Aviation Safety and Security Commons^™

Human Factors Contributing To Unstabilized Approaches And Landings In Commercial Aviation Incidents: An Analysis Of Asrs Reports, Garrin E. Ross

Doctoral Dissertations and Master's Theses

The purpose of this study was to investigate the human factors reported as contributing to operational incidents of unstabilized approaches and landings in United States-based commercial aviation. While previous aviation safety studies have analyzed aviation incident data when investigating the human factor influences during commercial aviation operations and incidents, unstabilized approaches and landings have not been explicitly examined using similar methods. Informed by the findings and recommendations of the Flight Safety Foundation’s Approach and Landing Accident Reduction Task Force, this study examined and analyzed the Aviation Safety Reporting System (ASRS) incident report data from unstabilized approach and landing events. The …

Back Matter, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

Front Matter, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

Contents, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

Unmanned Aerial Systems: Research, Development, Education & Training At Embry-Riddle Aeronautical University, Michael P. Hickey

Publications

With technological breakthroughs in miniaturized aircraft-related components, including but not limited to communications, computer systems and sensors, state-of-the-art unmanned aerial systems (UAS) have become a reality. This fast-growing industry is anticipating and responding to a myriad of societal applications that will provide new and more cost-effective solutions that previous technologies could not, or will replace activities that involved humans in flight with associated risks.

Embry-Riddle Aeronautical University has a long history of aviation-related research and education, and is heavily engaged in UAS activities. This document provides a summary of these activities, and is divided into two parts. The first part …

Shell Revisited: Cognitive Loading And Effects Of Digitized Flight Deck Automation, Mark D. Miller, Sam Holley

Publications

Acknowledging the SHELL human factors model, authors examine interfaces among components and assess problems created when the model is aligned with modern digitized flight deck systems. Complacency and overreliance on automated systems are evaluated, and cognitive load and potential for degraded situational awareness are examined. Authors present a SHELL overlay demonstrating where particular digitized functions and operations present challenges to operators and markedly influence effective SHELL interactions in highly complex flight deck systems. Human factors contributing to the Asiana Flight 214 accident are examined and correlates identified with the SHELL analysis. Implications for advanced crew resource management are presented, and …

Called To Safety? Individual And Combined Effects Of Safety Climate And Occupational Callings On Aviator Safety Performance, Michele W. Gazica, Erin E. Bowen, Michael A. Mccarson, Kristen A-M. Chadwell

Journal of Aviation/Aerospace Education & Research

This study examined the individual and combined effects of two potential antecedents to aviation-related safety performance: safety climate and occupational callings. Research exploring the importance of occupational callings to the safety domain is in its nascent stages. The extent that someone is living a calling may explain variance in actual safety performance above that which can be explained by safety climate alone. Survey data from aviators in a flight training program were analyzed to evaluate the ability of occupational calling assessments to inform the potential for safety mishaps within the aviation industry. Results indicate that both safety climate and occupational …

Human Error Analysis Of Helicopter Emergency Medical Services (Hems) Accidents Using The Human Factors Analysis And Classification System (Hfacs), Paul E. Cline

Journal of Aviation/Aerospace Education & Research

Helicopter Emergency Medical Services (HEMS) is among the most dangerous type of flying in commercial aviation. This research utilized the Human Factors Analysis and Classification System (HFACS) to understand the errors, preconditions and violations that contribute to these accidents. Drawing upon source data from the National Transportation Safety Board’s Aviation Accident Database, HEMS accidents from 2000-2016 were analyzed according to the HFACS framework.

Predicting General Aviation Pilots’ Weather-Related Performance Through A Scenario-Based Assessment, Jessica Cruit, Christina Frederick, Beth Blickensderfer, Joseph Keebler, Thomas Guinn

Publications

Weather-related accidents continue to challenge the general aviation (GA) community and with the development of advanced weather technology, GA pilots need additional education and training on how to effectively use these weather products to ensure flight safety. Currently, the literature on aviation weather suggests that there is a gap in both training and assessment strategy for GA pilots. Furthermore, several studies advocate assessing GA pilots at a deeper level of learning by including weather-based, scenario/application questions on the Federal Aviation Administration’s (FAA) written exam for private pilots. After first developing a scenario-based, aviation weather assessment, we used a multiple regression …

An Evaluation Of The Relationships Between Collegiate Aviation Safety Management System Initiative, Self-Efficacy, Transformational Safety Leadership And Safety Behavior Mediated By Safety Motivation, Daniel Kwasi Adjekum

