Forensic Science and Technology Commons^™

Technique-Level Normalization For Cybersecurity Intelligence: An Empirical Evaluation Of Att&Ck Attribution From Hids Alerts Using Fine-Tuned Transformers And Metadata Re-Ranking, Emad Sherif

International Journal of Cybersecurity Intelligence & Cybercrime

Cybercrime investigations increasingly depend on the ability to interpret large volumes of automated security events. For organizations without dedicated security operations centres, a situation common among small and medium enterprises, the manual translation of raw alerts into structured threat intelligence represents a critical bottleneck that slows investigative triage and limits cross-case comparability. This paper evaluates an automated enrichment pipeline designed to address this bottleneck by mapping security events to standardised adversary behaviour labels drawn from the MITRE ATT&CK framework, supporting both operational response and cybercrime investigation workflows. We compare three pipeline configurations, a general-purpose encoder model, a cybersecurity domain-adapted variant, …

Viability Of Manually Passing Projectiles Through The Barrel Of A Firearm In Lieu Of Test Firing, Mara V. Mineo

Student Theses

Forensic examinations of discharged projectiles are made possible by the toolmarks and striations made by the barrel the projectiles pass through. Suspect barrels are attached to firearms and test fired to compare these toolmarks and striations with found evidence. However, physically damaged barrels could potentially be unable to produce exemplars. This study tests the viability of manually passing projectiles through stationary barrels as a meaningful and accurate means to produce acceptable exemplars that are able to be compared against recovered evidence. A total of 18 projectiles were manually passed between two distinct Glock handgun barrels and viewed under a comparison …

Effect Of Food Resource, Preservation Method, And Preservation Duration On Larval Size Of Forensically Important Fly Species (Order: Diptera), John Zukowski

Student Theses

Forensic entomology is a vital discipline that can aid in the proceedings of criminal cases. Larval age and development are important aspects to consider when utilizing blow flies (Family: Calliphoridae) for estimates pertaining to the initial time of colonization (TOC), which contributes to postmortem interval (PMI) estimations. Thus, it is important to understand the factors that influence larval size and development, since larval size is commonly used as a proxy for age. Larvae of three species of flies, Lucilia sericata (Meigen), Calliphora vicina (Robineau-Desvoidy), and Phormia regina (Meigen), were reared on five different food resources. Specimens of L. sericata and …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

A Qualitative And Quantitative Comparative Analysis Of Ballistic Bone Trauma From Frangible And Full Metal Jacket Projectiles, Hajar S. Hassan

Student Theses

Ballistic bone research is essential as 90% of homicides with the use of a firearm include injuries to bone. Forensic anthropologists use ballistic bone trauma to gather details and reconstruct an event, but ballistic bone trauma depends on many intrinsic and extrinsic factors. These factors include the type of bone, the type of firearm, and the type of ammunition. As new ammunition and firearms emerge, the literature on ballistic bone trauma remains limited. This novel study compares the bone trauma from the most common projectile, the full metal jacket, to a frangible projectile which is made to break upon impact. …

The Accuracy Of Free Ai Generated Image Detection Tools Compared To Human Judgment, Rachel Tsai

Themis: Research Journal of Justice Studies and Forensic Science

The rise of artificial intelligence has led to a surge in AI-generated images, creating new obstacles for forensic investigations. As synthetic images become increasingly realistic, distinguishing them from authentic content becomes more difficult. In forensic investigations, it is essential to prove the authenticity and integrity of digital evidence to maintain admissibility in court. Currently, there are various AI detection tools on the market; however, their accuracy and reliability remain uncertain. This study evaluates the effectiveness of several free AI-generated image-detection tools compared with judgments from unaided college students or recent graduates. Participants were asked to analyze a set of 30 …

The Necessity Of Human Taphonomy Facilities, Mia Frame

Themis: Research Journal of Justice Studies and Forensic Science

This review explores the question of whether human taphonomy facilities (HTFs) are necessary for forensic science research. These facilities are used for multiple facets of research including postmortem interval (PMI) estimation or time since death, entomology, taphonomy, and the study of volatile organic compounds. The use of human analogues like pigs and rabbits will also be addressed to show why taphonomic research on human remains must be done. It is important to look at the physical and logistical limitations of these facilities, as well as ethical limitations including religious beliefs and public perception. This article will conclude by examining future …

