Computer Sciences Commons^™

Technology Corner: Internet Packet Sniffers, Nick V. Flor, Kenneth Guillory

Journal of Digital Forensics, Security and Law

The best way to understand an internet packet sniffer, hereafter “packet sniffer”, is by analogy with a wiretap. A wiretap is a piece of hardware that allows a person to eavesdrop on phone conversations over a telephone network. Similarly, a packet sniffer is a piece of software that allows a person to eavesdrop on computer communications over the internet. A packet sniffer can be used as a diagnostic tool by network administrators or as a spying tool by hackers who can use it to steal passwords and other private information from computer users. Whether you are a network administrator or …

Sampling: Making Electronic Discovery More Cost Effective, Milton Luoma, Vicki Luoma

Journal of Digital Forensics, Security and Law

With the huge volumes of electronic data subject to discovery in virtually every instance of litigation, time and costs of conducting discovery have become exceedingly important when litigants plan their discovery strategies. Rather than incurring the costs of having lawyers review every document produced in response to a discovery request in search of relevant evidence, a cost effective strategy for document review planning is to use statistical sampling of the database of documents to determine the likelihood of finding relevant evidence by reviewing additional documents. This paper reviews and discusses how sampling can be used to make document review more …

Column: The Physics Of Digital Information, Fred Cohen

Journal of Digital Forensics, Security and Law

No abstract provided.

Developing A Forensic Continuous Audit Model, Grover S. Kearns, Katherine J. Barker, Stephen P. Danese

Journal of Digital Forensics, Security and Law

Despite increased attention to internal controls and risk assessment, traditional audit approaches do not seem to be highly effective in uncovering the majority of frauds. Less than 20 percent of all occupational frauds are uncovered by auditors. Forensic accounting has recognized the need for automated approaches to fraud analysis yet research has not examined the benefits of forensic continuous auditing as a method to detect and deter corporate fraud. The purpose of this paper is to show how such an approach is possible. A model is presented that supports the acceptance of forensic continuous auditing by auditors and management as …

Analysis Of Data Remaining On Second Hand Adsl Routers, Patryk Szewczyk

Journal of Digital Forensics, Security and Law

In theory, an ADSL router can provide an additional layer of security to a wired and wireless network through; access control, wireless encryption, firewall rule sets, and network event logging. An ADSL router may also contain the users’ usage habits and broadband account credentials. However, end-users may be unaware of the intricacies of the security measures available and the potentially confidential information stored on their device. As a result a second hand ADSL router may contain a wealth of user-specific information if not wiped and disposed of in a secure manner. This paper shows the data that was acquired from …

Book Review: Online Privacy: Issues In The Digital Age, Darlene M. Tester

Journal of Digital Forensics, Security and Law

This book is one of a series of books Currie has written about online areas of concern. This is the sixth book in the series. The purpose of the book is to act as a primer for people in the IT field who may need a point of reference for Internet issues such as gaming, security and privacy. The book takes a high level look at the complexities of privacy online from social networking to hackers and provides insight into what the most pressing issues of privacy are online today.

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Technology Corner: Virtual Crime Scene Reconstruction: The Basics Of 3d Modeling, Nick V. Flor

Journal of Digital Forensics, Security and Law

Digital crime scenes take place in the context of physical crime scenes. Virtual crime scene reconstruction is an activity where investigators create a 3- dimensional (3-D) model of an actual crime scene for the purpose of determining the events that lead to the crime. While virtual crime scene reconstruction is currently used for analyzing physical scenes, it can also help investigators visualize and explore ways digital media could have been used to perpetrate a crime. In this technology corner we explore one of the technologies underlying virtual crime scene reconstruction: 3-D modeling.

