Law Commons^™

Personal Denial Of Service (Pdos) Attacks: A Discussion And Exploration Of A New Category Of Cyber Crime, Michael R. Bartolacci, Larry J. Leblanc, Ashley Podhradsky

Journal of Digital Forensics, Security and Law

The growth of the Internet has created a corresponding growth in Internet-based crimes and online misbehavior, particularly among younger computer-savvy people. Younger generations have grown up in a world where internet access, social networking, e-commerce and smartphones are commonplace. Given this fact, they have learned how to use, and how to abuse, technology. This leads us to define a new category of cybercrime called a Personal Denial of Service attack (PDOS). A PDOS is a cyber-crime in which an individual deliberately prevents the access of another individual or small group to online services such as email or banking. Due to …

File Detection On Network Traffic Using Approximate Matching, Frank Breitinger, Ibrahim Baggili

Journal of Digital Forensics, Security and Law

In recent years, Internet technologies changed enormously and allow faster Internet connections, higher data rates and mobile usage. Hence, it is possible to send huge amounts of data / files easily which is often used by insiders or attackers to steal intellectual property. As a consequence, data leakage prevention systems (DLPS) have been developed which analyze network traffic and alert in case of a data leak. Although the overall concepts of the detection techniques are known, the systems are mostly closed and commercial. Within this paper we present a new technique for network traffic analysis based on approximate matching (a.k.a …

Fast Rtp Detection And Codecs Classification In Internet Traffic, Petr Matousek, Ondrej Rysavy, Martin Kmet

Journal of Digital Forensics, Security and Law

This paper presents a fast multi-stage method for on-line detection of RTP streams and codec identification of transmitted voice or video traffic. The method includes an RTP detector that filters packets based on specific values from UDP and RTP headers. When an RTP stream is successfully detected, codec identification is applied using codec feature sets. The paper shows advantages and limitations of the method and its comparison with other approaches. The method was implemented as a part of network forensics framework NetFox developed in project SEC6NET. Results show that the method can be successfully used for Lawful Interception as well …

Relating Admissibility Standards For Digital Evidence To Attack Scenario Reconstruction, Changwei Liu, Anoop Singhal, Duminda Wijesekera

Journal of Digital Forensics, Security and Law

Attackers tend to use complex techniques such as combining multi-step, multi-stage attack with anti-forensic tools to make it difficult to find incriminating evidence and reconstruct attack scenarios that can stand up to the expected level of evidence admissibility in a court of law. As a solution, we propose to integrate the legal aspects of evidence correlation into a Prolog based reasoner to address the admissibility requirements by creating most probable attack scenarios that satisfy admissibility standards for substantiating evidence. Using a prototype implementation, we show how evidence extracted by using forensic tools can be integrated with legal reasoning to reconstruct …

Audit: Automated Disk Investigation Toolkit, Umit Karabiyik, Sudhir Aggarwal

Journal of Digital Forensics, Security and Law

Software tools designed for disk analysis play a critical role today in forensics investigations. However, these digital forensics tools are often difficult to use, usually task specific, and generally require professionally trained users with IT backgrounds. The relevant tools are also often open source requiring additional technical knowledge and proper configuration. This makes it difficult for investigators without some computer science background to easily conduct the needed disk analysis. In this paper, we present AUDIT, a novel automated disk investigation toolkit that supports investigations conducted by non-expert (in IT and disk technology) and expert investigators. Our proof of concept design …

Evidentiary Power And Propriety Of Digital Identifiers And The Impact On Privacy Rights In The United States, Michael Losavio, Deborah Keeling

Journal of Digital Forensics, Security and Law

Media and network systems capture and store data about electronic activity in new, sometimes unprecedented ways; computational systems make for new means of analysis and knowledge development. These new forms offer new, powerful tactical tools for investigations of electronic malfeasance under traditional legal regulation of state power, particular that of Fourth Amendment limitations on police searches and seizures under the U.S. Constitution. But autonomy, identity and authenticity concerns with electronic data raise issues of public policy, privacy and proper police oversight of civil society. We examine those issues and their implications for digital and computational forensics

