Computer Sciences Commons^™

Improving The Detection And Validation Of Inland Revenue Numbers, Henry Gee, Thomas Laurenson, Hank Wolfe

Australian Digital Forensics Conference

Forensic analysis commonly involves searching an investigation target for personal identifiable information. An Inland Revenue Department (IRD) number is used for taxation purposes in New Zealand and can provide evidence of perpetrator identity, transaction information or electronic fraud. This research has designed and implemented a bulk_extractor feature scanner to detect and validate IRD numbers (features). The IRD scanner has been tested on a known data set to ensure tool functionality. A large real world data set was then used to determine scanner effectiveness in a realistic investigation scenario. Real world data set testing highlighted a high number of unrelated features …

Analysis Into Developing Accurate And Efficient Intrusion Detection Approaches, Priya Rabadia, Craig Valli

Australian Digital Forensics Conference

Cyber-security has become more prevalent as more organisations are relying on cyber-enabled infrastructures to conduct their daily actives. Subsequently cybercrime and cyber-attacks are increasing. An Intrusion Detection System (IDS) is a cyber-security tool that is used to mitigate cyber-attacks. An IDS is a system deployed to monitor network traffic and trigger an alert when unauthorised activity has been detected. It is important for IDSs to accurately identify cyber-attacks against assets on cyber-enabled infrastructures, while also being efficient at processing current and predicted network traffic flows. The purpose of the paper is to outline the importance of developing an accurate and …

Cyber Black Box: Network Intrusion Forensics System For Collecting And Preserving Evidence Of Attack, Jong-Hyun Kim, Joo-Young Lee, Yangseo Choi, Sunoh Choi, Ik-Kyun Kim

Australian Digital Forensics Conference

Once the system is compromised, the forensics and investigation are always executed after the attacks and the loss of some useful instant evidence. Since there is no log information necessary for analyzing an attack cause after the cyber incident occurs, it is difficult to analyze the cause of an intrusion even after an intrusion event is recognized. Moreover, in an advanced cyber incident such as advanced persistent threats, several months or more are expended in only analyzing a cause, and it is difficult to find the cause with conventional security equipment. In this paper, we introduce a network intrusion forensics …

Security Of Eprescription: Security Of Data At Rest In Prescription Exchange Services Vs On Mobile Devices, Kyaw Kyaw Htat, Patricia A. H. Williams, Vincent Mccauley

Australian eHealth Informatics and Security Conference

One area of healthcare that has moved more quickly than others in adopting electronic transfer of information is prescribing in the primary care environment. Several Acts and Regulations have been repealed and amended at Commonwealth and State levels to enable this progress over the past decade, as medication provision is a strictly controlled area of healthcare. Further, numerous standards and specifications have been developed and adopted to support and safeguard the regulatory changes and facilitate the electronic transfer of prescriptions. However, the current model of electronic prescription transfer comes with a substantial price tag for ongoing use. With the Nation’s …

Litigation Holds: Past, Present, And Future Directions, Milton Luoma, Vicki M. Luoma

Journal of Digital Forensics, Security and Law

Electronically Stored Information (ESI) first became a serious litigation issue in the late 1990s, and the first attempts to determine best practices did not occur until the early 2000s. As best practices developed, the litigation hold to prevent routine destruction of documents and to preserve documents relevant to litigation came into existence. The duty to preserve ESI is triggered when litigation is reasonably anticipated. All information that relates to potential litigation must be preserved from the time it becomes reasonably apparent that litigation is possible until the expiration of the statute of limitations. If steps are not taken to properly …

To License Or Not To License Reexamined: An Updated Report On State Statutes Regarding Private Investigators And Digital Examiners, Thomas Lonardo, Alan Rea, Doug White

Journal of Digital Forensics, Security and Law

In this update to the 2012 year's study, the authors examine statutes that regulate, license, and enforce investigative functions in each US state. As before, the authors find that very few state statutes explicitly differentiate between Private Investigators and Digital Examiners. There is a small trend in which some states are changing definitions or moving to exempt DE from PI licensing requirements. However, we look at some additional information in terms of practicing attorney exemptions that may cloud the licensing waters.