Working Inside The Box: An Example Of Google Desktop Search In A Forensic Examination, Timothy J. Latulippe

Journal of Digital Forensics, Security and Law

Information and the technological advancements for which mankind develops with regards to its storage has increased tremendously over the past few decades. As the total amount of data stored rapidly increases in conjunction with the amount of widely available computer-driven devices being used, solutions are being developed to better harness this data. These types of advancements are continually assisting investigators and computer forensic examiners. One such application which houses copious amounts of fruitful data is the Google Desktop Search program. Coupled with tested and verified techniques, examiners can exploit the power of this application to cater to their investigative needs. …

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Book Review: Iphone And Ios Forensics: Investigation, Analysis And Mobile Security For Apple Iphone, Ipad And Ios Devices, Christopher Schulte

Journal of Digital Forensics, Security and Law

These are exciting times for Digital Forensics practitioners. While our examinations of mobile devices (including cell phones and tablet computers) continue to bring new and sometimes hair-pulling challenges into our labs and on-site engagements, research and understanding of these tiny computers is increasing at what seems an exponential rate. This is especially true in the iOS (Apple Computer’s mobile operating system that powers the iPhone, iPad, iPod Touch and Apple TV) space. The diligent work of talented computer scientists in this field allows examiners everywhere to reap the benefits of easier, faster and more effective examinations that yield more accurate …

[Introduction To] Basic Statistical Tools For Improving Quality, Paul Kvam, Chang W. Kang

Bookshelf

This book is an introductory book on improving the quality of a process or a system, primarily through the technique of statistical process control (SPC). There are numerous technical manuals available for SPC, but this book differs in two ways: (1) the basic tools of SPC are introduced in a no-nonsense, simple, non-math manner, and (2) the methods can be learned and practiced in an uncomplicated fashion using free software (eZ SPC 2.0), which is available to all readers online as a downloadable product. The book explains QC7 Tools, control charts, and statistical analysis including basic design of experiments. Theoretical …

Investigating Modern Communication Technologies: The Effect Of Internet-Based Communication Technologies On The Investigation Process, Matthew Simon, Jill Slay

Journal of Digital Forensics, Security and Law

Communication technologies are commonplace in modern society. For many years there were only a handful of communication technologies provided by large companies, namely the Public Switched Telephone Network (PSTN) and mobile telephony; these can be referred to as traditional communication technologies. Over the lifetime of traditional communication technologies has been little technological evolution and as such, law enforcement developed sound methods for investigating targets using them. With the advent of communication technologies that use the Internet – Internet-based or contemporary communication technologies – law enforcement are faced with many challenges. This paper discusses these challenges and their potential impact. It …

System Dynamics Modeling As A Potentially Useful Tool In Analyzing Mitigation Strategies To Reduce Overdose Deaths Associated With Pharmaceutical Opioid Treatment Of Chronic Pain, Wayne Wakeland, Teresa D. Schmidt, Aaron Gilson, J. David Haddox, Lynn Webster

Complex Systems Faculty Publications and Presentations

Objective. To illustrate a system-level, simulationbased approach for evaluating mitigation strategies to address the dramatic rise in abuse, addiction, and overdose deaths associated with the use of pharmaceutical opioid analgesics to treat chronic pain.

Simulated Interventions. Making available drug formulations with increased tamper-resistance, prescriber education programs, and programs that reduce rates of medical user-related abuse and addiction.

Simulated Outcome Measure. Number of overdose deaths of medical users of pharmaceutical opioid analgesics, including those who abuse or have become addicted.

Methods. A demonstration system dynamics model is developed, tested, and used to evaluate the impact of candidate mitigation strategies on the …

Simple Games On Networks, Jason Kimmel

Honors Papers

In the same way that traditional game theory captured the minds of economists and allowed complex problems to be studied using simple models, so have games on networks come to be used in computer science. In particular, previous work has focused on extending a two-player base game M over a network G by having each vertex in G chose a strategy from the base game and play it simultaneously against all adjacent nodes. Similarly, the utility for each vertex becomes the sum of the utility of that node in each of the games it plays against its neighbors. The resulting …

A Reliability-Based Routing Protocol For Vehicular Ad-Hoc Networks, James Bernsen

University of Kentucky Master's Theses

Vehicular Ad hoc NETworks (VANETs), an emerging technology, would allow vehicles to form a self-organized network without the aid of a permanent infrastructure. As a prerequisite to communication in VANETs, an efficient route between communicating nodes in the network must be established, and the routing protocol must adapt to the rapidly changing topology of vehicles in motion. This is one of the goals of VANET routing protocols. In this thesis, we present an efficient routing protocol for VANETs, called the Reliable Inter-VEhicular Routing (RIVER) protocol. RIVER utilizes an undirected graph that represents the surrounding street layout where the vertices of …

