Engineering Commons^™

The Cyber-Workplace – Identifying Liability Issues In The Information Age And Managing E-Risk, Nigel Wilson

Annual ADFSL Conference on Digital Forensics, Security and Law

The information age provides numerous opportunities for modern society but also presents significant challenges in identifying liability issues and in managing risk. Technological change has occurred rapidly and is continuing at the same time as other major trends and changes are taking place in society and, in particular, in the workplace. The prospect of global liability and the complexity of jurisdictional differences present a considerable hurdle to the uniform regulation of liability issues. General legislation and legal principles have been readily applied to the cyber-world and to modern business practices and the workplace. Where necessary, legislatures have introduced specific legislation …

Data Mining Techniques For Fraud Detection, Rekha Bhowmik

Annual ADFSL Conference on Digital Forensics, Security and Law

The paper presents application of data mining techniques to fraud analysis. We present some classification and prediction data mining techniques which we consider important to handle fraud detection. There exist a number of data mining algorithms and we present statistics-based algorithm, decision tree-based algorithm and rule-based algorithm. We present Bayesian classification model to detect fraud in automobile insurance. Naïve Bayesian visualization is selected to analyze and interpret the classifier predictions. We illustrate how ROC curves can be deployed for model assessment in order to provide a more intuitive analysis of the models.

Keywords: Data Mining, Decision Tree, Bayesian Network, ROC …

Simple - Rethinking The Monolithic Approach To Digital Forensic Software, Craig Valli

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper outlines a collaborative project nearing completion between the sec.au Security Research Group at Edith Cowan University and Western Australian Police Computer Crime Squad. The primary goal of this project is to create a software tool for use by non-technical law enforcement officers during the initial investigation and assessment of an electronic crime scene. This tool will be designed as an initial response tool, to quickly and easily find, view and export any relevant files stored on a computer, establishing if further expert investigation of that computer is warranted. When fully developed, the tool will allow investigators unprecedented real …

How Virtualized Environments Affect Computer Forensics, Diane Barrett

Annual ADFSL Conference on Digital Forensics, Security and Law

Virtualized environments can make forensics investigation more difficult. Technological advances in virtualization tools essentially make removable media a PC that can be carried around in a pocket or around a neck. Running operating systems and applications this way leaves very little trace on the host system. This paper will explore all the newest methods for virtualized environments and the implications they have on the world of forensics. It will begin by describing and differentiating between software and hardware virtualization. It will then move on to explain the various methods used for server and desktop virtualization. Next, it will describe the …

The Virtual Digital Forensics Lab - Expanding Law Enforcement Capabilities, Mark Mccoy, Sean A. Ensz

Annual ADFSL Conference on Digital Forensics, Security and Law

Law enforcement is attempting to respond to the growing and complex need to examine all manner of digital evidence using stand-alone forensic workstations and limited storage solutions. Digital forensic investigators often find their cases stalled by cumbersome and inflexible technology limiting their effectiveness. The Virtual Digital Forensics Lab (VDFL) is a new concept that applies existing enterprise host, storage, and network virtualization technologies to current forensic investigative methods. This paper details the concept of the VDFL, the technology solutions it employs, and the flexibility it provides for digital forensic investigators.

Keywords: Virtual Digital Forensics, digital forensic investigations, law enforcement, virtual …

Digital Forensic Certification Versus Forensic Science Certification, Nena Lim

Annual ADFSL Conference on Digital Forensics, Security and Law

Companies often rely on certifications to select appropriate individuals in disciplines such as accounting and engineering. The general public also tends to have confidence in a professional who has some kinds of certification because certification implies a standard of excellence and that the individual has expert knowledge in a specific discipline. An interesting question to the digital forensic community is: How is a digital forensic certification compared to a forensic science certification? The objective of this paper is to compare the requirements of a digital forensic certification to those of a forensic science certification. Results of the comparison shed lights …

Nuclear Energy, Steve Kraft

Native American Forum on Nuclear Issues

Abstract:

-Why Nuclear Energy?

-The lesson of the last 20 years in U.S. electricity policy:

– Diversified fuel and technology portfolio is essential

– All fuels and technologies (nuclear, coal, natural gas, renewables, efficiency) have a legitimate role

-The challenge for the future:

– Preserving/restoring diversified portfolio

– Ensuring resource adequacy, particularly in competitive markets

-Expanded use of nuclear energy is part of the answer

– Integrated used fuel management supports nuclear competitiveness

Poster Session, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Kentucky Water Awareness Month Packet, Ashley Osborne, UK Cooperative Extension Service, ENRI Task Force
• Recent Enhancements to the Kentucky Groundwater-Quality Data Search Engine, Bart Davidson and R. Stephen Fisher, KGS
• Diatom Colonization Patterns and Carbon Stable Isotopic Ratios in Developing Periphyton at Springs of Differing Geologic Origin in Land-Between-the-Lakes, Courtney Snapp and Susan Hendricks, Water Sciences Program, Murray State University
• Seasonal Changes in Stratification and Oxygen Content of a Eutrophic Lake, Wilgreen Lake, Madison County, Kentucky, Jill Hunter and Walter Borowski, Dept of Geography and Geology, EKU
• Water Pioneers Water Quality Program 2007, Stephanie Jenkins, …

