Legal Studies Commons^™

Botnet Forensic Investigation Techniques And Cost Evaluation, Brian Cusack

Annual ADFSL Conference on Digital Forensics, Security and Law

Botnets are responsible for a large percentage of damages and criminal activity on the Internet. They have shifted attacks from push activities to pull techniques for the distribution of malwares and continue to provide economic advantages to the exploiters at the expense of other legitimate Internet service users. In our research we asked; what is the cost of the procedural steps for forensically investigating a Botnet attack? The research method applies investigation guidelines provided by other researchers and evaluates these guidelines in terms of the cost to a digital forensic investigator. We conclude that investigation of Botnet attacks is both …

Development And Dissemination Of A New Multidisciplinary Undergraduate Curriculum In Digital Forensics, Masooda Bashir, Jenny A. Applequist, Roy H. Campbell, Lizanne Destefano, Gabriela L. Garcia, Anthony Lang

Annual ADFSL Conference on Digital Forensics, Security and Law

The Information Trust Institute (ITI) at the University of Illinois at Urbana-Champaign is developing an entirely new multidisciplinary undergraduate curriculum on the topic of digital forensics, and this paper presents the findings of the development process, including initial results and evaluation of a pilot offering of the coursework to students. The curriculum consists of a four-course sequence, including introductory and advanced lecture courses with parallel laboratory courses, followed by an advanced course. The content has been designed to reflect both the emerging national standards and the strong multidisciplinary character of the profession of digital forensics, and includes modules developed collaboratively …

Computer Forensics For Accountants, Grover S. Kearns

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital attacks on organizations are becoming more common and more sophisticated. Firms are interested in providing data security and having an effective means to respond to attacks. Accountants possess important investigative and analytical skills that serve to uncover fraud in forensic investigations. Some accounting students take courses in forensic accounting but few colleges offer a course in computer forensics for accountants. Educators wishing to develop such a course may find developing the curriculum daunting. A major element of such a course is the use of forensic software. This paper argues the importance of computer forensics to accounting students and offers …

Applying Memory Forensics To Rootkit Detection, Igor Korkin, Ivan Nesterov

Annual ADFSL Conference on Digital Forensics, Security and Law

Volatile memory dump and its analysis is an essential part of digital forensics. Among a number of various software and hardware approaches for memory dumping there are authors who point out that some of these approaches are not resilient to various anti-forensic techniques, and others that require a reboot or are highly platform dependent. New resilient tools have certain disadvantages such as low speed or vulnerability to rootkits which directly manipulate kernel structures, e.g., page tables. A new memory forensic system – Malware Analysis System for Hidden Knotty Anomalies (MASHKA) is described in this paper. It is resilient to popular …

The Federal Rules Of Civil Procedure: Politics In The 2013-2014 Revision, John W. Bagby, Byron Granda, Emily Benoit, Alexander Logan, Ryan Snell, Joseph J. Schwerha

Annual ADFSL Conference on Digital Forensics, Security and Law

Pre-trial discovery is perpetually controversial. Parties advantaged by strict privacy can often avoid justice when this is disadvantageous to their interests. Contrawise, parties advantaged by relaxed litigation privacy can achieve justice when all facts are accessible irrespective of their repositories, ownership or control. American-style pre-trial discovery in civil and regulatory enforcement is relatively rare around the world. U.S. discovery rules open nearly all relevant and non-privileged data for use by opposing parties. The traditional discovery process was costly and time consuming in the world of tangible paper data. However, these burdens have increased, rather than diminished as often predicted, as …

Testing And Evaluating The Harmonised Digital Forensic Investigation Process In Post Mortem Digital Investigation, Emilio R. Mumba, H. S. Venter

Annual ADFSL Conference on Digital Forensics, Security and Law

Existing digital forensic investigation process models have provided guidelines for identifying and preserving potential digital evidence captured from a crime scene. However, for any of the digital forensic investigation process models developed across the world to be adopted and fully applied by the scientific community, it has to be tested. For this reason, the Harmonized Digital Forensic Investigation Process (HDFIP) model, currently a working draft towards becoming an international standard for digital forensic investigations (ISO/IEC 27043), needs to be tested.