International Journal of Aviation, Aeronautics, and Aerospace

The study conceptualized Safety Management System (SMS) initiative, self-efficacy, and transformational safety leadership as constructs that relates to safety behavior (measured by safety compliance and safety participation) when mediated by safety motivation using a quantitative approach. Structural equation modeling techniques was used to derive a final measurement model that fit the empirical data and was used to test the study hypotheses. Utilizing a sample of 282 collegiate flight students and instructors from a large public university in the US, a 46-item survey was used to measure respondent’s perceptions on the study variables. The results indicate that perceptions of SMS policy …

Opening Autonomous Airspace–A Prologue, Samuel M. Vance

International Journal of Aviation, Aeronautics, and Aerospace

The proliferation of Unmanned Aerial Vehicles (UAV), and in particular small Unmanned Aerial Systems (sUAS), has significant operational implications for the Air Traffic Control (ATC) system of the future. Integrating unmanned aircraft safely presents long-standing challenges, especially during the lengthy transition period when unmanned vehicles will be mixed with piloted vehicles. Integration of dissimilar systems is not an easy, straight-forward task and in this case is complicated by the difficulty to truly know what is present in the airspace. Additionally, there are significant technology, security and liability issues that will need resolution to ensure property and life are protected and …

An Evaluation Of The Relationships Between Collegiate Aviation Safety Management System Initiative, Self-Efficacy, Transformational Safety Leadership And Safety Behavior Mediated By Safety Motivation, Daniel Kwasi Adjekum

Aviation Faculty Publications

The study conceptualized Safety Management System (SMS) initiative, self-efficacy, and transformational safety leadership as constructs that relates to safety behavior (measured by safety compliance and safety participation) when mediated by safety motivation using a quantitative approach. Structural equation modeling techniques was used to derive a final measurement model that fit the empirical data and was used to test the study hypotheses. Utilizing a sample of 282 collegiate flight students and instructors from a large public university in the US, a 46-item survey was used to measure respondent’s perceptions on the study variables. The results indicate that perceptions of SMS policy …

Using Conversation Analysis In Data-Driven Aviation Training With Large-Scale Qualitative Datasets, William A. Tuccio, Maurice Nevile

Journal of Aviation/Aerospace Education & Research

This paper contributes to a growing body of work related to the Conversation Analytic Role-play Method (CARM) by studying the primary flight instruction environment to create training interventions related to radio communications and flight instruction practices. Framed in the context of conversation analysis, an approach to the detailed analysis of naturally occurring interaction, the large-scale, long-duration qualitative audio/video data collection and coding methodology is discussed, followed by trends identified in the ongoing study. The concept of CARM “trainables” are discussed with examples. The study shows that large-scale qualitative datasets may be leveraged to produce valuable data-driven training interventions.

Flight Emergency Advice Works Just As Well Back On The Ground, Carolyn Massiah

UCF Forum

Save yourself first!

This one sentence is a valuable piece of advice I wish I had received and fully embraced so much earlier in life. In fact, it is still a notion that I struggle with because it is one that sounds selfish in nature. However, now more than at any other point in my life, I realize that in order to be selfless and to be able to assist others, you must first truly work on thinking of your own self first.

The Effects Of Safety Culture And Ethical Leadership On Safety Performance, Kevin O’Leary

Doctoral Dissertations and Master's Theses

This dissertation investigated the effects of safety culture and ethical leadership on safety performance in Fractional jet pilots in the United States. The primary objective was to develop a well-fitted model linking these constructs. A composite survey instrument was developed from instruments previously validated in the literature.

There were 305 complete and valid responses from Fractional pilots. The hypothesized factor structure consisted of seven factors. The exogenous factor of safety culture was made up of four sub-factors. The endogenous factors included ethical leadership, pilot commitment, and safety performance. Safety performance was a second order factor consisting of errors and attitudes …

Sim Card Forensics: Digital Evidence, Nada Ibrahim, Nuha Al Naqbi, Farkhund Iqbal, Omar Alfandi

Annual ADFSL Conference on Digital Forensics, Security and Law

With the rapid evolution of the smartphone industry, mobile device forensics has become essential in cybercrime investigation. Currently, evidence forensically-retrieved from a mobile device is in the form of call logs, contacts, and SMSs; a mobile forensic investigator should also be aware of the vast amount of user data and network information that are stored in the mobile SIM card such as ICCID, IMSI, and ADN. The aim of this study is to test various forensic tools to effectively gather critical evidence stored on the SIM card. In the first set of experiments, we compare the selected forensic tools in …

Assessing The Gap: Measure The Impact Of Phishing On An Organization, Brad Wardman

Annual ADFSL Conference on Digital Forensics, Security and Law

Phishing has become one of the most recognized words associated with cybercrime. As more organizations are being targeted by phishing campaigns, there are more options within the industry to deter such attacks. However, there is little research into how much damage these campaigns are causing organizations. This paper will show how financial organizations can be impacted by phishing and present a method for accurately quantifying resultant monetary losses. The methodology presented in this paper can be adapted to other organizations in order to quantify phishing losses across industries.