Effects Of The Factory Reset On Mobile Devices, Riqui Schwamm, Neil C. Rowe

Journal of Digital Forensics, Security and Law

Mobile devices usually provide a “factory-reset” tool to erase user-specific data from the main secondary storage. 9 Apple iPhones, 10 Android devices, and 2 BlackBerry devices were tested in the first systematic evaluation of the effectiveness of factory resets. Tests used the Cellebrite UME-36 Pro with the UFED Physical Analyzer, the Bulk Extractor open-source tool, and our own programs for extracting metadata, classifying file paths, and comparing them between images. Two phones were subjected to more detailed analysis. Results showed that many kinds of data were removed by the resets, but much user-specific configuration data was left. Android devices did …

Testing Framework For Mobile Device Forensics Tools, Maxwell Anobah, Shahzad Saleem, Oliver Popov

Journal of Digital Forensics, Security and Law

The proliferation of mobile communication and computing devices, in particular smart mobile phones, is almost paralleled with the increasing number of mobile device forensics tools in the market. Each mobile forensics tool vendor, on one hand claims to have a tool that is best in terms of performance, while on the other hand each tool vendor seems to be using different standards for testing their tools and thereby defining what support means differently. To overcome this problem, a testing framework based on a series of tests ranging from basic forensics tasks such as file system reconstruction up to more complex …

Technical Soddi Defenses: The Trojan Horse Defense Revisited, Chad M. Steel

Journal of Digital Forensics, Security and Law

In 2004, the Trojan horse defense was at a crossroads, having been successfully employed in two child pornography cases in the United Kingdom, resulting in acquittals. Despite the early successes, the Trojan horse defense has failed to become a regularly employed strategy. The original Trojan horse defense has now become part of the more general technical SODDI (Some Other Dude Did It) defense, which includes the possibility of unknown actors using unsecured Wi-Fi connections or having physical access to a computer to perform criminal acts. In the past ten years, it has not been effective in the United States for …

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

A State-Of-The-Art Review Of Cloud Forensics, Sameera Almulla, Youssef Iraqi, Andrew Jones

Journal of Digital Forensics, Security and Law

Cloud computing and digital forensics are emerging fields of technology. Unlike traditional digital forensics where the target environment can be almost completely isolated, acquired and can be under the investigators control; in cloud environments, the distribution of computation and storage poses unique and complex challenges to the investigators. Recently, the term “cloud forensics” has an increasing presence in the field of digital forensics. In this state-of-the-art review, we included the most recent research efforts that used “cloud forensics” as a keyword and then classify the literature into three dimensions: (1) survey-based, (2) technology-based and (3) forensics-procedural-based. We discuss widely accepted …

Understanding Computer Forensics Requirements In China Via The “Panda Burning Incense” Virus Case, Frank Law, K. P. Chow, Y. H. Mai

Journal of Digital Forensics, Security and Law

In March 2012, Mainland China has amended its Criminal Procedure Law, which includes the introduction of a new type of evidence, i.e., digital evidence, to the court of law. To better understand the development of computer forensics and digital evidence in Mainland China, this paper discusses the Chinese legal system in relation to digital investigation and how the current legal requirements affect the existing legal and technical usage of digital evidence at legal proceedings. Through studying the famous “Panda Burning Incense (Worm.WhBoy.cw)” virus case that happened in 2007, this paper aims to provide a better understanding of how to properly …

Forensics Of Software Copyright Infringement Crimes: The Modern Posar Test Juxtaposed With The Dated Afc Test, Vinod P. Bhattathiripad

Journal of Digital Forensics, Security and Law

This paper presents a new development in the forensics of software copyright through a juxtaposed comparison between the proven AFC test and the recent POSAR test, the two forensic procedures for establishing software copyright infringement cases. First, the paper separately overviews the 3-stage, linear sequential AFC test and then the 5-phase, cyclic POSAR test (as AFC’s logical extension). The paper then compares the processes involved in each of the 5 phases of the POSAR test with the processes involved in the 3 stages in the AFC test, for the benefit of forensic practitioners and researchers. Finally, the paper discusses some …

Fighting Child Pornography: A Review Of Legal And Technological Developments, Jasmine V. Eggestein, Kenneth J. Knapp

