Legal Studies Commons^™

Administering A Victim Impact Curriculum To Inmates: A Multi-Site Replication, Christopher M. Sedelmaier, Mario Thomas Gaboury

Criminal Justice Faculty Publications

While restorative justice has been the topic of much research, a specific type of program included in restorative justice, Impact of Crime on Victims programs, has not been widely studied or assessed for effectiveness. This study examines Impact of Crime (IOC) on Victims Curriculum Development Programs. Offenders from programs in California, Ohio, Tennessee, and Virginia were participants in this research. A four state evaluation methodology was developed in order to assess the effectiveness of these programs in educating offenders about victims’ right and victim facts, as well as increasing their sensitivity to victims’ difficulties. The findings in this evaluation lend …

Network And Device Forensic Analysis Of Android Social-Messaging Applications, Daniel Walnycky, Ibrahim Baggili, Andrew Marrington, Jason Moore, Frank Breitinger

Electrical & Computer Engineering and Computer Science Faculty Publications

In this research we forensically acquire and analyze the device-stored data and network traffic of 20 popular instant messaging applications for Android. We were able to reconstruct some or the entire message content from 16 of the 20 applications tested, which reflects poorly on the security and privacy measures employed by these applications but may be construed positively for evidence collection purposes by digital forensic practitioners. This work shows which features of these instant messaging applications leave evidentiary traces allowing for suspect data to be reconstructed or partially reconstructed, and whether network forensics or device forensics permits the reconstruction of …

An Empirical Comparison Of Widely Adopted Hash Functions In Digital Forensics: Does The Programming Language And Operating System Make A Difference?, Satyendra Gurjar, Ibrahim Baggili, Frank Breitinger, Alice E. Fischer

Electrical & Computer Engineering and Computer Science Faculty Publications

Hash functions are widespread in computer sciences and have a wide range of applications such as ensuring integrity in cryptographic protocols, structuring database entries (hash tables) or identifying known files in forensic investigations. Besides their cryptographic requirements, a fundamental property of hash functions is efficient and easy computation which is especially important in digital forensics due to the large amount of data that needs to be processed when working on cases. In this paper, we correlate the runtime efficiency of common hashing algorithms (MD5, SHA-family) and their implementation. Our empirical comparison focuses on C-OpenSSL, Python, Ruby, Java on Windows and …

Crime And Psychiatric Disorders Among Youth In The Us Population: An Analysis Of The National Comorbidity Survey-Adolescent Supplement, Kendell L. Coker, Philip H. Smith, Alexander Westphal, Howard V. Zonana, Sherry A. Mckee

Psychology Faculty Publications

Objective Current knowledge regarding psychiatric disorders and crime in youth is limited to juvenile justice and community samples. This study examined relationships between psychiatric disorders and self-reported crime involvement in a sample of youth representative of the US population. Method The National Comorbidity Survey–Adolescent Supplement (N = 10,123; ages 13–17 years; 2001–2004) was used to examine the relationship between lifetime DSM-IV–based diagnoses, reported crime (property, violent, other), and arrest history. Logistic regression compared the odds of reported crime involvement with specific psychiatric disorders to those without any diagnoses, and examined the odds of crime by psychiatric comorbidity. Results Prevalence of …

Testing The Forensic Soundness Of Forensic Examination Environments On Bootable Media, Ahmed F.A.L. Mohamed, Andrew Marrington, Farkhund Iqbal, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

In this work we experimentally examine the forensic soundness of the use of forensic bootable CD/DVDs as forensic examination environments. Several Linux distributions with bootable CD/DVDs which are marketed as forensic examination environments are used to perform a forensic analysis of a captured computer system. Before and after the bootable CD/DVD examination, the computer system's hard disk is removed and a forensic image acquired by a second system using a hardware write blocker. The images acquired before and after the bootable CD/DVD examination are hashed and the hash values compared. Where the hash values are inconsistent, a differential analysis is …

Preliminary Forensic Analysis Of The Xbox One, Jason Moore, Ibrahim Baggili, Andrew Marrington, Armindo Rodrigues

Electrical & Computer Engineering and Computer Science Faculty Publications

Video game consoles can no longer be viewed as just gaming consoles but rather as full multimedia machines, capable of desktop computer-like performance. The past has shown that game consoles have been used in criminal activities such as extortion, identity theft, and child pornography, but with their ever-increasing capabilities, the likelihood of the expansion of criminal activities conducted on or over the consoles increases. This research aimed to take the initial step of understanding the Xbox One, the most powerful Microsoft console to date. We report the outcome of conducting a forensic examination of the Xbox One, and we provide …

