Information Security Commons^™

Exploring The Use Of Graph Databases To Catalog Artifacts For Client Forensics, Rose Shumba

Annual ADFSL Conference on Digital Forensics, Security and Law

Cloud computing has revolutionized the methods by which digital data is stored, processed, and transmitted. It is providing users with data storage and processing services, enabling access to resources through multiple devices. Although organizations continue to embrace the advantages of flexibility and scalability offered by cloud computing, insider threats are becoming a serious concern as cited by security researchers. Insiders can use authorized access to steal sensitive information, calling for the need for an investigation. This concept paper describes research in progress towards developing a Neo4j graph database tool to enhance client forensics. The tool, with a Python interface, allows …

Precognition: Automated Digital Forensic Readiness System For Mobile Computing Devices In Enterprises, Jayaprakash Govindaraj, Robin Verma, Gaurav Gupta

Annual ADFSL Conference on Digital Forensics, Security and Law

Enterprises are facing an unprecedented risk of security incidents due to the influx of emerging technologies, like smartphones and wearables. Most of the current Mobile security systems are not maturing in pace with technological advances. They lack the ability to learn and adapt from the past knowledge base. In the case of a security incident, enterprises find themselves underprepared for the lack of evidence and data. The systems are not designed to be forensic ready. There is a need for automated security analysis and forensically ready solution, which can learn and continuously adapt to new challenges, improve efficiency and productivity …

Non-Use Of A Mobile Phone During Conducting Crime Can Also Be Evidential, Vinod Polpaya Bhattathiripad Ph D

Annual ADFSL Conference on Digital Forensics, Security and Law

Cyber-clever criminals who are aware of the consequence of using mobile phones during conducting crimes often stay away from their phones while involved in crimes. Some of them even change their handset and SIM card, subsequently. This article looks into how, intentional disassociation (and even unintentional non-use) of mobile phone in (non-cyber) crimes, can become evidential clues of the perpetrators’ involvement in criminal acts. With the help of a recent judicial episode, this article reveals how extremely careful and masterful handling of extensive and voluminous Call Details Records and tower dumps by a cyber-savvy investigating official can unearth evidential clues …

Live Gpu Forensics: The Process Of Recovering Video Frames From Nvidia Gpu, Yazeed M. Albabtain, Baijian Yang

Annual ADFSL Conference on Digital Forensics, Security and Law

The purpose of this research is to apply a graphics processing unit (GPU) forensics method to recover video artifacts from NVIDIA GPU. The tested video specs are 512 x 512 in resolution for video 1 and 800 x 600 in resolution for video 2. Both videos are mpeg4 video codec. A VLC player was used in the experiment. A special program has been developed using OpenCL to recover 1) patterns that are frames consist of pixel values and 2) dump data from the GPU global memory. The dump data that represent the video frame were located using simple steps. The …

Unmanned Aerial Vehicle Forensic Investigation Process: Dji Phantom 3 Drone As A Case Study, Alan Roder, Kim-Kwang Raymond Choo, Nhien-A Le-Khac

Annual ADFSL Conference on Digital Forensics, Security and Law

Drones (also known as Unmanned Aerial Vehicles – UAVs) are a potential source of evidence in a digital investigation, partly due to their increasing popularity in our society. However, existing UAV/drone forensics generally rely on conventional digital forensic investigation guidelines such as those of ACPO and NIST, which may not be entirely fit-for-purpose. In this paper, we identify the challenges associated with UAV/drone forensics. We then explore and evaluate existing forensic guidelines, in terms of their effectiveness for UAV/drone forensic investigations. Next, we present our set of guidelines for UAV/drone investigations. Finally, we demonstrate how the proposed guidelines can be …

Detection And Recovery Of Anti-Forensic (Vault) Applications On Android Devices, Michaila Duncan, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Significant number of mobile device users currently employ anti-forensics applications, also known as vault or locker applications, on their mobile devices in order to hide files such as photos. Because of this, investigators are required to spend a large portion of their time manually looking at the applications installed on the device. Currently, there is no automated method of detecting these anti-forensics applications on an Android device. This work presents the creation and testing of a vault application detection system to be used on Android devices. The main goal of this work is twofold: (i) Detecting and reporting the presence …

Epoca House: The Implementation Strategy, Courtney Thomas, Yaffa Fain, Shuxiao Teng, Mingjun Xie