This paper, therefore, presents the findings of a case study used to test the HDFIP model implemented in the ISO/IEC …

Generation And Handling Of Hard Drive Duplicates As Piece Of Evidence, T. Kemmerich, F. Junge, N. Kuntze, C. Rudolph, B. Endicott-Popovsky, L. Großkopf

Annual ADFSL Conference on Digital Forensics, Security and Law

An important area in digital forensics is images of hard disks. The correct production of the images as well as the integrity and authenticity of each hard disk image is essential for the probative force of the image to be used at court. Integrity and authenticity are under suspicion as digital evidence is stored and used by software based systems. Modifications to digital objects are hard or even impossible to track and can occur even accidentally. Even worse, vulnerabilities occur for all current computing systems. Therefore, it is difficult to guarantee a secure environment for forensic investigations. But intended deletions …

Internet Addiction To Child Pornography, Rachel Sitarz, Marcus Rogers, Lonnie Bentley, Eugene Jackson

Annual ADFSL Conference on Digital Forensics, Security and Law

During the present age and time, it seems as though people in society have become addicted to nearly anything and everything, whether it be to a substance, an activity or an object. The Internet and pornography is no exception. While commonly thought of as a deviant behavior, many are displaying addictions towards the Internet and pornography. More alarming, however, are those who are viewing, downloading, or trading child pornography and displaying addictive Internet behaviors, for they are spending excessive amounts of time engaging in the proliferation of child pornographic materials. For this reason, addiction to the Internet and usage of …

Using Internet Artifacts To Profile A Child Pornography Suspect, Marcus K. Rogers, Kathryn C. Seigfried-Spellar

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital evidence plays a crucial role in child pornography investigations. However, in the following case study, the authors argue that the behavioral analysis or “profiling” of digital evidence can also play a vital role in child pornography investigations. The following case study assessed the Internet Browsing History (Internet Explorer Bookmarks, Mozilla Bookmarks, and Mozilla History) from a suspected child pornography user’s computer. The suspect in this case claimed to be conducting an ad hoc law enforcement investigation. After the URLs were classified (Neutral; Adult Porn; Child Porn; Adult Dating sites; Pictures from Social Networking Profiles; Chat Sessions; Bestiality; Data Cleaning; …

Life (Logical Iosforensics Examiner): An Open Source Iosbackup Forensics Examination Tool, Ibrahim Baggili, Shadi Al Awawdeh, Jason Moore

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present LiFE (Logical iOS Forensics Examiner), an open source iOS backup forensics examination tool. This tool helps both researchers and practitioners alike in both understanding the backup structures of iOS devices and forensically examining iOS backups. The tool is currently capable of parsing device information, call history, voice messages, GPS locations, conversations, notes, images, address books, calendar entries, SMS messages, Aux locations, facebook data and e-mails. The tool consists of both a manual interface (where the user is able to manually examine the backup structures) and an automated examination interface (where the tool pulls out evidence …

Why Penetration Testing Is A Limited Use Choice For Sound Cyber Security Practice, Craig Valli, Andrew Woodward, Peter Hannay, Mike Johnstone

Annual ADFSL Conference on Digital Forensics, Security and Law

Penetration testing of networks is a process that is overused when demonstrating or evaluating the cyber security posture of an organisation. Most penetration testing is not aligned with the actual intent of the testing, but rather is driven by a management directive of wanting to be seen to be addressing the issue of cyber security. The use of penetration testing is commonly a reaction to an adverse audit outcome or as a result of being penetrated in the first place. Penetration testing used in this fashion delivers little or no value to the organisation being tested for a number of …

Awareness Of Scam E-Mails: An Exploratory Research Study, Tejashree D. Datar, Kelly A. Cole, Marcus K. Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

