plasmas formed on the two targets.

Examining The Relationship Between Familiarity And Reliability Of Automation In The Cockpit, Rian Mehta, Steven Rice, Scott Winter

Publications

This study sought to determine the correlation between familiarity and perceptions of reliability, as associated to specific aviation-related automated devices. Participants’ experience levels ranged from non-pilots to novice pilots to certified flight instructors. It was hypothesized that familiarity has a direct correlation with ratings of reliability for various aviation-related automated devices and that the correlation across devices for each participant would be positive. The researchers expected to find a difference in the familiarity-reliability relationship as a function of experience. Findings showed that there was a significant positive correlation between familiarity and reliability for every single automated device. A positive correlation …

Robust Image-Based Visual Servo Control Of An Uncertain Missile Airframe, Murat Tunca Aygun

Doctoral Dissertations and Master's Theses

A nonlinear vision-based guidance law is presented for a missile-target scenario in the presence of model uncertainty and unknown target evasive maneuvers. To ease the readability of this thesis, detailed explanations of any relevant mathematical tools are provided, including stability definitions, the procedure of Lyapunov-based stability analysis, sliding mode control fundamentals, basics on visual servo control, and other basic nonlinear control tools. To develop the vision-based guidance law, projective geometric relationships are utilized to combine the image kinematics with the missile dynamics in an integrated visual dynamic system. The guidance law is designed using an image-based visual servo control method …

Molecular Dynamics Model Of Carbon Nanotubes In Epon 862/Detda Polymer, Guttormur Arnar Ingvason

Doctoral Dissertations and Master's Theses

The aerospace industry is interested in increasing the strength while reducing the weight of carbon fiber composite materials. Adding single walled carbon nanotubes (SWCNT) to a polymer matrix can achieve that goal by improving delamination properties of the composite. Due to the complexity of polymer molecules and the curing process, few 3-D Molecular Dynamics simulations of a polymer-SWCNT composite have been run. Our model runs on the Large-scale Atomic/Molecular Massively Parallel Simulator (LAMMPS), with a COMPASS (Condensed phase Optimized Molecular Potential for Atomistic Simulations Studies) potential to represent the interactions between the atoms of the polymer and the SWCNT. This …

Investigation Into The Effects Of Wire Mesh On Tensile And Impact Properties Of Fiber Metal Laminates, Shivani A. Rudradat

Doctoral Dissertations and Master's Theses

An investigational study was conducted into the tensile and impact behavior of Fiber Metal Laminates by combining 5052 aluminum mesh or2024-T3 aluminum sheets,2.47 N (8.9 oz) or 6.67 N (24 az) ShieldStand^® S fiberglass, and Hysol EA 9313 epoxy. Testing was performed under the guidelines of ASTM D3039-00 utilizing an lnstron 8802 Servohydraulic Materials Testing Instrument for tensile tests and ASTM D3763-06 utilizing an Inston 9250 HV Dynatup Impulse Impact Testing System for impact tests. Samples were strained at arate of 2 mrn/min for tensile tests and impacted with enetgies of 10 to 40 J in l0 J increments …

Development Of A Hybrid Vehicle Powertrain Test Laboratory, Bennet Samuel Soundarraj

Doctoral Dissertations and Master's Theses

During the last two years, Embry-Riddle Aeronautical University has installed and tested a fully functional eddy-current chassis dynamometer testing facility on campus. An automotive test facility requires a systems engineering approach to install, calibrate and commission a chassis dynamometer. This thesis shows that, the dynamometer test facility was successfully installed, commissioned and documented to safely support the power train development and testing. We can currently test the EcoCAR vehicle and a number of other front-wheel-drive vehicles at our university campus using the eddy current chassis dynamometer.

Flying The U-2, Art Saboski

ERAU Prescott Aviation History Program

Learn what it was like to fly the famous U-2, one of history’s most secretive aircraft, from a pilot who has done just that. Art Saboski spent most of his Air Force career flying the U-2; commanding U-2 organizations as well as planning and conducting reconnaissance/intelligence operations. He will give his unique perspectives on the high altitude aircraft, its history, development and current uses today.

The Effects Of Aircraft Certification Rules On General Aviation Accidents, Carolina Lenz Anderson

Doctoral Dissertations and Master's Theses

The purpose of this study was to analyze the frequency of general aviation airplane accidents and accident rates on the basis of aircraft certification to determine whether or not differences in aircraft certification rules had an influence on accidents. In addition, the narrative cause descriptions contained within the accident reports were analyzed to determine whether there were differences in the qualitative data for the different certification categories. The certification categories examined were: Federal Aviation Regulations Part 23, Civil Air Regulations 3, Light Sport Aircraft, and Experimental-Amateur Built. The accident causes examined were those classified as: Loss of Control, Controlled Flight …

Comparison Of Three Angle Of Attack (Aoa) Indicators: A Usability Study, Camilo Jimenez

Doctoral Dissertations and Master's Theses

Angle of Attack (AOA) is an important aeronautical concept used to understand the performance status of an aircraft during different flight stages. The Federal Aviation Administration (FAA) has indicated the importance of developing and encouraging the use of affordable AOA based systems to increase inflight safety. Embry-Riddle Aeronautical University's flight department decided to install AOA indicators in its fleet of Cessna 172S, to increase safety and to help student pilots better understand this important concept. This paper presents a review of AOA, visual display design principles, and usability. This experimental study examined three different AOA indicators provided by the …

Performance Analysis Of Non-Linear Adaptive Control Laws Using Hardware In The Loop Of An Unmanned Aerial System, Brendon Lyons

Doctoral Dissertations and Master's Theses

In practical applications, an Unmanned Aerial System's (UAS) baseline performance is dictated by how well it can follow a given trajectory with limited stress on the actuators. However, these can be insufficient performance metrics when the UAS is allowed to adapt to an unpredicted external influence such as turbulence or actuation failure, while maintaining a satisfactory baseline performance.

In this thesis, different control laws based on the formation flight geometry problem, nonlinear dynamic inversion and an artificial immune system adaptive mechanism , are implemented in hardware-in-the-loop as a precursor for in-flight testing. These controllers are compared based on three performance …