Session 2d: Pathogen Transport, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Assessment of Nonpoint Source Impacts on Groundwater Quality in South Elkhorn Creek Basin, Central Kentucky, Robert J. Blair and others, Kentucky Division of Water, Frankfort
• Karst Groundwater Infiltration of the Sanitary Sewer within the Beargrass Creek Watershed, Jefferson County, Kentucky, Joseph Ray and others, Kentucky Division of Water
• Illicit Discharge into Town Branch in Lexington, Kentucky, Jim Buckles and others, Tetra Tech, Lexington
• Assessment of Water Quality Trends in the Upper Forks of the Kentucky River Basin: Focus on Pathogen Impairment, Chandramouli Viswanathan, Kentucky Water Resources Research Institute, UK

Session 2c: Water Quality, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Determinations of Bioavailable Fractions in the Assessment of Metals in Big and Little Bayou Creeks……, McCracken County, Kentucky, David J. Price, Dept Biology, UK
• Creation of a Catalog of Environmental Mercury Databases in Kentucky, Caroline Chan and others, School of Public Health and Information Sciences, U of L
• Using Nitrogen Isotopes to Trace Nutrient Inputs to a Eutrophic Lake, Wilgreen Lake, Madison County, Kentucky, Walter Borowski and Theresa Aguiar, Dept of Geography and Geology, EKU
• Using Microbial Distribution and Abundance in a Eutrophic Lake as a Tracer for Nutrient Inputs, Wilgreen Lake, Madison County Kentucky, Theresa …

Session 2b: Variety, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Mud, Horses and Clean Water – A BMP Demonstration Project for Suburban Horse Owners, Steve Higgins and others, Biosystems and Ag Engineering, UK
• A Topological Model of Open Channel Flows, Brian Belcher and Jimmy Fox, Dept of Civil Engineering, UK
• Rain Gardens: Restoring a Waste Water to a Priceless Treasure, H. David Gabbard, LFUCG, Richard Walker, Tetra Tech, and Sandy Camargo, CDP Engineers
• Kentucky Erosion Prevention and Sediment Control (KESPSC) – An Answer to the Question “What is a Qualified Inspector?” Shelby Jett, Kentucky Transportation Cabinet, Kevin Gibson and John Ricketts, Stantec Consulting Services, Lexington

Session 2a: Groundwater, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• How Close Do We Need to Sample for Appropriate Solute Transport Characterization Through the Vadose Zone? Ole Wendroth and others, Dept of Plant and Soil Sciences, UK
• Efficiently Locating and Repairing Damaged Sewer Lines in a Karst Terrane, Kevin Lyne, LFUCG and Robert Blair, KDOW
• Hydrogeologic Investigations of Pavement Subsidence in the Cumberland Gap Tunnel, Jim Dinger and others, KGS

Session 1d: Land Use, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Mountaintop Mining and Sustainable Development Opportunities for Appalachia, J. Stephen Gardner, Engineering Consulting Services, Inc., Lexington
• Spatial Characterization of Kentucky’s 2005-2001 Land Cover Change, A Kentucky Landscape Census Product, Demetrio Zourarakis and others, Kentucky Division of Geographic Information
• Feasibility Study of Cover-Collapse Rate in the Western Pennyroyal Karst of Kentucky, James Currens and Randall Paylor, KGS
• Kentucky SPARROW Model and its Applications to Understanding Nutrient Loads, Tanja N. Williamson, USGS Kentucky Water Science Center

Session 1c: Student Research Projects, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• A 3-D Computational Fluid Dynamics Code for Simulation of Pump Stations with Vertical Plunging Jet and Air Bubble Transport, Tien Mun Yee and Scott Yost, Dept of Civil Engineering, UK
• Chemical Evolution of Groundwater in the Wilcox Aquifer of the Mississippi Embayment, Estifanos Haile and Alan Fryar, Dept of Earth and Environmental Sciences, UK
• Sediment Organic Matter Degradation within Storage Zones Deposited In-Stream, Charles Davis and Jimmy Fox, Dept of Civil Engineering, UK
• Effectiveness of Improved Skid Trail Headwater Stream Crossings, Jeffrey Stringer and Christopher Reeves, Dept of Forestry, UK

