Aviation Safety and Security Commons^™

Malware In The Mobile Device Android Environment, Diana Hintea, Robert Bird, Andrew Walker

Annual ADFSL Conference on Digital Forensics, Security and Law

exploit smartphone operating systems has exponentially expanded. Android has become the main target to exploit due to having the largest install base amongst the smartphone operating systems and owing to the open access nature in which application installations are permitted. Many Android users are unaware of the risks associated with a malware infection and to what level current malware scanners protect them. This paper tests how efficient the currently available malware scanners are. To achieve this, ten representative Android security products were selected and tested against a set of 5,560 known and categorized Android malware samples. The tests were carried …

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …

Current Challenges And Future Research Areas For Digital Forensic Investigation, David Lillis, Brett A. Becker, Tadhg O’Sullivan, Mark Scanlon

Annual ADFSL Conference on Digital Forensics, Security and Law

Given the ever-increasing prevalence of technology in modern life, there is a corresponding increase in the likelihood of digital devices being pertinent to a criminal investigation or civil litigation. As a direct consequence, the number of investigations requiring digital forensic expertise is resulting in huge digital evidence backlogs being encountered by law enforcement agencies throughout the world. It can be anticipated that the number of cases requiring digital forensic analysis will greatly increase in the future. It is also likely that each case will require the analysis of an increasing number of devices including computers, smartphones, tablets, cloud-based services, Internet …

Forensic Analysis Of Ares Galaxy Peer-To-Peer Network, Frank Kolenbrander, Nhien-An Le-Khac, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

Child Abuse Material (CAM) is widely available on P2P networks. Over the last decade several tools were made for 24/7 monitoring of peer-to-peer (P2P) networks to discover suspects that use these networks for downloading and distribution of CAM. For some countries the amount of cases generated by these tools is so great that Law Enforcement (LE) just cannot handle them all. This is not only leading to backlogs and prioritizing of cases but also leading to discussions about the possibility of disrupting these networks and sending warning messages to potential CAM offenders. Recently, investigators are reporting that they are creating …

Keynote Speaker, Chuck Easttom

Annual ADFSL Conference on Digital Forensics, Security and Law

Conference Keynote Speaker, Chuck Easttom

Smart Gate Driver Design For Silicon (Si) Igbts And Silicon-Carbide (Sic) Mosfets, Abdulaziz Alghanem

Electrical Engineering Undergraduate Honors Theses

The design of an efficient and smart gate driver for a Si IGBT and SiC MOSFET is addressed in thesis. First, the main IGBT parameters are evaluated thoroughly in order to understand their effects in the design of the gate driver. All known consequences of previously designed gate drivers are studied in order to achieve an optimum gate driver. As a result of this assessment, the designer is able to determine whether adding or removing components from the gate driver circuit are beneficial or not. Then, exhaustive research is done to identify suitable integrated circuits to use for the power …

Flight Physician - May, 2016, Civil Aviation Medical Association

Browse all Civil Aviation Medical Association Newsletters

A nineteen page newsletter of the Civil Aviation Medical Association. The newsletter provided news about civil aviation medicine and information related to the organization.

The United States Aviation Industry And The Professional Pilot Training Environment, Andrew Marvin

Honors Theses

This study provides background and analysis of the legislation enacted following the crash of Colgan Air 3407, and the impact that the more stringent qualifications have had on aspiring professional pilots. Participants in the study include professional pilots and aspiring professional pilots, governmental law-making agencies such as the United States (U.S.) Congress and the Federal Aviation Administration (FAA), major and regional airlines, and collegiate flight training programs. The study drew from the National Transportation Safety Board investigation (NTSB) of Colgan Air 3407, federal regulations regarding pilot training and certification standards, and current airline hiring and training programs.

Findings of this …

Impact Of Weather On Serious Injury Rates Of Flight Crews, Morgan Eudy

Human Factors and Applied Psychology Student Conference

No abstract provided.

An Analysis Of Preflight Inspection Practices In The Collegiate Training Environment, Seth Laws

Honors Theses

Preflight inspections are a crucial part of flight operations and are required by the Federal Aviation Administration prior to flight. A properly performed preflight by an educated and experienced pilot follows a standard procedure and permits detection of conditions that render an aircraft un-airworthy. A study at Western Michigan University was conducted to determine the effectiveness of this normal procedure in the collegiate training environment. Results indicate the standard procedures for preflight inspections and good supporting habits are in place, but some complacency and a lack of understanding of the standard procedure prevents it from being totally effective among less …

Utilization Of Trss To Assist Pilot’S Decision Making Process During Critical Runway Operations., Nihad E. Daidzic

Aviation Department Publications

No abstract provided.

Peer Reviewed Safety Management System (Sms): Collaboration For Continuous Improvement (Literature Review), Michael F. Canders Ph.D. Cfii

International Journal of Aviation, Aeronautics, and Aerospace

Safe operations are essential for organizational success, perhaps no more so than in aviation. A culture of safety can be a leading contributor to an aviation organization’s success but developing such a culture and maintaining it can be very challenging. Collegiate aviation programs provide an exceptional opportunity to teach essential safety culture components to new aviators. A Safety Management System (SMS) is an effective framework to present and reinforce key safety principles and can be effectively tailored for the collegiate aviation flight training environment. Some aviation colleges may have developed a safety program or SMS but sharing and benchmarking the …

Flight Physician - March, 2016, Civil Aviation Medical Association

Browse all Civil Aviation Medical Association Newsletters

A twenty-five page newsletter of the Civil Aviation Medical Association. The newsletter provided news about civil aviation medicine and information related to the organization.