Keywords: phishing, cybercrime, economics

Wban Security Management In Healthcare Enterprise Environments, Karina Bahena, Manghui Tu

Annual ADFSL Conference on Digital Forensics, Security and Law

As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and public organizations under obligations to take actions to prevent such data breaches. Various vulnerabilities have been identified in healthcare enterprise environments, in which the Wireless Body Area Networks (WBAN) remains to be a major vulnerability, which can be easily taken advantage of by determined adversaries. Thus, vulnerabilities of WBAN systems and the effective countermeasure mechanisms to secure WBAN are urgently needed. In this research, first, the architecture of WBAN system has been explored, and the …

Forensics Analysis Of Privacy Of Portable Web Browsers, Ahmad Ghafarian

Annual ADFSL Conference on Digital Forensics, Security and Law

Web browser vendors offer a portable web browser option which is considered as one of the features that provides user privacy. Portable web browser is a browser that can be launched from a USB flash drive without the need for its installation on the host machine. Most popular web browsers have portable versions of their browsers as well. Portable web browsing poses a great challenge to computer forensic investigators who try to reconstruct the past browsing history, in case of any computer incidence. This research examines various sources in the host machine such as physical memory, temporary, recent, event files, …

Reverse Engineering A Nit That Unmasks Tor Users, Matthew Miller, Joshua Stroschein, Ashley Podhradsky

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper is a case study of a forensic investigation of a Network Investigative Technique (NIT) used by the FBI to deanonymize users of a The Onion Router (Tor) Hidden Service. The forensic investigators were hired by the defense to determine how the NIT worked. The defendant was ac- cused of using a browser to access illegal information. The authors analyzed the source code, binary files and logs that were used by the NIT. The analysis was used to validate that the NIT collected only necessary and legally authorized information. This paper outlines the publicly available case details, how the …

Malware In The Mobile Device Android Environment, Diana Hintea, Robert Bird, Andrew Walker

Annual ADFSL Conference on Digital Forensics, Security and Law

exploit smartphone operating systems has exponentially expanded. Android has become the main target to exploit due to having the largest install base amongst the smartphone operating systems and owing to the open access nature in which application installations are permitted. Many Android users are unaware of the risks associated with a malware infection and to what level current malware scanners protect them. This paper tests how efficient the currently available malware scanners are. To achieve this, ten representative Android security products were selected and tested against a set of 5,560 known and categorized Android malware samples. The tests were carried …

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …

Current Challenges And Future Research Areas For Digital Forensic Investigation, David Lillis, Brett A. Becker, Tadhg O’Sullivan, Mark Scanlon

Annual ADFSL Conference on Digital Forensics, Security and Law

Given the ever-increasing prevalence of technology in modern life, there is a corresponding increase in the likelihood of digital devices being pertinent to a criminal investigation or civil litigation. As a direct consequence, the number of investigations requiring digital forensic expertise is resulting in huge digital evidence backlogs being encountered by law enforcement agencies throughout the world. It can be anticipated that the number of cases requiring digital forensic analysis will greatly increase in the future. It is also likely that each case will require the analysis of an increasing number of devices including computers, smartphones, tablets, cloud-based services, Internet …

Forensic Analysis Of Ares Galaxy Peer-To-Peer Network, Frank Kolenbrander, Nhien-An Le-Khac, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

Child Abuse Material (CAM) is widely available on P2P networks. Over the last decade several tools were made for 24/7 monitoring of peer-to-peer (P2P) networks to discover suspects that use these networks for downloading and distribution of CAM. For some countries the amount of cases generated by these tools is so great that Law Enforcement (LE) just cannot handle them all. This is not only leading to backlogs and prioritizing of cases but also leading to discussions about the possibility of disrupting these networks and sending warning messages to potential CAM offenders. Recently, investigators are reporting that they are creating …