Session 1b: Education, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Community Based Science, Water Quality and Nonpoint Source Pollution, Carol Hanley and others, Tracy Farmer Center for the Environment, UK
• A Stormwater Education Program to Assist Kentucky’s MS4 Phase II Communities, Yvonne Meichtry and Julie Gee, Kentucky Transportation Cabinet, Frankfort
• Water/Wastewater Technician Training Institute: A Holistic Approach to Developing a Professional Water and Wastewater Workforce, Andrew Ernest, Center for Water Resource Studies, WKU
• Geology for Everyone, New Map Products from the Kentucky Geological Survey, Daniel Carey, KGS

Session 1a: Watersheds, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

• Cane Run Watershed Assessment and Restoration Project, Steve Higgins and others, Biosystems and Ag Engineering, UK
• Kentucky Institute for Watershed Management Support, Andrew Ernest, Center for Water Resource Studies, WKU
• Watershed Planning Guidebook for Kentucky Communities, Katie Holmes and others, Kentucky Waterways Alliance

Proceedings Of 2008 Kentucky Water Resources Annual Symposium, Kentucky Water Resources Research Institute, University Of Kentucky

Kentucky Water Resources Annual Symposium

This conference was planned and conducted as part of the state water resources research annual program with the support and collaboration of the Department of the Interior, U.S. Geological Survey and the University of Kentucky Research Foundation, under Grant Agreement Number 06HQGR0087.

The views and conclusions contained in this document and presented at the symposium are those of the abstract authors and presenters and should not be interpreted as necessarily representing the official policies, either expressed or implied, of the U.S. Government or other symposium organizers and sponsors.

Understanding And Optimizing Surfaces And Interfaces In Energy Conversion Devices, Clemens Heske

UNLV Renewable Energy Symposium

This inaugural event is dedicated to showcasing the renewable/sustainable energy projects of UNLV faculty, staff, students, and collaborators, as well as other external projects underway statewide and nationally. The development and utilization of new technologies to protect the environment, achieve energy independence, and strengthen the economy will be explored. Speakers and poster-session presenters will provide further insight to many ongoing projects and innovative research ideas.

Organized by UNLV’s Office of Strategic Energy Programs, the event offers participants the opportunity to learn about energy projects and will encourage networking and collaboration. This symposium is intended for researchers, educators, students, policy makers, …

Towards Redaction Of Digital Information From Electronic Devices, Gavin W. Manes, Lance Watson, David Greer, Alex Barclay, John Hale

Annual ADFSL Conference on Digital Forensics, Security and Law

In the discovery portion of court proceedings, it is necessary to produce information to opposing counsel. Traditionally, this information is in paper form with all privileged information removed. Increasingly, the information requested during discovery exists in digital form and savvy counsel is requesting direct access to the original digital source: a broad spectrum of additional digital information can be often be extracted using digital forensics. This paper describes the major problems which must be solved to redact digital information from electronic devices. The primary hurdle facing digital redaction is the lack of a rational process for systematically handling encoded, encrypted, …

Do Current Erasure Programs Remove Evidence Of Bittorrent Activity?, Andrew Woodward, Craig Valli

Annual ADFSL Conference on Digital Forensics, Security and Law

This research in progress aims to evaluate the effectiveness of commercial programs to erase traces of the use of BitTorrent software. The erasure programs MaxErase, P2PDoctor, Privacy Suite, Window Washer and R-Clean and Wipe were used on a machine that had used the BitTorrent client Azureus to download two torrent files. The drive was imaged and then searched for torrent files. The registry was also examined on the source machine. The program R-Clean and Wipe left evidence in both the registry and the image of the name and type of files that had been downloaded with this software. Of greater …

The Case For Teaching Network Protocols To Computer Forensics Examiners, Gary C. Kessler, Matt Fasulo

Annual ADFSL Conference on Digital Forensics, Security and Law

Most computer forensics experts are well-versed in basic computer hardware technology, operating systems, common software applications, and computer forensics tools. And while many have rudimentary knowledge about the Internet and simple network-lookup tools, they are not trained in the analysis of network communication protocols and the use of packet sniffers. This paper describes digital forensics applications for network analysis and includes four case studies.

Keywords: computer forensics education, network forensics, protocol analysis

Textbooks For Computer Forensic Courses: A Preliminary Study, Jigang Liu, Larry Gottschalk, Kuodi Jian

Annual ADFSL Conference on Digital Forensics, Security and Law

As computer forensics develops into one of the fastest-growing areas in the computer related fields, many universities and colleges are offering or are planning to offer a course in computer forensics. When instructors begin to develop a new course in the area, one of critical questions they would ask is what textbook should be used. To better answer the question, we conducted a study in which we tried to find which textbooks are being used in computer forensic courses. We believe that the results and analysis of our study will help instructors in choosing adequate textbooks for their new course …

Education For Cyber Crime Investigators, David Greer, Joe Mulenex, John Hale, Gavin W. Manes