School of Professional Studies

This capstone report provides a written strategic implementation plan for EPOCA House. EPOCA, Ex-Prisoners and Prisoners Organizing for Community Advancement, is a non-profit dedicated to creating better resources and opportunities for prisoners and ex-prisoners in Worcester. The organization’s most recent initiative, EPOCA House, is a transitional facility that will provide reentry services and temporary housing to ex-offenders in and around the Worcester area. Recently, Massachusetts passed a comprehensive criminal justice reform bill that will dramatically reduce the number of people being incarcerated; however, little attention is focused on what will happen to individuals after they leave prison. At the same …

A Guide For Hiring Mature Employees At Ascentria, Binghe Change, Calleigh Leach, Elsie Lu, Hongquiang You, Mengge Wang, Nina Mariotti

School of Professional Studies

This paper will explore existing literature on aspects of an intergenerational workplace in a nonprofit organization and provide recommendations for recruiting and retaining older employees for a human service organization, Ascentria Care Alliance, in Worcester, MA. The paper will review research on trends in the nonprofit industry, a comprehensive breakdown of generational workplace values, reasons people are returning to work and effective marketing strategies that appeal to older generations. Marketing strategies specifically will explore best practices for website design, social media usage, and job descriptions. Additionally, this paper will research case studies of nonprofits with successful intergenerational workforce initiatives, as …

Clear The Air: Moving Towards A More Supportive, Welcoming, Tobacco-Free Clark University, Edward Aroko, Simon Elliot, Jackson Espe, Donovan Smith, Michael Spanos

School of Professional Studies

The deleterious health effects of the consumption of tobacco products, especially for youth, have been documented thoroughly and are nearly universally recognized. Numerous federal, state, and local regulations, coupled with health education and tobacco cessation initiatives have been launched to address these effects. Although these pushes have done much to reduce the rates of preventable health conditions and death due to the usage of tobacco, there remains much work to be done at the local level to discourage and disrupt patterns of substance use and abuse. The mission of Clark Clear the Air is to propose various and creative ways …

Inbound Marketing, Hasini Assiriyage, Isabelle Zoeckler, Emmanuel Aghado, Kefu Bu, Xiouyu Jiang, Rajesh Kamble, Yan Wang

School of Professional Studies

This study looks into inbound marketing practice through the process of secondary research. This insight on best practices and market examples have been employed in order to identify the benefits of Inbound Marketing for the School of Professional Studies at Clark University. Through the research, this team has consolidated a number of recommendations for the SPS marketing strategies moving forward. A focus has been placed on identifying solutions, which were effective and financially feasible. The primary solutions are internally sourced; with a future long term recommendation of seeking advice from a third party firm to automate the process.

Adult Learners: A Targeted Marketing Approach, Sarah Baldelli, Camilo Botero, Camille Ferreol, Caleb Horton, Xinyue Ma, Stefan Sprinkmoller

School of Professional Studies

The development of the Adult Learner Capstone Project started with a focus and need to learn more about affinity groups in the Worcester area in order to reach the potential adult learner demographic. Although some partnerships already existed, the Director of Marketing and Communications for Graduate Admissions, Tara Probeck, yearned to explore the potential partnerships and alternative uses of professional organizations to market to the current working professionals. From this idea, our capstone project was introduced in hopes of establishing a comprehensive and exhaustive list of potential organizational partnerships, specific for the School of Professional Studies.

My Choice Greens, Alina Zulfikarova, Amelia Mohr, Hesi Zhang, Ruiqi Huang, Sean Tatar, Yuhao Zhou, Zijun Zhou

School of Professional Studies

My Choice Programs for Independent Living is a nonprofit in Worcester, Massachusetts that helps individuals with special needs. In 2016, My Choice Programs added a branch to their organization called My Choice Greens. My Choice Greens is committed to growing fresh produce in their hydroponic farm. The profit generated from selling their vegetables is put back into direct programming for My Choice Programs. My Choice Greens is the first hydroponic farm in Worcester, but unfortunately not many people are aware of their program. Also, since they are a small nonprofit, they do not have sufficient funding or resources to market …

Optical Heritage Museum: An Interactive Touch, Connor Guerin, Ankur Halwai, Jinzhao Liu, Qi Liu, Yangjing Wang, Yashaswini Bharti

School of Professional Studies

Optical Heritage Museum (OHM) was established in 1983 with the aim to preserve, promote and display historical artifacts of the optics industry and educate all of its vital role optics has played in societal development. Over the years, the museum has grown in its physical space along with exhibit development to engage audiences in innovative, effective methods. Clark University’s School of Professional Studies department and curator of Optical Heritage Museum, Mr. Whitney’s Whitney, have establish a collaboration that has spanned over two semesters with the goal to support and aid in improving OHM. Our capstone group was assigned the task …