Journal of Digital Forensics, Security and Law

In our digitally connected world, the law is arguably behind the technological developments of the Internet age. While this causes many issues for law enforcement, it is of particular concern in the area of child pornography in the United States. With the wide availability of technologies such as digital cameras, peer-to-peer file sharing, strong encryption, Internet anonymizers and cloud computing, the creation and distribution of child pornography has become more widespread. Simultaneously, fighting the growth of this crime has become more difficult. This paper explores the development of both the legal and technological environments surrounding digital child pornography. In doing …

A Study Of Forensic Imaging In The Absence Of Write-Blockers, Gary C. Kessler, Gregory H. Carlton

Journal of Digital Forensics, Security and Law

Best practices in digital forensics demand the use of write-blockers when creating forensic images of digital media, and this has been a core tenet of computer forensics training for decades. The practice is so ingrained that the integrity of images created without a write-blocker are immediately suspect. This paper describes a research framework that compares forensic images acquired with and without utilizing write-blockers in order to understand the extent of the differences, if any, in the resultant forensic copies. We specifically address whether differences are superficial or evidentiary, and we discuss the impact of admitting evidence acquired without write blocking. …

Egypt, Lila Meadows, Nadia Adib Bamieh, Janet E. Lord

All Faculty Scholarship

This chapter is a factbook summarizing disability laws, organisations, and statistics in Egypt as of 2014.

Introduction To Intervention Under International Law, Mortimer N.S. Sellers

All Faculty Scholarship

The lawfulness or legitimacy of "external" intervention in the "internal" affairs of sovereign states is one of the most basic controversies in modern international law. The question arises in three separate but related forms: When is intervention lawful? When is intervention legitimate? And when should intervention occur? Discussion here will focus on the legal question, but legitimacy, morality, and brutal reality all form and sometimes trump the law. They dictate the parameters within which all legal determinations take place, including the legality of cross-border interventions. By "intervention" I mean any activity by one state or its agents that influences the …

Confronting Chaos: The Fiscal Constitution Faces Federal Shutdowns And (Almost) Debt Defaults, Charles Tiefer

All Faculty Scholarship

Recent events raise the question of whether two near-failures in what scholars call the "Fiscal Constitution" may plunge the government into paralysis or chaos. In October 2013, a lapse in congressional appropriations shut the government down for two weeks. The shutdown furloughed hundreds of thousands of federal employees. It caused some agencies, such as the Internal Revenue Service ("IRS"), virtually to close their doors and to curtail their services.

Simultaneously, and potentially even more devastating, the House of Representatives (alternatively "House") firmly refused during an extremely tense countdown to raise the statutory debt ceiling of the government. When the government …

Feminism, Democracy, And The "War On Women", Michele E. Gilman

All Faculty Scholarship

This article analyzes the social conservative attacks on women preceding the 2012 election cycle, known as the War on Women, and the ensuing feminist response. Combat was waged on many fronts, including abortion restrictions, access to contraception, funding for Planned Parenthood, welfare programs, and workplace fairness. The article discusses what this "war" means for the complex relationship between feminism and democracy. American democracy has had both liberating and oppressive effects for women, while feminism has sometimes struggled internally to appropriate the values of democracy and externally to harness its potential. Accordingly, the article explains the major political theories regarding feminism …

The Return Of The Welfare Queen, Michele E. Gilman

All Faculty Scholarship

After welfare reform was passed in 1996, there was every reason to hope that the welfare queen was dead. The “welfare queen” was shorthand for a lazy woman of color, with numerous children she cannot support, who is cheating taxpayers by abusing the system to collect government assistance. For years, this long-standing racist and gendered stereotype was used to attack the poor and the cash assistance programs that support them. In 1996, TANF capped welfare receipt to five years and required work as a condition of eligibility, thus stripping the welfare queen of her throne of dependency. Nevertheless, during the …

Post-Racial Lending?, Cassandra Jones Havard

All Faculty Scholarship

Should lenders have absolute discretion when setting mortgage loan prices regardless of the borrower's creditworthiness? How should a regulatory framework evaluate lending decisions for racial bias to determine if demographic or other variables are used as proxies for race? Congress enacted the Home Mortgage Disclosure Act in order to acquire data on mortgage lending patterns and to discourage geographical disinvestment. Basic HMDA data indicates that mortgage loan applications from black and Hispanic households are more likely to be denied than are applications from whites. Loan denial rates for blacks, Hispanics, and Asians are higher than white applicants at all income …