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital forensics and cyber crime investigations are continually growing, rapidly changing fields requiring law enforcement agencies to meet very rigorous training requirements. New opportunities for committing criminal activity against persons, organization or property are presented every day with the proliferation of personal digital devices, computers, the internet, computer networks, and automated data systems. Whether the crime involves attacks against computer systems, electronic information, or more traditional crimes such as murder, money laundering or fraud, electronic evidence is becoming more prevalent. It is no surprise that law enforcement and criminal justice officials are being overwhelmed by the volume of investigations and …

Computer Geolocation Using Extracted Features, Chad M.S. Steel

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper compares the extracted feature data from a sample set of hard drive images in an effort to relate the features to the physical location of the drive. A list of probable zip codes, phone numbers, place names, and IP addresses are extracted from raw drive images and compared to manually identified geolocation data. The results of the individual extractions are then analyzed to determine the feasibility in using automated extraction and analysis techniques for geolocating hard drives.

Keywords: hard disk forensics, geocoding, geolocation

Defending Against Insider Use Of Digital Steganography, James E. Wingate, Glenn D. Watt, Marc Kurtz, Chad W. Davis, Robert Lipscomb

Annual ADFSL Conference on Digital Forensics, Security and Law

The trusted insider is among the most harmful and difficult to detect threats to information security, according to the Federal Plan for Information Assurance and Cyber Security Research and Development released in April 2006. By default, employees become trusted insiders when granted the set of privileges needed to do their jobs, which typically includes access to the Internet. It is generally presumed the insiders are loyally working to achieve the organization’s goals and objectives and would not abuse the privileges given to them. However, some insiders will inevitably abuse some of their privileges. For example, a trusted insider might abuse …

Investigating Information Structure Of Phishing Emails Based On Persuasive Communication Perspective, Ki Jung Lee, Il-Yeol Song

Annual ADFSL Conference on Digital Forensics, Security and Law

Current approaches of phishing filters depend on classifying messages based on textually discernable features such as IP-based URLs or domain names as those features that can be easily extracted from a given phishing message. However, in the same sense, those easily perceptible features can be easily manipulated by sophisticated phishers. Therefore, it is important that universal patterns of phishing messages should be identified for feature extraction to serve as a basis for text classification. In this paper, we demonstrate that user perception regarding phishing message can be identified in central and peripheral routes of information processing. We also present a …

Monitoring And Surveillance In The Workplace: Lessons Learnt? – Investigating The International Legal Position, Verine Etsebeth

Annual ADFSL Conference on Digital Forensics, Security and Law

When considering the legal implications of monitoring and surveillance in the workplace, the question may be asked why companies deploy computer surveillance and monitoring in the first place. Several reasons may be put forward to justify why more than 80% of all major American firms monitor employee e-mails and Internet usage. However, what most companies forget is the fact that the absence or presence of monitoring and surveillance activities in a company holds serious legal consequences for companies. From the discussion in this paper it will become apparent that there is a vast difference in how most countries approach this …

The Gap Between Theory And Practice In Digital Forensics, Joseph C. Sremack

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital forensics is a young field that is being defined by the reactive nature of its development – in terms of both research and practice. As technology develops, digital forensics is forced to react and adapt. The rapid development of technology and the lack of an established theoretical foundation has led to a disconnect between the theory and practice of digital forensics. While the base theoretical issues are being worked on by researchers, practitioners are dealing with entirely new sets of issues. The complexity of investigations is increasing, and anti-forensics techniques are advancing as well. The disconnect will be resolved …

An Exploratory Analysis Of Computer Mediated Communications On Cyberstalking Severity, Stephen D. Barnes, David P. Biros

Annual ADFSL Conference on Digital Forensics, Security and Law

The interaction between disjunctive interpersonal relationships, those where the parties to the relationship disagree on the goals of the relationship, and the use of computer mediated communications channels is a relatively unexplored domain. Bargh (2002) suggests that CMC channels can amplify the development of interpersonal relationships, and notes that the effect is not constant across communications activities. This proposal suggests a line of research that explores the interaction between computer mediated communications (CMC) and stalking, which is a common form of disjunctive relationships. Field data from cyberstalking cases will be used to look at the effects of CMC channels on …

Guideline Model For Digital Forensic Investigation, Salma Abdalla, Sherif Hazem, Sherif Hashem

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper proposes a detailed guideline model for digital forensics; the proposed model consists of five main phases, Preparation phase, Physical Forensics and Investigation Phase, Digital Forensics Phase, Reporting and Presentation Phase, and Closure Phase.

Most of the existing models in this field do not cover all aspects of digital forensic investigations, as they focus mainly on the processing of digital evidence or on the legal points. Although they gave good information to base on it a guide, but they are not detailed enough to describe fully the investigative process in a way that can be used by investigators during …