The goal of this research was to find the factors that influence a user’s ability to identify e-mail scams. It also aimed to understand user’s awareness regarding e-mail scams and actions that need to be taken if and when victimized. This study was conducted on a university campus with 163 participants. This study presented the participants with two scam e-mails and two legitimate e-mails and asked the participants to correctly identify these e-mails as scam or legitimate. The study focused on the ability of people to differentiate between scam and legitimate e-mails. The study attempted to determine factors that influence …

Effects Of Jurors’ Gender And Attitudes Toward Intellectual Disability On Judgments For Disabled Juvenile Defendants, Cynthia J. Najdowski, Bette L. Bottoms

Psychology Faculty Scholarship

Because many juvenile offenders are intellectually disabled and have their cases tried by jurors in adult criminal court, it is important to understand factors that influence jurors’ judgments in such cases. Using a mock trial methodology, we explored the relations among jurors’ gender, attitudes toward intellectual disability, and judgments in a criminal case involving an intellectually disabled 15-year-old girl accused of murder. Men mock jurors’ judgments were not influenced by their preexisting biases, but women's were: the more women favored special treatment for disabled offenders, the less likely they were to suspect the disabled juvenile was guilty and the less …

Attitudes Toward The Way Courts Deal With Criminals, Chelsea Van Aken

Themis: Research Journal of Justice Studies and Forensic Science

The way courts treat criminals depends on a variety of factors. This paper examines how age, sex, and race affect an offender’s treatment during sentencing. These variables were collected using the 2010 General Social Survey and were tested using the SPSS 20.0 Student Version Statistical Software. The independent variables include age, race, and sex, while the dependent variable is the way courts deal with criminals. The hypotheses that were tested stated that older individuals, nonwhite persons, and men would believe that courts deal too harshly with criminals. The conclusion found that none of the variables showed a significant correlation; therefore, …

The Unfair Sentencing Act: Racial Disparities And Fiscal Consequences Of America's Drug Laws, Kristin Zimmerman

Themis: Research Journal of Justice Studies and Forensic Science

In 1986, the United States government attempted to combat the perceived war on drugs by enacting mandatory drug laws, with a primary focus on incarcerating crack offenders. The result of this was a mass influx of African Americans to US penitentiaries and minimal to zero reduction of crack convictions. Because the Anti-Drug Abuse Act of 1986 recognized 100 grams of cocaine as equivalent to one gram of crack, it has been perceived not as a war on drugs, but as a war on a war on minorities. The mass incarceration of drug offenders also led to severely damaging fiscal consequences …

Running The Boys' Club: An Examination Of The Experiences Of Female Law Enforcement Leaders, Jennifer Lynn Taylor

Dissertations

After struggling for decades for an equal status, it appears that female law enforcement officers in general have overcome the obstacles that initially kept them away from the job. Now, it is not uncommon to see a woman working as a patrol officer or criminal investigator. It took a shift in attitude over time and government intervention for this evolution to occur. Male officers were resistant, because the presence of women was considered a threat to their boys’ club that they so cherished. But, eventually, they have come to accept the role of women in policing.

Unfortunately, another dilemma surfaced …

Indeterminacy, Value Pluralism, And Tragic Cases, David Wolitz

Buffalo Law Review

No abstract provided.

Transnational Organized Crime And The Illegal Wildlife Trade Global Ties And Global Crime, Zachariah Edward Long

Graduate Program in International Studies Theses & Dissertations

World biodiversity is faced with many different threats in today's globalized world. One such threat is the emergence of transnational organized crime in the illegal wildlife trade. But why would transnational organized crime which is traditionally associated with such crimes like illegal drugs, weapons, and human trafficking be interested in the illegal wildlife trade? This thesis seeks to explore why transnational organized crime as a rational business actor would it be interested in participating in the illegal wildlife trade. To explore this relationship, this thesis will look at several different variables. First the economic conditions oflocals living with wildlife and …