Pilot Perceptions On Impact Of Crew Rest Regulations On Safety And Fatigue, Lukas Rudari, Mary E. Johnson, Robert C. Geske, Lauren A. Sperlak

International Journal of Aviation, Aeronautics, and Aerospace

The risk of fatigue on pilot performance and safety is well recognized in aviation. In response to increased safety concerns, the Federal Aviation Administration addressed fatigue risk for passenger airline pilots in Title 14 Code of Federal Regulations Part 117, which included accommodations to address fatigue related risk-factors such as circadian rhythm and the phenomenon commonly described as jet-lag. The rule became effective in January 2014. A survey was conducted in March and April of 2014 to better understand pilot perceptions of the new Part 117 rule. This study analyzed survey responses from 92 self-identified pilots to determine the effect …

Maintenance Implications For Unmanned Aerial Vehicles In Remote Locations, Ian R. Mcandrew, Mark Kaintz, Andrew Carruthers

Publications

Maintenance in the aviation industry has evolved considerably since commercial and general aviation became a modern mode of transportation. ICAO has made maintenance a top priority by directing local National Aviation Authorities, NAA, to have implemented, robust and standardized training and qualifications for all maintenance personnel that work on any safety critical structure or component. There are rules, law and standards that are audited and the aviation industry is, perhaps, the most successful industry in maintaining standards and reliability. With the advent of Unmanned Aerial Vehicles, UAV, the role of maintenance is now needing to be reviewed to determine how …

Making Civilian Drones Safe: Performance Standards, Self-Certification, And Post-Sale Data Collection, Henry Perritt, Albert Plawinski

All Faculty Scholarship

With millions of small drones in private hands, the FAA continues its struggle to develop an effective regulatory regime to comply with Congress’s mandate to integrate them into the national airspace system. Thousands of individuals and small businesses have obtained authorization from the FAA—"section 333 exemptions"—allowing them to fly their drones commercially. Farmers, TV stations, surveyors, construction-site supervisors, real estate agents, people selling their properties, and managers seeking cheaper and safer ways to inspect their facilities, want to hire the exemption holders, but many are holding back until the FAA clarifies the groundrules.The FAA understands that its traditional approach for …

Late Morning Concurrent Sessions: Emergency Response: Presentation, Robert Sumwalt

Aviation / Aeronautics / Aerospace International Research Conference

No abstract provided.

Early Morning Concurrent Session: Aviation Management And Operations: Presentation: The Results Of Non-Compliance With Checklist Use And Control Checks In The Bed Runway Overrun Crash, Robert Sumwalt

Aviation / Aeronautics / Aerospace International Research Conference

No abstract provided.

Determining The Runway Point-Of-No-Return For Landing Roll Go-Around In Transport Category Airplanes, Nihad E. Daidzic

Aviation Department Publications

No abstract provided.

Drone Journalism Lab Operations Manual, Matt Waite, Ben Kreimer

College of Journalism and Mass Communications: Faculty Publications

This text is a guide for safely conducting drone journalism field work. It takes into account America's current drone regulations, our understanding of the public's acceptance of drones, the state of drone technologies, and our own experiences. The number one goal of any drone journalism operation is safety. At no time should safety be compromised. If there is any doubt, return the drone, also known as an unmanned aerial system (UAS), to the landing zone and terminate the flight. Ethical journalism is responsible journalism, and flying a drone means taking responsibility for the safety of those near you, on the …

Temporal Logic For System Safety Properties And Hazard Monitoring, Francesca Favaro, J. Saleh

Faculty Publications

No abstract provided.

Accident-Precipitating Factors For Crashes In Turbine-Powered General Aviation Aircraft, Douglas Boyd, Alan Stolzer

Publications

General aviation (14CFR Part 91) accounts for 83% of civil aviation fatalities. While much research has focused on accident causes/pilot demographics in this aviation sector, studies to identify factors leading up to the crash (accident-precipitating factors) are few. Such information could inform on pre-emptive remedial action. With this in mind and considering the paucity of research on turbine-powered aircraft accidents the study objectives were to identify accident-precipitating factors and determine if the accident rate has changed over time for such aircraft operating under 14CFR Part 91.

The NTSB Access database was queried for accidents in airplanes (

The “Checklist/Flight Manual …

Expedient Airfield Runway Repair Using Folded Fiberglass Mat, Christopher Y. Tuan, Willaim C. Dass

Department of Civil and Environmental Engineering: Faculty Publications

For expedient airfield runway repair, the US Air Force has developed a folded fiberglass mat to cover craters repaired with a well-compacted granular base material. The objective of this study was to evaluate the adequacy of using polymer plugs to anchor the mat to a repaired asphalt pavement for heavy aircraft operations. The effort consisted of materials testing, field experiments and analytical modeling. An 89,800-kg (198,000-pound) load cart having the footprint of a single C-5 main gear was pulled on a mat with wheels locked to simulate full braking forces. Anchor bushings were instrumented to measure anchor loads. A simplified …

Behavioral Traps In Flight Crew-Related 14 Cfr Part 121 Airline Accidents, Jonathan Velázquez

Doctoral Dissertations and Master's Theses

This dissertation examined pilot behavioral traps in the multi-crew Part 121 air carrier environment. Behavioral traps are accident-inducing operational pitfalls aviators may encounter as a result of poor decision making. The traps studied were: Loss of Situational Awareness; Neglect of Flight Planning, Preflight Inspections and Checklists; Peer Pressure; Get-There-Itis; and Unauthorized Descent Below an Instrument Flight Rule (IFR) Altitude. The purpose of this dissertation was to study the nature of their occurrence in the airline domain. Another key component was to explore the relationships between the behavioral traps and factors such as pilot age, pilot flight experience, weather, flight conditions, …