As with the previous research studies (Lonardo et al., 2008, 2009, 2012) the authors contacted all state regulatory agencies …

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Open Forensic Devices, Lee Tobin, Pavel Gladyshev

Journal of Digital Forensics, Security and Law

Cybercrime has been a growing concern for the past two decades. What used to be the responsibility of specialist national police has become routine work for regional and district police. Unfortunately, funding for law enforcement agencies is not growing as fast as the amount of digital evidence. In this paper, we present a forensic platform that is tailored for cost effectiveness, extensibility, and ease of use. The software for this platform is open source and can be deployed on practically all commercially available hardware devices such as standard desktop motherboards or embedded systems such as Raspberry Pi and Gizmosphere’s Gizmo …

The Use Of Ontologies In Forensic Analysis Of Smartphone Content, Mohammed Alzaabi, Thomas A. Martin, Kamal Taha, Andy Jones

Journal of Digital Forensics, Security and Law

Digital forensics investigators face a constant challenge in keeping track with evolving technologies such as smartphones. Analyzing the contents of these devices to infer useful information is becoming more time consuming as the volume and complexity of data are increasing. Typically, such analysis is undertaken by a human, which makes it dependent on the experience of the investigator. To overcome such impediments, an automated technique can be utilized in order to aid the investigator to quickly and eciently analyze the data.In this paper, we propose F-DOS; a set of ontologies that models the smartphone content for the purpose of forensic …

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Graph-Theoretic Characterization Of Cyber-Threat Infrastructures, Amine Boukhtouta, Djedjiga Mouheb, Mourad Debbabi, Omar Alfandi, Farkhund Iqbal, May El Barachi

All Works

In this paper, we investigate cyber-threats and the underlying infrastructures. More precisely, we detect and analyze cyber-threat infrastructures for the purpose of unveiling key players (owners, domains, IPs, organizations, malware families, etc.) and the relationships between these players. To this end, we propose metrics to measure the badness of different infrastructure elements using graph theoretic concepts such as centrality concepts and Google PageRank. In addition, we quantify the sharing of infrastructure elements among different malware samples and families to unveil potential groups that are behind specific attacks. Moreover, we study the evolution of cyber-threat infrastructures over time to infer patterns …

Business Reputation Of Social Networks Of Web Services, Zakaria Maamar, Gianpiero Costantino, Marinella Petrocchi, Fabio Martinelli

All Works

© 2015 The Authors. Published by Elsevier B.V. This is an open access article under the CC BY-NC-ND license. This paper introduces a set of criteria that are used to establish the reputation of a social network from a business perspective. This network is populated with social Web services. Compared to regular Web services, social Web services establish and maintain networks of contacts, count on their (privileged) contacts when needed, etc. These criteria are membershipCost, demandLevel, satisfactionLevel, and retentionLevel, and assist a social Web service in selecting the best social network in which it will sign up. Similar criteria have …

A 3-D Stability Analysis Of Lee Harvey Oswald In The Backyard Photo, Srivamshi Pittala, Emily Whiting, Hany Farid

Journal of Digital Forensics, Security and Law

Fifty years have passed since the assassination of U.S. President Kennedy. Despite the long passage of time, it is still argued that the famous backyard photo of Oswald, holding the same type of rifle used to assassinate the President, is a fake. These claims include, among others, that Oswald’s pose in the photo is physically implausible. We describe a detailed 3-D stability analysis to determine if this claim is warranted.

Table Of Contents

Journal of Digital Forensics, Security and Law

No abstract provided.