Life (Logical Ios Forensics Examiner): An Open Source Ios Backup Forensics Examination Tool, Ibrahim Baggili, Shadi Al Awawdeh, Jason Moore

Electrical & Computer Engineering and Computer Science Faculty Publications

In this paper, we present LiFE (Logical iOS Forensics Examiner), an open source iOS backup forensics examination tool. This tool helps both researchers and practitioners alike in both understanding the backup structures of iOS devices and forensically examining iOS backups. The tool is currently capable of parsing device information, call history, voice messages, GPS locations, conversations, notes, images, address books, calendar entries, SMS messages, Aux locations, facebook data and e-mails. The tool consists of both a manual interface (where the user is able to manually examine the backup structures) and an automated examination interface (where the tool pulls out evidence …

On The Database Lookup Problem Of Approximate Matching, Frank Breitinger, Harald Baier, Douglas White

Electrical & Computer Engineering and Computer Science Faculty Publications

Investigating seized devices within digital forensics gets more and more difficult due to the increasing amount of data. Hence, a common procedure uses automated file identification which reduces the amount of data an investigator has to look at by hand. Besides identifying exact duplicates, which is mostly solved using cryptographic hash functions, it is also helpful to detect similar data by applying approximate matching.

Let x denote the number of digests in a database, then the lookup for a single similarity digest has the complexity of O(x). In other words, the digest has to be compared against …

An Experimental Study To Quantify Error Rates Resulting From Measurement Deviation In Area Of Origin Reconstructions Of Blunt Force Impact Patterns, Mark Davison, Timothy Palmbach

Forensic Science Publications

The intent of this study was to attempt to quantify error associated with the measurements required in area of origin reconstructions resulting from the analysis of blunt force impact patterns. Mathematical tables were constructed in order to examine trends associated with changing width and length ratios and the influence of impact angle change and area of convergence deviations. The analysis of the trends enabled informed stain selection, mitigating potential error. The analysis of the influence of stain measurement error and gamma angle error was conducted by reconstructing experimentally created blunt force impact patterns using the Tangent Method, comparing the resulting …

Development Of A Quantitative Real-Time Polymerase Chain Reaction (Rt-Pcr) Assay For Plant Species, Kayla Curtis, Heather Miller Coyle

Forensic Science Publications

In order to facilitate optimal plant DNA quantitation and identification, an assay has been developed that uses generic plant PCR primers that amplify a region in the chloroplast genome of plant samples. The assay uses the SYBR green detection dye to detect the PCR product with a universal PCR primer set to the large subunit of ribulose bisphosphate carboxylase, rbcL, but can be used with any of the universal barcode primers for land plants (rbcL, matK, trnH, psbA). Standard dilutions of control wheat DNA of varying concentrations were tested to create a standard curve. Several plant DNA extractions of different …

Impact Of Tumour Epithelial Subtype On Circulating Micrornas In Breast Cancer Patients, Peadar S. Waters, Roisin M. Dwyer, Cathy Brougham, Claire L. Glynn, Deidre Wall, Peter Hyland, Maria Duignan, Mark Mcloughlin, John Newell, Michael J. Kerin

Forensic Science Publications

While a range of miRNAs have been shown to be dysregulated in the circulation of patients with breast cancer, little is known about the relationship between circulating levels and tumour characteristics. The aim of this study was to analyse alterations in circulating miRNA expression during tumour progression in a murine model of breast cancer, and to detemine the clinical relevance of identified miRNAs at both tissue and circulating level in patient samples. Athymic nude mice received a subcutaneous or mammary fat pad injection of MDA-MB-231 cells. Blood sampling was performed at weeks 1, 3 and 6 following tumour induction, and …

Utilizing Dna Analysis To Combat The World Wide Plague Of Present Day Slavery – Trafficking In Persons, Timothy Palmbach, Jeffrey Bloom, Emily Hoynes, Dragan Primorac, Mario Thomas Gaboury

Forensic Science Publications

A study was conducted to determine if modern forensic DNA typing methods can be properly employed throughout the world with a final goal of increasing arrests, prosecutions, and convictions of perpetrators of modern day trafficking in persons while concurrently reducing the burden of victim testimony in legal proceedings. Without interruption of investigations, collection of samples containing DNA was conducted in a variety of settings. Evidentiary samples were analyzed on the ANDE Rapid DNA system. Many of the collected swabs yielded informative short tandem repeat profiles with Rapid DNA technology.