Deterring Fraud: Police Investigations Into Embezzlement, Brandon Grossman

Honors College Theses

Embezzlement is a highly disruptive crime that comes with a large negative societal impact. This study was a secondary data analysis of embezzlement data from the Las Vegas Metropolitan Police Department for the years 2012-2013. Clearance rates were calculated and analyzed for general fraud related calls for service and for embezzlement cases specifically in order to determine what clearance rates were for the Las Vegas Valley and see if they are comparable to the national average. Data was analyzed within pie and bar charts to determine if the LVMPD is effectively solving embezzlement cases and see if cases with particular …

In It For The Long Haul: Exploring Gender Dynamics In Former Prisoner– Family Relationships, Damian J. Martinez, Andrea Leverentz

Qualitative Criminology (QC)

"This article contributes to the growing body of literature on the role of families of origin in the reentry of former prisoners by focusing on a group of young men of color recently released from prison. Our in-depth interviews with young men and selected family members highlighted the ongoing importance of their family relationships for providing important emotional and instrumental support. These relationships also are gendered. In relationships with female relatives, the former prisoners’ primary role was to be there for the women in the family and thereby demonstrate their love of family and their commitment to desistance from crime, …

Kenneth D. Tunnell, Once Upon A Place: The Fading Of Community In Rural Kentucky, Travis Linnemann

Qualitative Criminology (QC)

"It is difficult to think of the rural apart from rolling hills and green fields that offer a respite from the city’s disquiet. Along with images of a bucolic rurality however, is a darker anti-idyll that has loomed in the social imaginary for centuries. While the narrative is timeless, the rural’s decline is something few among us have lived or even cared to witness first-hand. However, in the pages of Kenneth D. Tunnell’s Once Upon a Place, we travel to the disregarded landscapes of rural Kentucky and witness the history of its struggles. Like looking out the window of …

Expressing Strain: A Qualitative Evaluation Of The Testimonies Of Female Sex Offenders, Jennifer L. Klein, Danielle Tolson, Cathy Collins

Qualitative Criminology (QC)

"For those convicted of a sexual offense, life on the registry is not an easy one. There is a great deal of stigma associated with these offenders despite the fact they served their sentences and were released back into society. Current research examines what life is like for female sex offenders whose information is listed on the Florida Sex Offender Registry. Using Robert Agnew’s General Strain Theory as a lens to examine the registry, this article will show the stress present in the lives of the registrants. Specifically, the article will address coping mechanisms, anger, and several unintended consequences of …

Beyond Basic Needs: Social Support And Structure For Successful Offender Reentry, Andrew S. Denney, Richard Tewksbury, Richard S. Jones

Qualitative Criminology (QC)

"Barriers to successful reentry have long been identified as impeding an offender’s ability to successfully reenter society upon release from incarceration. As a result, research has long examined what shared obstacles the majority of offenders often face upon reentering society. Much of the research identifies factors such as poor education, obtaining/maintaining employment, stable housing, and transportation as common barriers to successful reentry. By using in-depth interviews with ex-offenders deemed as successful that were conducted by two respective non-profit agencies, the present study explores what significant requirements, if any, successful offenders perceive to need and/or have experienced as lacking while attempting …

Editorial, Willard M. Oliver

Qualitative Criminology (QC)

"When I took on the role of editor for the new Journal of Qualitative Criminal Justice & Criminology, I wanted to secure as many of the leading qualitative researchers as I could for the editorial board. While I did not know Jock Young personally, I knew of him and his reputation and writings, and I figured he was one who should be on the board. When I asked my book review editor, Kevin Steinmetz, now Dr. Steinmetz, who I should include on the board, the first two people he requested were Jock Young and Jeff Ferrell. I agreed and …

Obituary: Unapologetic Irreverence: The Life And Legacy Of William “Jock” Young (1942-2013), Robert Donald Weide

Qualitative Criminology (QC)