A Home With Dignity: Domestic Violence And Property Rights, Margaret E. Johnson

All Faculty Scholarship

This Article argues that the legal system should do more to address intimate partner violence and each party's need for a home for several reasons. First, domestic violence is a leading cause of individual and family homelessness. Second, the struggle over rights to a shared home can increase the violence to which the woman is subjected. And third, a woman who decides to continue to live with the person who abused her receives little or no legal support, despite the evidence that this decision could most effectively reduce the violence. The legal system's current failings result from its limited goals-achieving …

Clinical Legal Education: A (Brief) Comparison Of The Evolving Structures And Pedagogy In Mexico, Canada And The United States, Elizabeth Keyes, David C. Koelsch, Alejandro Posadas

All Faculty Scholarship

This Article highlights the development and current state of clinical legal education in Canada, the United States, and Mexico, and examines recent trends in clinical legal education in each country. This is a timely topic. Canadian clinics and, in particular, Ontario-based law school affiliated clinics are grappling with recently-imposed post-graduation alternatives to traditional articling practices, while Canadian law schools are examining whether additional experiential courses should be offered to law students. U.S. law schools face difficult choices with respect to clinical education in light of sustained lower enrollments and resulting adjusted budget realities, as well as the pressures of meeting …

Building A Government Of Laws: Adams And Jefferson 1776–1779, James Maxeiner

All Faculty Scholarship

America’s rule of law is not working well because many American lawyers confound their rule of law with common law and with common law methods. They overlook the contribution of good legislation to good government. They fixate on judges, judge-made law and procedure. America’s founders, in particular, John Adams and Thomas Jefferson, did not. They were not entranced by common law and by common law methods. This chapter shows how in the first few years of American independence, Adams popularized the term “government of laws” and how Jefferson drafted statutes for a government of laws. Neither of them assigned common …

Foreword: The Death Penalty In Decline: From Colonial America To The Present, John Bessler

All Faculty Scholarship

This Article traces the history of capital punishment in America. It describes the death penalty's curtailment in colonial Pennsylvania by William Penn, and the substantial influence of the Italian philosopher Cesare Beccaria -- the first Enlightenment thinker to advocate the abolition of executions -- on the Founding Fathers' views. The Article also describes the transition away from "sanguinary" laws and punishments toward the "penitentiary system" and highlights the U.S. penal system's abandonment of non-lethal corporal punishments.

Introduction In Precedent In The United States Supreme Court, Christopher J. Peters

All Faculty Scholarship

No abstract provided.

Zero And The Rise Of Technological Lawmaking, Max Stul Oppenheimer

All Faculty Scholarship

No abstract provided.

Government Internet Resources: Federal, State And Local, David E. Matchen Jr.

All Faculty Scholarship

This presentation discusses the basic outlines of federal legal research as well as state and local legal research. Discussion of state and local legal research is limited to Maryland, but many states have comparable systems.

Converge! Reimagining The Movement To End Gender Violence Symposium: Panel On Intersections Of Gender, Economic, Racial, And Indigenous (In) Justice, Margaret E. Johnson

All Faculty Scholarship

JOHNSON: This presentation envisions what a better domestic violence legal system might look like for persons subjected to domestic abuse who have not had their needs met or who have been harmed by the current legal system. The paper reframes the focus of the civil legal system from a paradigm of safety into a paradigm of security, including economic, housing, health, and relationship security. This reframing permits a focus on the domestic violence legal system and its intersecting systems of oppression such as race, gender, class, and ethnicity.

Currently, the domestic violence legal system targets short-term physical safety of the …

Speaking Of Science: Introducing Notice And Comment Into The Legislative Process, Gregory Dolin

All Faculty Scholarship

Congress enacts, on a nearly continuous basis, a variety of laws that affect scientific research and progress. Some of these laws have an unquestionably positive effect. For instance, Congress's creation of the National Institutes of Health, the National Academy of Sciences, and NASA; its various appropriations to fund ground-breaking research; and a multitude of other laws have incalculably advanced human knowledge, and it is to Congress's great credit that these laws have been and are continuing to be enacted. However, not all laws that affect the progress of sciences are an unalloyed good. Quite the opposite, often the laws aim …