Terrorism, International., Jibey Asthappan

Criminal Justice Faculty Publications

International terrorism is a relatively new phenomenon considering the age of terrorism. Terrorism has been used for over 2,000 years, but international terrorism as we know it today was made possible by technological advances. This entry begins by reviewing pivotal historical events that led to terrorism's use, as well as the underlying reasons for terrorism today. The article then discusses the influence of political stability and culture on international terrorism. Finally, a brief discussion of counter-terrorism strategies highlights the means by which terrorism is prevented.

Unmasking Cancer As A Consequence Of Human Trafficking: A Multidisciplinary Challenge, Barbara Moynihan, Katherine Olive

Forensic Science Publications

This article will focus on the development of cancer as a potential consequence of human trafficking. Various subtle sequelae of trafficking, such as the insidious development of cancer, may not be seen until well after the victim has been freed. There are a myriad of factors that contribute to missed or inadequate health care for victims and survivors of human trafficking. These health care needs (both medical as well as mental health) may be overlooked until many months or years post-trafficking. We will address the risk factors consistent with human trafficking that should be considered by health care professionals who …

An Efficient Similarity Digests Database Lookup -- A Logarithmic Divide And Conquer Approach, Frank Breitinger, Christian Rathgeb, Harald Baier

Electrical & Computer Engineering and Computer Science Faculty Publications

Investigating seized devices within digital forensics represents a challenging task due to the increasing amount of data. Common procedures utilize automated file identification, which reduces the amount of data an investigator has to examine manually. In the past years the research field of approximate matching arises to detect similar data. However, if n denotes the number of similarity digests in a database, then the lookup for a single similarity digest is of complexity of O(n). This paper presents a concept to extend existing approximate matching algorithms, which reduces the lookup complexity from O(n) to O(log(n)). Our proposed approach is based …

File Detection On Network Traffic Using Approximate Matching, Frank Breitinger, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

In recent years, Internet technologies changed enormously and allow faster Internet connections, higher data rates and mobile usage. Hence, it is possible to send huge amounts of data / files easily which is often used by insiders or attackers to steal intellectual property. As a consequence, data leakage prevention systems (DLPS) have been developed which analyze network traffic and alert in case of a data leak. Although the overall concepts of the detection techniques are known, the systems are mostly closed and commercial. Within this paper we present a new technique for network traffic analysis based on approximate matching (a.k.a …

Quantifying Relevance Of Mobile Digital Evidence As They Relate To Case Types: A Survey And A Guide For Best Practices, Shahzad Saleem, Ibrahim Baggili, Oliver Popov

Electrical & Computer Engineering and Computer Science Faculty Publications

In this work, a survey was conducted to help quantify the relevance of nineteen types of evidence (such as SMS) to seven types of digital investigations associated with mobile devices (MD) (such as child pornography). 97 % of the respondents agreed that every type of digital evidence has a different level of relevance to further or solve a particular investigation. From 55 serious participants, a data set of 5,772 responses regarding the relevance of nineteen types of digital evidence for all the seven types of digital investigations was obtained. The results showed that (i) SMS belongs to the most relevant …

Automated Evaluation Of Approximate Matching Algorithms On Real Data, Frank Breitinger, Vassil Roussev

Electrical & Computer Engineering and Computer Science Faculty Publications

Bytewise approximate matching is a relatively new area within digital forensics, but its importance is growing quickly as practitioners are looking for fast methods to screen and analyze the increasing amounts of data in forensic investigations. The essential idea is to complement the use of cryptographic hash functions to detect data objects with bytewise identical representation with the capability to find objects with bytewise similarrepresentations.