The Design Of Xml-Based Model And Experiment Description Languages For Network Simulation, Andy Hallagan

Honors Theses

The Simulation Automation Framework for Experiments (SAFE) is a project created to raise the level of abstraction in network simulation tools and thereby address issues that undermine credibility. SAFE incorporates best practices in network simulationto automate the experimental process and to guide users in the development of sound scientific studies using the popular ns-3 network simulator. My contributions to the SAFE project: the design of two XML-based languages called NEDL (ns-3 Experiment Description Language) and NSTL (ns-3 Script Templating Language), which facilitate the description of experiments and network simulationmodels, respectively. The languages provide a foundation for the construction of better …

A Framework For The Automation Of Discrete-Event Simulation Experiments, Bryan Ward

Honors Theses

Simulation is an important resource for researchers in diverse fields. However, many researchers have found flaws in the methodology of published simulation studies and have described the state of the simulation community as being in a crisis of credibility. This work describes the project of the Simulation Automation Framework for Experiments (SAFE), which addresses the issues that undermine credibility by automating the workflow in the execution of simulation studies. Automation reduces the number of opportunities for users to introduce error in the scientific process thereby improvingthe credibility of the final results. Automation also eases the job of simulation users and …

A Strategy To Articulate The Facility Management Knowledge Categories Within The Built Environment, Robert Doleman, David J. Brooks

Australian Security and Intelligence Conference

Security is applied in the built environment and this requires a close relationship with facility managers. Therefore, this study puts forward an approach to establish the facility management knowledge categories within the built environment. In part, the significance of the study stemmed from research undertaken into the compliance to Australian fire door maintenance within nursing homes, which demonstrated 87 percent noncompliance. This high level of non-compliance appeared to identify a lack of facility management knowledge, among other issues (Doleman & Brooks, 2011). The article uses a method to test the supposition of facility management knowledge construct in a three-phase Grounded …

Is There A Core Set Of Skills For Visual Analysis Across Different Imaging Technologies?, Craig Hm Donald

Australian Security and Intelligence Conference

This research examines the technological challenges posed by security imaging technologies for human visual analysis of images. Imaging technologies are increasing becoming part of an overall security strategy that incorporates a range of camera technologies, x-ray technologies, and other electromagnetic imaging such as millimetre wave and terahertz based systems. Still and video image types are increasingly becoming presented to viewers or screeners in forms that are only representative in nature and highly abstract, and the use of filters is increasing the complexity of interpretation. Despite a range of factors that are being looked at to enhance visual analysis, the contribution …

Forensic Analysis Of The Android File System Yaffs2, Darren Quick, Mohammed Alzaabi

Australian Digital Forensics Conference

The popularity of Android devices has resulted in a requirement for a process to extract and analyse data in a forensically sound manner. There is a wide range of devices which use the Android operating system, and hence a standard process for forensic extraction and analysis for all devices is not possible. Many devices use the Yet Another Flash File System (YAFFS), which introduces an additional layer of forensic requirements. Focussing on the internal storage of a Sony Ericsson Xperia x10i, a process to extract both logical and physical data from the internal NAND memory is possible after gaining super …

Implementation Of Iso 27001 In Saudi Arabia – Obstacles, Motivations, Outcomes, And Lessons Learned, Belal Abusaad, Fahad A. Saeed, Khaled Alghathbar, Bilal Khan

Australian Information Security Management Conference

Protecting information assets is very vital to the core survival of an organization. With the increase in cyberattacks and viruses worldwide, it has become essential for organizations to adopt innovative and rigorous procedures to keep these vital assets out of the reach of exploiters. Although complying with an international information security standard such as ISO 27001 has been on the rise worldwide, with over 7000 registered certificates, few companies in Saudi Arabia are ISO 27001 certified. In this paper, we explore the motives, obstacles, challenges, and outcomes for a Saudi organization during their implementation of ISO 27001, with the goal …

An Investigation Into Darknets And The Content Available Via Anonymous Peer-To-Peer File Sharing, Symon Aked