Leicester Research A Study In Effective Technology In Education, Jimeshkumar Chauhan, Anna Lakomy, Li Liu, Christina Mccarthy, Scott Mccarthy, Roman Pena, Emilie Smiley

School of Professional Studies

The LPS Research Team has been tasked with researching and recommending a technology plan for a new school that Leicester Public Schools is planning to build. In this paper, we present an overview of the our goals and our client’s goals, an introduction to industry trends, and discuss our findings based on research conducted via interviews with schools that have undergone similar projects. We also outline the conclusions drawn from this research and our analysis of the data we uncovered, and make specific recommendations for technology to be utilized in Leicester’s new school. Finally, we present a 3-part framework that …

Leicester Public Schools Information And Data Portal: Research And Recommendations, Yue Cen, Natalie Bonetti, Rashida Buchanan, Sathark Jain, Yuwei Wong

School of Professional Studies

The purpose of this project is to develop a strategy for the creation of a multifaceted portal to help with the organization and dissemination of information about the Leicester public school district. The functionality of this portal is to provide comparative financial, demographic, and academic data to other relative school districts in the area, both for the parents’ and for the city’s reference. It will be an examination into the best practices for creating a portal, both technological and aesthetic recommendations, as well as research into the value the publication of this data would provide for the parents of current …

Water In Worcester A Campaign For Public Fluoridation, Ryan Early, Xiao Gu, Yajing Huang, Lauren Meininger, Emma Phillips, Yao Su

School of Professional Studies

Water in Worcester: A Campaign for Public Fluoridation arose as a project from our sponsors, Chris Philbin, Vice President of Government Relations at UMass Memorial Health Care, and Joe O’Brien, former Worcester Mayor, Executive Director of the Environmental League of Massachusetts, and Clark University Adjunct Professor. Our goal has been to produce resources that will support the fight for fluoridation in the City of Worcester. Fluoridation has failed to pass in Worcester on four separate occasions, but Mr. Philbin and Mr. O’Brien believe that the time has come to try again.

In order to fluoridate Worcester’s water supply, the municipal …

Canine For Disabled Kids Awareness Campaign Research And Implementation Plan, Jiamin Gu, Kendall Harcourt, Chang Liu, Kiamu Liu, Jemmie Tejada

School of Professional Studies

According to the Americans with Disabilities Act (ADA) service animals are: “dogs that are individually trained to do work or perform tasks for people with disabilities” ( ADA, 2015). On the other hand, emotional support animals are: “dogs that provide comfort and support in forms of affection and companionship for an individual suffering from various mental and emotional conditions.” In addition, an emotional support animal is not required to perform any specific tasks for a disability like service dogs are (Ibid).

The ADA limits the number of questions that can be asked to protect the privacy of utilizers. In fact, …

Life Can Change In The Blink Of An Eye Capstone, Christopher Rutigliano, Jillian Elalaoui, Kristin Humphrey, Phillip Gates, Mohamed Ndjikam, Highness Meena, Adam Menard, Spencer Pickney

School of Professional Studies

Texting and driving is one of the most widespread and uncontrollable of epidemics that have arose to prominence in the 21st century. Texting and driving is now a global issue, that has left nations across the road scrambling to implement new laws and preventative measures to stunt the increasing rates of accidents and fatalities caused by texting and driving. The severity of the issue has lead to a multitude of different entities ranging from domestic and foreign governments, cell phone and car manufacturers, cell phone carriers, and insurance agencies to seek new methods to prevent texting and driving. Determining the …

A Social Media Plan For The Changemakers’ Playground, Meng Cong, Ciara Kilian, Xinling Wang, Sumanth Wilson, Chenyu Yan

School of Professional Studies

The purpose of this project was to create a social media plan for the Changemakers’ Playground campaign. The Changemakers’ Playground is a website thought up by our client, Sarah Lange, whereby ordinary individuals doing extraordinary things in their community can be celebrated for the work they are doing. Each person featured on the website, also known as a Changemaker, was interviewed by Sarah and that interview was split into three videos to be posted on the Changemakers’ Playground website throughout the week they are being featured. In short, our task was to create the Facebook, Twitter, and Instagram content to …

Surveying Digital Collections Stewardship In Nebraska [Original Survey Form], Jennifer L. Thoegersen, Blake Graham

University of Nebraska-Lincoln Data Repository

No abstract provided.