Gaining Policy Insight With A System Dynamics Model Of Pain Medicine Prescribing, Diversion And Abuse, Wayne Wakeland, Alexandra E. Nielsen, Teresa D. Schmidt

Complex Systems Faculty Publications and Presentations

Misuse of pain medicine is a leading cause of accidental deaths in the USA—over 15,000 deaths annually. A system dynamics model was developed and used to study the impact of three types of policy interventions to reduce adverse outcomes. Besides medical usage, the model also includes the diversion of pain medicines and their nonmedical use. Model behavior compared favourably with historical data at multiple points in the system. A prescription drug monitoring program intervention reduced nonmedical overdoses through supply restriction, and an intervention to reduce popularity of nonmedical usage reduced nonmedical overdoses by curtailing demand. A tamper-resistant drug formulation intervention …

Archive - A Data Management Program, James H. Devilbiss, C. Steven Whisnant, Yasmeen Shorish

Department of Physics and Astronomy - Faculty Scholarship

To meet funding agency requirements, a portable data management solution is presented for small research groups. The database created is simple, searchable, robust, and can reside across multiple hard drives. Employing a standard metadata schema for all data, the database ensures a high level of standardization, findability, and organization. The software is written in Perl, runs on UNIX, and presents a web-based user interface. It uses a fast, portable log-in scheme, making it easy to export to other locations. As research continues to move towards more open data sharing and reproducibility, this database solution is agile enough to accommodate external …

Selfish Routing On Dynamic Flows, Christine Marie Antonsen

Honors Papers

Selfish routing on dynamic flows over time is used to model scenarios that vary with time in which individual agents act in their best interest. In this paper we provide a survey of a particular dynamic model, the deterministic queuing model, and discuss how the model can be adjusted and applied to different real-life scenarios. We then examine how these adjustments affect the computability, optimality, and existence of selfish routings.

Arrow: A Modern Reversible Programming Language, Eli Rose

Honors Papers

Reversible programming languages are those whose programs can be run backwards as well as forwards. This condition impacts even the most basic constructs, such as =, if and while. I discuss Janus, the first imperative reversible programming language, and its limitations. I then introduce Arrow, a reversible language with modern features, including functions. Example programs are provided.

Set Lister, Cyril Casapao

Honors Projects

No abstract provided.

Current Practices For Product Usability Testing In Web And Mobile Applications, Spencer W. Black

Honors Theses and Capstones

Software usability testing is a key methodology that ensures applications are intuitive and easy to use for the target audience. Usability testing has direct benefits for companies as usability improvements often are fundamental to the success of a product. A standard usability test study includes the following five steps: obtain suitable participants, design test scripts, conduct usability sessions, interpret test outcomes, and produce recommendations. Due to the increasing importance for more usable applications, effective techniques to develop usable products, as well as technologies to improve usability testing, have been widely utilized. However, as companies are developing more cross-platform web and …

A Secure Sharing Design For Multi-Tag Rfid Authentication Protocol, Ayad Al-Adhami, Marcel Ambroze, Colin Cristopher, Ingo Stengel, Martin Tomlinson

Australian Security and Intelligence Conference

No abstract provided.

Urdu Text Steganography: Utilizing Isolated Letters, Aliya Tabassum Abbasi, Nuzhat Naqvi, Aihab Khan, Basheer Ahmad

Australian Information Security Management Conference

This paper presents an imperceptible and high capacity feature based approach which hides a secret message into Urdu text cover media by utilising all isolated letters. Existing techniques are less imperceptible and also not robust against steganalysis attacks and some of these schemes are failed to provide the better capacity rates. Previous lexical based and syntax based schemes are ineffective to provide the better capacity rate and image based approaches are not robust against format attacks. Moreover, Feature based approaches are more perceptible and thus, cannot resist against visual attacks. This paper proposes an improved algorithm that encompasses all isolated …

Universal Computation With Arbitrary Polyomino Tiles In Non-Cooperative Self-Assembly, Sándor P. Fekete, Jacob Hendricks, Matthew J. Patitz, Trent A. Rogers

Computer Science Faculty Publications

In this paper we explore the power of geometry to overcome the limitations of non-cooperative self-assembly. We define a generalization of the abstract Tile Assembly Model (aTAM), such that a tile system consists of a collection of polyomino tiles, the Polyomino Tile Assembly Model (polyTAM), and investigate the computational powers of polyTAM systems at temperature 1, where attachment among tiles occurs without glue cooperation (i.e., without the enforcement that more than one tile already existing in an assembly must contribute to the binding of a new tile). Systems composed of the unit-square tiles of the aTAM at temperature 1 …

