National Security Law Commons^™

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …

Current Challenges And Future Research Areas For Digital Forensic Investigation, David Lillis, Brett A. Becker, Tadhg O’Sullivan, Mark Scanlon

Annual ADFSL Conference on Digital Forensics, Security and Law

Given the ever-increasing prevalence of technology in modern life, there is a corresponding increase in the likelihood of digital devices being pertinent to a criminal investigation or civil litigation. As a direct consequence, the number of investigations requiring digital forensic expertise is resulting in huge digital evidence backlogs being encountered by law enforcement agencies throughout the world. It can be anticipated that the number of cases requiring digital forensic analysis will greatly increase in the future. It is also likely that each case will require the analysis of an increasing number of devices including computers, smartphones, tablets, cloud-based services, Internet …

Forensic Analysis Of Ares Galaxy Peer-To-Peer Network, Frank Kolenbrander, Nhien-An Le-Khac, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

Child Abuse Material (CAM) is widely available on P2P networks. Over the last decade several tools were made for 24/7 monitoring of peer-to-peer (P2P) networks to discover suspects that use these networks for downloading and distribution of CAM. For some countries the amount of cases generated by these tools is so great that Law Enforcement (LE) just cannot handle them all. This is not only leading to backlogs and prioritizing of cases but also leading to discussions about the possibility of disrupting these networks and sending warning messages to potential CAM offenders. Recently, investigators are reporting that they are creating …

Keynote Speaker, Chuck Easttom

Annual ADFSL Conference on Digital Forensics, Security and Law

Conference Keynote Speaker, Chuck Easttom

The Cyber-Industrial Complex, Connor O’Malley

Political Science Theses and Capstones

When Edward Snowden released a massive trove of classified files from the National Security Agency, the world became aware of numerous global surveillance systems. As Snowden hoped, a global dialogue began concerning surveillance, privacy, and government transparency. While there was a lively discourse surrounding the leak and Snowden, another story was missed. Snowden was not an employee of the NSA; rather he was an employee of Booz Allen Hamilton, a private contractor maintaining computer systems for the NSA. The deeper story here is the emerging relationship between government agencies and technology companies. This paper discusses the theory of iron triangles …

Parameters – Full Issue – Spring 2016, Usawc Parameters

The US Army War College Quarterly: Parameters

Special Commentary: Making Sense of the “Long Wars” Tami Davis Biddle US Leadership and NATO Luis Simón, Alexander Mattelaer, John R. Deni, Magnus Petersson Is Nation-Building a Myth? Charles J. Sullivan, M. Chris Mason Learning from Today’s Wars Ben Nimmo, Roger N. McDermott, Erik W. Goepner

The United States As The Reluctant Ally, Magnus Petersson

The US Army War College Quarterly: Parameters

No abstract provided.

Lessons From The Air Campaigns Over Libya, Syria, And Yemen, Ben Nimmo

The US Army War College Quarterly: Parameters

No abstract provided.

Modifying America's Forward Presence In Eastern Europe, John R. Deni

The US Army War College Quarterly: Parameters

No abstract provided.

Nation-Building Is An Oxymoron, M. Chris Mason

The US Army War College Quarterly: Parameters

No abstract provided.

Measuring The Effectiveness Of America's War On Terror, Erik W. Goepner

The US Army War College Quarterly: Parameters

No abstract provided.

Does Russia Have A Gerasimov Doctrine?, Roger N. Mcdermott

The US Army War College Quarterly: Parameters

No abstract provided.

From The Editor, Antulio J. Echevarria Ii

The US Army War College Quarterly: Parameters

No abstract provided.

Making Sense Of "Long Wars" — Advice To The Us Army, Tami Davis Biddle

The US Army War College Quarterly: Parameters

No abstract provided.

Revisiting The Principles Of Nato Burden-Sharing, Alexander Mattelaer

The US Army War College Quarterly: Parameters

No abstract provided.

State-Building: America's Foreign Policy Challenge, Charles J. Sullivan

The US Army War College Quarterly: Parameters

No abstract provided.

Balancing Priorities In America's European Strategy, Luis Simón

The US Army War College Quarterly: Parameters

No abstract provided.

Commentary And Repy, Usawc Press

The US Army War College Quarterly: Parameters

No abstract provided.

Book Reviews, Usawc Press

The US Army War College Quarterly: Parameters

No abstract provided.

Presidential War Powers As A Two-Level Dynamic: International Law, Domestic Law, And Practice-Based Legal Change, Curtis A. Bradley, Jean Galbraith

Faculty Scholarship

There is a rich literature on the circumstances under which the United Nations Charter or specific Security Council resolutions authorize nations to use force abroad, and there is a rich literature on the circumstances under which the U.S. Constitution and statutory law allows the President to use force abroad. These are largely separate areas of scholarship, addressing what are generally perceived to be two distinct levels of legal doctrine. This Article, by contrast, considers these two levels of doctrine together as they relate to the United States. In doing so, it makes three main contributions. First, it demonstrates striking parallels …

Why Foreign Policy Principles Persist: Understanding The Reinterpretations Of Japan’S Article 9 And Switzerland’S Neutrality, Yuki Numata

Pomona Senior Theses

This study examines why Japan and Switzerland have chosen to keep the vocabulary of Article 9 and neutrality, respectively, and to reinterpret their definitions to suit their needs (policy reinterpretation), instead of simply abandoning the original policy and replacing it with a new, more suitably worded policy that clarifies the changing policy position of the government (policy abandonment). By analyzing the legal history of the overseas capabilities of the Japanese Self-Defense Forces and the Swiss Armed Forces, as well as the actions and influences of the government, political parties, and the public, this study finds the following trends. First, the …

Commentary And Reply, Usawc Parameters

The US Army War College Quarterly: Parameters

No abstract provided.

To Win Wars, Correct The Army's Political Blind Spot, Joseph Roger Clark

The US Army War College Quarterly: Parameters

No abstract provided.

An Interview With David H.Petraeus, General (Usa Retired), Usawc Press

The US Army War College Quarterly: Parameters

No abstract provided.