"I first met my dear friend and mentor Jock Young as a doe faced graduate student, “full of it,” as he would have probably described me at the time. It was a quality he apparently admired in me, unlike many of my other academic mentors. Our dear friend, colleague and another cherished mentor, David Charles Brotherton, made the introduction and while Jock shook my hand, he gave me the cock-eyed look of a madman as he peered into my soul, remarking to David with a deviant smirk, “Oh look, we have another trouble maker here!” Well it takes one to …

Conceptualizing Social Recovery: Recovery Routes Of Methamphetamine Users, Miriam Boeri, David Gibson, Paul Boshears Europäische Universität Für Interdisziplinäre Studien (The European Graduate School)

Qualitative Criminology (QC)

"The goal of our qualitative study was to gain a phenomenological understanding of routes to recovery from problematic drug use. In-depth interviews and drug histories were collected from 50 former methamphetamine users recruited from a U.S. metropolitan suburb who identified as having had problematic use of this drug in the past. Transcripts of the audio-recorded interviews were coded for common themes regarding types of recovery strategies or tools employed on the route to recovery. The common strategies used in all routes for recovery from problematic methamphetamine use were social in nature and did not necessarily include the cessation of all …

Heith Copes & Mark R. Pogrebin (Eds.), Voices From Criminal Justice: Thinking And Reflecting On The System, Joshua B. Hill

Qualitative Criminology (QC)

"The introductory criminal justice “reader” is a difficult text to get right. The material should not be too advanced for the student (most likely a first-year undergraduate student) to understand, but also cannot oversimplify the topic and risk either insulting students or not conveying an appropriate sense of the complexity of the criminal justice system. Voices from Criminal Justice: Thinking and Reflecting on the System, a new compilation of readings published by Routledge and edited by Heith Copes and Mark Pogrebin, attempts to thread this needle in an interesting way by framing the book as a series of perspectives …

Examining The Death Penalty Insider Perspective: Capital Bench & Bar Interviews, Sherri Dioguardi

Qualitative Criminology (QC)

"This study conducted semi-structured interviews with 27 death penalty insiders (9 capital judges, 9 prosecutors and 9 defense attorneys) across three states. Prior research examined whether knowledge of capital punishment correlates with death penalty support (the Marshall Hypothesis). While prior research focused on opinions of laypeople, this study interviewed those with direct, hands-on experience to explore the knowledge-based, insider perspective. The majority (80%) of interviewee-respondents did not believe the death penalty is necessary in light of Life without the Possibility of Parole as an available sentencing option, and 62% did not support capital punishment. Qualitative data analysis reveals a wealth …

An Exploratory Examination Of A Prison Disciplinary Process: Assessing Staff And Prisoner’ Perceptions Of Fairness, Ann Marie Rocheleau

Qualitative Criminology (QC)

There has been scant research on how prison disciplinary processes work in comparison to the myriad of studies on individual, situational, and prison-level factors associated with prison misbehavior. This exploratory research delved into staff and prisoners’ perceptions of a prison system’s disciplinary process. Using in-depth interviews with 25 staff and 25 prisoners as well as direct observation of classification and disciplinary hearings, this research primarily focused on perceptions of fairness. It uncovered those features of the disciplinary process that prisoners and some staff assessed as problematic and unfair. These included: the nature, consistency, and investigation of disciplinary reports, the use …

Duran, Robert J., Gang Life In Two Cities: An Insider’S Journey, Robert Donald Weide

Qualitative Criminology (QC)

"In his newly published book, former gang member and probation officer Robert J. Duran provides both a compelling comparative ethnography of gang life in two middle American cities, Denver, Colorado and Ogden, Utah, as well as a needed critical analysis of both the historical and contemporary roles of colonial oppression and law enforcement practices and policies that have contributed to the formation and perpetuation of gang identities in the barrios of those cities. Although neither cites the other’s work, I think it is fair to cast Duran’s book as a counterpart to Michelle Alexander’s celebrated work The New Jim Crow …