Preparing Secondary Mathematics Teachers: Focus On Modeling In Algebra, Hyunyi Jung, Alexia Mintos, Jill Newton

Mathematics, Statistics and Computer Science Faculty Research and Publications

This study addressed the opportunities to learn (OTL) modeling in algebra provided to secondary mathematics pre-service teachers (PSTs). To investigate these OTL, we interviewed five instructors of required mathematics and mathematics education courses that had the potential to include opportunities for PSTs to learn algebra at three universities. We also interviewed a group of three to four PSTs at each of the universities. We coded the interview transcripts using an analytic framework developed based on related literature and policy documents. We report the similarities and differences in perspectives among instructors and PSTs related to modeling at each university, along with …

Characterizations Of Gamma Distribution Via Sub-Independent Random Variables, Gholamhossein Hamedani

Mathematics, Statistics and Computer Science Faculty Research and Publications

The concept of sub-independence is based on the convolution of the distributions of the random variables. It is much weaker than that of independence, but is shown to be sufficient to yield the conclusions of important theorems and results in probability and statistics. It also provides a measure of dissociation between two random variables which is much stronger than uncorrelatedness. Inspired by the excellent work of Jin and Lee (2014), we present certain characterizations of gamma distribution based on the concept of sub-independence.

Kumaraswamy-Half-Cauchy Distribution: Characterizations And Related Results, Gholamhossein Hamedani, I. Ghosh

Mathematics, Statistics and Computer Science Faculty Research and Publications

We present various characterizations of a recently introduced distribution (Ghosh 2014), called Kumaraswamy- Half- Cauchy distribution based on: (i) a simple relation between two truncated moments; (ii) truncated moment of certain function of the 1^st order statistic; (iii) truncated moment of certain function of the random variable; (iv) hazard function; (v) distribution of the 1^st order statistic; (vi) via record values. We also provide some remarks on bivariate Gumbel copula distribution whose marginal distributions are Kumaraswamy- Half-Cauchy distributions.

Using Wild I.D. As A Reliable Source For Mark And Recapture Studies On Northern Pike (Esox Lucius), Martin Evans

Journal of Earth and Life Science

Mark and recapture studies are a very popular method fisheries biologists use to assess certain fish populations in lakes. This process can be very labor intensive and expensive. Wild I.D. is free software developed by Dartmouth College that uses SIFT program to find unique features in photographs. Initially developed for identification of African land mammals the program gives each photo a score and percent match to other photos. Northern pike were used in this study to determine if the program can recognize simulated recapture events. Photos of sample fish were taken at two separate locations, the photos were then copied …

Object Oriented Programming, Praveen Khethavath

Open Educational Resources

Students write a program that reads data based on a provided banking scenario, work on inputs, and generate a report after the data is processed.

Information Fusion Architectures For Security And Resource Management In Cyber Physical Systems, Brijesh Kashyap Chejerla

Doctoral Dissertations

"Data acquisition through sensors is very crucial in determining the operability of the observed physical entity. Cyber Physical Systems (CPSs) are an example of distributed systems where sensors embedded into the physical system are used in sensing and data acquisition. CPSs are a collaboration between the physical and the computational cyber components. The control decisions sent back to the actuators on the physical components from the computational cyber components closes the feedback loop of the CPS. Since, this feedback is solely based on the data collected through the embedded sensors, information acquisition from the data plays an extremely vital role …

Online Diagnosis Of Diabetes With Twitter Data, Farheen Ali

Masters Theses

"Innovation in technology enables people to communicate, share information and look for their needs by just sitting in rooms and going through some clicks. While social media has played a very important role in connecting people worldwide, its potential has stretched beyond the innovative idea of connecting people through their social networks. While many thought there was no meeting point for the healthcare sector and social media, it was a surprise when research and innovations have shown that social media could lay a very significant role in the health care sector.

Research has been done in developing models that could …