Australian Information Security Management Conference

Media sites, both technical and non-technical, make references to Darknets as havens for clandestine file sharing. They are often given an aura of mystique; where content of any type is just a mouse click away. However, can Darknets really be easily accessed, and do they provide access to material that would otherwise be difficult to obtain? This paper investigates which Darknets are easily discovered, the technical designs and methods used to hide content on the networks, the tools needed to join, and ultimately what type and quantities of files can be found on anonymous peer-to-peer file sharing networks. This information …

Evaluation Of Users’ Perspective On Voip’S Security Vulnerabilities, Alireza Heravi, Sameera Mubarak

Australian Information Security Management Conference

Voice over Internet protocol (VoIP) represents a major newish trend in telecommunications and an alternative to traditional phone systems. VoIP uses IP networks and therefore inherits their vulnerabilities. Adding voice traffic to IP networks complicates security issues and introduces a range of vulnerabilities. A VoIP system may face either an exclusive attack or an attack to the underlying IP network. The significance of security and privacy in VoIP communications are well known, and many studies mostly from the technical perspective have been published. However to date, no known research has been conducted to evaluate users’ perspectives on these issues. In …

Longitudinal Investigation Of The Curricular Effect: An Analysis Of Student Learning Outcomes From The Liecal Project In The United States, Jinfa Cai, Ning Wang, John Moyer, Chuang Wang, Bikai Nie

Mathematics, Statistics and Computer Science Faculty Research and Publications

In this article, we present the results from a longitudinal examination of the impact of a Standards-based or reform mathematics curriculum (called CMP) and traditional mathematics curricula (called non-CMP) on students’ learning of algebra using various outcome measures. Findings include the following: (1) students did not sacrifice basic mathematical skills if they are taught using a Standards-based or reform mathematics curriculum like CMP; (2) African American students experienced greater gain in symbol manipulation when they used a traditional curriculum; (3) the use of either the CMP or a non-CMP curriculum improved the mathematics achievement of all students, including …

Do We Need M&S Science?, Jose J. Padilla, Saikou Y. Diallo, Andreas Tolk

VMASC Publications

No abstract provided.

A Framework For Transparent Depression Classification In College Settings Via Mining Internet Usage Patterns, Raghavendra Kotikalapudi

Masters Theses

Depression is a serious mental health problem affecting the mind and body of people in our society. As of today, depression affects about 5 to 7% of the American population, which roughly translates to 14 million people! A particularly worrying concern these days is the increasing incidence of depression among college students. The problem is so severe that many US campuses have dedicated centers with mental health professionals catering to students needs. Although there are very effective treatments for depression, studies report that ~80% of depressed students do not seek any help due to the lack of perception of the …

The History Of Technical Communication Instruction At Missouri University Of Science And Technology: The Evolution Of A Curriculum, Elizabeth Marie Roberson

Masters Theses

"This thesis provides a written record of the history of technical communication instruction at Missouri University of Science and Technology (Missouri S&T). Beginning with the school's inception in 1871 as the Missouri School of Mines and Metallurgy (MSM) through to the year 2005, I have examined course catalogs and department files and conducted interviews to provide an overview of the evolution of technical communication instruction at this institution. To better understand this evolution, I have also provided a framework for the development of the English department from a single course in 1871 to the current Department of English and Technical …

Social Network Analysis Of The Video Bloggers' Community In Youtube, Anusha Mogallapu

Masters Theses

"This research studied the structure of the social network of the video blogger community on YouTube. It analyzed the social network structure of friends and subscribers of the 187 video bloggers on YouTube and calculated the social network measures. This thesis compares the results to the structure described by Warmbrodt et al. in 2007 and explains the reasons for the distinctions. The number of video bloggers has increased enormously, and the form of their interactions has changed. As a result, the video blogger social network has evolved from a core/periphery structure to one that is centralized. This indicates that the …

An Incentive Based Approach To Detect Selfish Nodes In Mobile P2p Network, Hemanth Meka

Masters Theses

"The growth of mobile devices led to the wide use of Mobile P2P networks. These networks are used in a wide variety of areas and hence there is lot of research in the field of mobile networks. Detecting selfish nodes is one of the research topics triggered due to the popularity of mobile P2P networks. It is necessary to detect selfish nodes in such networks to improve the efficiency of the network. In this thesis, an incentive based approach to detect selfish nodes is designed and evaluated. This approach differs from the existing work as it (i) can be used …