Automated Man-In-The-Middle Attack Against Wi‑Fi Networks, Martin Vondráček, Jan Pluskal, Ondřej Ryšavý

Journal of Digital Forensics, Security and Law

Currently used wireless communication technologies suffer security weaknesses that can be exploited allowing to eavesdrop or to spoof network communication. In this paper, we present a practical tool that can automate the attack on wireless security. The developed package called wifimitm provides functionality for the automation of MitM attacks in the wireless environment. The package combines several existing tools and attack strategies to bypass the wireless security mechanisms, such as WEP, WPA, and WPS. The presented tool can be integrated into a solution for automated penetration testing. Also, a popularization of the fact that such attacks can be easily automated …

Back Matter, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

Front Matter, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

Contents, Adfsl

Annual ADFSL Conference on Digital Forensics, Security and Law

No abstract provided.

An Overview Of The Usage Of Default Passwords, Brandon Knierem, Xiaolu Zhang, Philip Levine, Frank Breitinger, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

The recent Mirai botnet attack demonstrated the danger of using default passwords and showed it is still a major problem. In this study we investigated several common applications and their password policies. Specifically, we analyzed if these applications: (1) have default passwords or (2) allow the user to set a weak password (i.e., they do not properly enforce a password policy). Our study shows that default passwords are still a significant problem: 61% of applications inspected initially used a default or blank password. When changing the password, 58% allowed a blank password, 35% allowed a weak password of 1 character.

Graduate Admissions Recruitment Project, Kevin Anderson, Chiemela Dike, Yixin Du, Arvinder Kaur, Amanda Popp, Huizhong Yang

School of Professional Studies

In this project, several comparison schools were interviewed and disclosed to have used search lists to find candidates. The organizations that have valuable search lists which may be of good use for the School of Professional Studies include Educational Testing Service (ETS) and the Graduate Management Admission Council (GMAC). By choosing criteria such as demographics, location, academic performance, educational history provided by search lists, we believe there are many quality candidates for SPS programs. However, as we further investigated the functionality and cost-efficiency or return of investment of GRE search list, we spotted many uncertainties and few solid and successful …

Worcester Center For Crafts: A Transition To Online Sales, Monica Gow, Carly Branconnier, Srilatha Prodduturi, Ekaterina Shusharina, Alberta Yamoah

School of Professional Studies

The Clark University School of Professional Studies created a capstone team consisting of Monica Gow, Carly Branconnier, Iana Matkovskaia, Srilatha Prodduturi, Ekaterina Shusharina, and Alberta Yamoah to assist Worcester Center for Crafts (WCC) with the launch of their new online store. Worcester Center for Crafts wanted to showcase their beautiful American handmade crafts on an online platform, Shopify, in order to increase their sales and expand their market reach. The capstone team created a charter that outlined the scope of the project and what the team would deliver to WCC by the end of the project. The team agreed to …

Audubon Data Project Final Report, Askhat Beygenov, Valinur Kutlambetov, Shrikant Patel, Phoebe Roberts, Ulfat Sayyed, Shriram Sivaraman

School of Professional Studies

The Audubon Data Project was initiated as a Clark University Capstone project. The project’s client, Mass Audubon’s Shaping the Future of Your Community program, had identified a need to improve their data management methods and make better use of their data. The Capstone team, composed of Clark University graduate students, met with the client regularly to review the current state of the data and potential improvements to be made. The process began with a data review. During the review we worked with the client to explicitly define the purposes and requirements of the data, the current process for updating and …

Assessment Of Information Security Culture In Higher Education, Henry Glaspie

Electronic Theses and Dissertations

Information security programs are instituted by organizations to provide guidance to their users who handle their data and systems. The main goal of these programs is to protect the organization's information assets through the creation and cultivation of a positive information security culture within the organization. As the collection and use of data expands in all economic sectors, the threat of data breach due to human error increases. Employee's behavior towards information security is influenced by the organizations information security programs and the overall information security culture. This study examines the human factors of an information security program and their …

Economics-Based Risk Management Of Distributed Denial Of Service Attacks: A Distance Learning Case Study, Omer Keskin, Unal Tatar, Omer Poyraz, Ariel Pinto, Adrian Gheorghe

Engineering Management & Systems Engineering Faculty Publications

Managing risk of cyber systems is still on the top of the agendas of Chief Information Security Officers (CISO). Investment in cybersecurity is continuously rising. Efficiency and effectiveness of cybersecurity investments are under scrutiny by boards of the companies. The primary method of decision making on cybersecurity adopts a risk-informed approach. Qualitative methods bring a notion of risk. However, particularly for strategic level decisions, more quantitative methods that can calculate the risk and impact in monetary values are required. In this study, a model is built to calculate the economic value of business interruption during a Distributed Denial-of-Service (DDoS) attack …