Unlike cryptographic hash functions, which have been studied and tested for a long time, approximate matching ones are still in their early development stages and evaluation methodology is still evolving. Broadly, prior approaches have …

Using The Massachusetts Youth Screening Instrument–Version 2 On A Community Sample Of African American And Latino/A Juvenile Offenders To Identify Mental Health And Substance Abuse Treatment Needs, Kendell Coker, Jamie Wernsman, Uduakobong N. Ikpe, Jeannie S. Brooks, Lynn Bushell, Barbara Kahn

Psychology Faculty Publications

The Massachusetts Youth Screening Instrument-Version 2 (MAYSI-2) is a brief screening tool used to identify youth in the juvenile justice system that are at-risk for mental health related difficulties. The MAYSI-2 was administered to 5,205 African American and Latino/a youth throughout Chicago, Illinois who were on probation and residing in the community. This study investigated differences (i.e., legal status, gender, age, race/ethnicity) in reporting of mental health symptoms and substance use on the MAYSI-2. Females scored above the clinical cutoffs more frequently than males and there were few differences found between diverted and adjudicated youth. Age comparisons revealed mixed results. …

Ground Penetrating Radar Use In Three Contrasting Soil Textures In Southern Ontario, Amanda C. Lowe, David V. Beresford, David O. Carter, Franco Gaspari, R. Christopher O'Brien, Shari L. Forbes

Forensic Science Publications

Ground penetrating radar (GPR) is a non-invasive, geophysical tool that can be used for the identification of clandestine graves. GPR operates by detecting density differences in soil by the transmission of high frequency electromagnetic waves from an antenna. Domestic pig (Sus scrofa domesticus) carcasses were clothed in 100% cotton t-shirts and 50% cotton/50% polyester briefs, and buried at a consistent depth at three field sites of contrasting soil texture (silty clay loam, fine sand and fine sandy loam) in southern Ontario. GPR was used to detect and monitor the graves for a period of 14 months post-burial. Analysis of collected …

Isolation Of Secreted Micrornas (Mirnas) From Cell-Conditioned Media, Claire L. Glynn, Sonja Khan, Michael J. Kerin, Roisin M. Dwyer

Forensic Science Publications

MicroRNAs (miRNAs) have been found to be stable in the circulation of cancer patients raising their potential as circulating biomarkers of disease. The specific source and role, however, of miRNAs in the circulation is unknown and requires elucidation to determine their true potential. In this study, along with primary tissue explants and primary stromal cells, three breast cancer cell lines were employed, including T47D, MDA-MB-231 and SK-BR-3. Tissue explants were harvested in theatre, with informed patient consent, and included tumour, tumour associated normal, and diseased lymph node samples. Cell-conditioned media containing all factors secreted by the cells were harvested. MiRNAs …

Disentangling The Effects Of Violent Victimization, Violent Behavior, And Gun Carrying For Minority Inner-City Youth Living In Extreme Poverty, Richard Spano, John Bolland

Criminal Justice Faculty Publications

Two waves of longitudinal data were used to examine the sequencing between violent victimization, violent behavior, and gun carrying in a high-poverty sample of African American youth. Multivariate logistic regression results indicated that violent victimization T1 and violent behavior T1 increased the likelihood of initiation of gun carrying T2 when examined separately (by 132% and 91%, respectively). However, only violent victimization T1 was a significant predictor of initiation of gun carrying T2 after controlling for violent behavior T1. More nuanced analyses uncovered no significant difference in the likelihood of initiating gun carrying when comparing offensive versus defensive gun carriers. The …

The Contemporary Face Of Transnational Criminal Organizations And The Threat They Pose To U.S. National Interest: A Global Perspective., Vesna Markovic

Criminal Justice Faculty Publications

Traditional organized crime groups have consistently posed issues for la w enforcement; however, the contemporary TCOs present an even greater security risk and threat. TCOs thrive in countries with a weak rule of law and present a great threat to regional security in many parts of the world. Bribery and corruption employed by these groups further serve to destabilize already weak governments. These TCOs also present a major threat to U.S. and world financial systems by exploiting legitimate commerce, and in some cases creating parallel markets (“Transnational Organized,” 2011) . Finally, one of the most significant threats posed by contemporary …

Accountability And Evidence-Based Approaches: Theory And Research For Juvenile Justice, David Myers

Criminal Justice Faculty Publications

As part of the ‘accountability movement’ in juvenile justice, policy-makers, funding agencies, and the general public have called for greater accountability from agencies and organizations involved with youthful offenders. Within this context, performance measurement and monitoring, and use of evidence-based programs and practices, have emerged as recommended aspects of juvenile justice system operations nationwide. Little is known empirically, however, about the actual performance of juvenile justice systems or the real changes brought by contemporary reforms, and theory and research on the implementation and sustainability of evidence-based approaches have been slow to emerge. This paper will review the key aspects of …

Forensic Analysis Of Social Networking Applications On Mobile Devices, Noora Al Mutawa, Ibrahim Baggili, Andrew Marrington

Electrical & Computer Engineering and Computer Science Faculty Publications

The increased use of social networking applications on smartphones makes these devices a goldmine for forensic investigators. Potential evidence can be held on these devices and recovered with the right tools and examination methods. This paper focuses on conducting forensic analyses on three widely used social networking applications on smartphones: Facebook, Twitter, and MySpace. The tests were conducted on three popular smartphones: BlackBerrys, iPhones, and Android phones. The tests consisted of installing the social networking applications on each device, conducting common user activities through each application, acquiring a forensically sound logical image of each device, and performing manual forensic analysis …

Ipad2 Logical Acquisition: Automated Or Manual Examination?, Somaya Ali, Sumaya Alhosani, Farah Alzarooni, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

Due to their usage increase worldwide, iPads are on the path of becoming key sources of digital evidence in criminal investigations. This research investigated the logical backup acquisition and examination of the iPad2 device using the Apple iTunes backup utility while manually examining the backup data (manual examination) and automatically parsing the backup data (Lantern software-automated examination).The results indicate that a manual examination of the logical backup structure from iTunes reveals more digital evidence, especially if installed application data is required for an investigation. However, the researchers note that if a quick triage is needed of an iOS device, then …

Structural Determinants Of Homicide: The Big Three, Maria Tcherni

Criminal Justice Faculty Publications

Building upon and expanding the previous research into structural determinants of homicide, particularly the work of Land, McCall and Cohen (1990), the current paper uses county-level data to disentangle three major influences on homicide rates: poverty, racial composition, and the disruption of family structure. Theoretical foundations of these influences are laid out, and the effects of the three factors on homicide rates are tested at two time periods as far removed from one another as possible: 1950-1960 and 1995-2005. All major variables typically used in homicide research are included as controls. The results of analyses show that the effects of …

Substance Use Behavior Among Early-Adolescent Asian American Girls: The Impact Of Psychological And Family Factors, Lin Fang, Kevin Barnes-Ceeney, Steven Schinke

Criminal Justice Faculty Publications

Confronting developmental tasks and challenges associated with bridging two different cultures, Asian American adolescent girls face increasing risks for substance use. Identifying risk and protective factors in this population is essential, particularly when those factors can inform preventive programs. Guided by family interaction theory, the present cross-sectional study explored the associations of psychological and familial factors with use of alcohol, prescription drugs, and other drugs among early-adolescent Asian American girls. Between August 2007 and March 2008, 135 pairs of Asian American girls (mean age 13.21 years, SD = 0.90) and their mothers (mean age 39.86 years, SD = 6.99) were …

Substance Use Among Asian American Adolescents: Perceptions Of Use And Preferences For Prevention Programming, Lin Fang, Kevin Barnes-Ceeney, Rebecca A. Lee, John Tao

Criminal Justice Faculty Publications

Rarely has substance use prevention programming targeted Asian-American adolescents. Using a focus group methodology, we explored perceptions of substance use and preferences for prevention programming among 31 Asian-American adolescents in New York City. Participants considered substance use common in the community. Factors contributing to substance use among Asian-American adolescents (e.g., peer pressure, pressure to achieve, family factors, and community influence) were identified, and the need for prevention programs tailored for the Asian-American community was highlighted. Participants discussed preferred program content, delivery settings, and recruitment and retention strategies. Despite the favorable attitude for family-based prevention programming, participants raised potential issues concerning …

Field Testing Of Collection Cards For Cannabis Sativa Samples With A Single Hexanucleotide Dna Marker, Lindsey Allgeier, John Hemenway, Nicholas Shirley, Tommy Lanier, Heather Miller Coyle

Forensic Science Publications

Abstract:  The validity and feasibility of using DNA collection cards in the field for preservation and analysis of Cannabis sativa genotypes were investigated using a highly specific hexanucleotide marker. Collection cards were submitted to the National Marijuana Initiative, which selectively trained and managed the collection of specific types of samples from a variety of participating agencies. Samples collected at seizure sites included fresh marijuana leaf samples, dried “dispensary” samples, U.S. border seizures, and hashish. Using a standardized PCR kit with custom-labeled oligonucleotide primers specific to marijuana, collection cards produced eight genotypes and 13 different alleles, extremely low baselines, and no …