The Effects Of Pesticide-Treated Pork Meat On Insect Colonization: Implications For Postmortem Interval Estimation In Forensic Investigations, Alejandra Veja

Themis: Research Journal of Justice Studies and Forensic Science

Forensic entomologists estimate the postmortem interval (PMI) by analyzing insect colonization patterns on remains. Colonization can be influenced by factors such as state of decomposition, environment type, weather, and chemical exposure. Household products and pesticides may be used to conceal remains by delaying decomposition and preventing insect activity. Despite this, their impact on PMI estimation remains unclear. This study examined the effects of 98.11% DEET, 20% picaridin, and 20% IR3535 on insect colonization, compared to a control. Twelve boneless pork chops were placed outdoors in a suburban setting and monitored twice daily at 12-hour intervals. Results showed that high concentrations …

Diagnosing Mushroom Toxicities, Eetu Mäkinen

Themis: Research Journal of Justice Studies and Forensic Science

Although mushroom poisonings or “mycetisms” occur more frequently than is commonly recognized, they are often misdiagnosed due to their relative rarity, diverse clinical presentations, and the broad chemical variety of the toxins involved. More than a hundred different mushroom-derived toxins have been identified to cause at least 14 different poisoning syndromes or “toxidromes”, several of which can result in death through means such as organ failure. Understanding the toxicology of these mushroom toxins is essential for diagnosis in both clinical and forensic settings. Modern analytical techniques, such as liquid-chromatography–tandem mass spectrometry (LC–MS/MS) and enzyme-linked immunosorbent assays (ELISA), have improved the …

Development Of Latent Prints On Glass After A Fire, Meg Ross

Themis: Research Journal of Justice Studies and Forensic Science

In the United States, there is no standard procedure to collect fingerprint evidence from a fire. The goal of this research is to determine if fingerprints can survive a fire and can be developed using three different techniques. In previous research studies, some fingerprints were able to be recovered. In Australia, they found fingerprints were recoverable at 300℃ and 450℃ after using a cremation oven. However, O’Hagan (2018) claims that fingerprints start to degrade after 100℃ as fingerprints are made of 98% water. For this project, six bottles consisting of 30 fingerprints were put in a fire, with temperatures reading …

Detection Of Blood On Glazed Ceramic Tiles, Alexis Puente

Themis: Research Journal of Justice Studies and Forensic Science

This experiment tested how different bleach dilutions effectively remove blood from floor tiles and how they might affect the Kastle-Meyer (KM) presumptive blood test. Matte Calacatta 12 in. x 12 in. glazed ceramic tiles were used. Glazed tiles are considered non-porous on the surface but the ceramic body contains pores that can retain blood; this retained blood can be detected by the KM test. The bleach dilutions used to clean the tiles were 0% (water), 25%, 50%, 75%, and 100%. Trial 1 tiles were cleaned during the day while Trials 2-5 were cleaned at night. After the tiles were dried, …

Differentiation Of Human Pubic And Underarm Hair Using Atr-Ftir Spectroscopy, Kris Weller

Themis: Research Journal of Justice Studies and Forensic Science

This study investigates whether ATR-FTIR can differentiate human pubic and underarm hairs, either on its own or as a supplement to morphological examination via light microscopy. Determining somatic origin may provide useful context in criminal cases, especially in sexual assault cases. The morphological similarity between pubic and underarm hair means that these somatic regions are particularly in need of a more quantitative method of differentiation than the current qualitative approach. The ATR-FTIR spectra of pubic and underarm hairs collected from nine volunteers were not visually differentiable. Six peaks in the fingerprint region shared by all the spectra were selected and …

At The Crossroads Of Traditional And Nuclear Forensics: Decontaminating Radiologically Contaminated Dna Evidence Using Magnetic Beads, Rin Nyx Ruby

UNLV Theses, Dissertations, Professional Papers, and Capstones

Known for its impressive discriminatory power, deoxyribonucleic acid (DNA) fingerprinting stands as the “gold standard” of forensic investigation. However, complications arise when such evidence is contaminated with radioactive material. Though biological samples exposed to ionizing radiation can still yield comprehensive DNA profiles, most forensic laboratories lack the facilities which meet the safety and security requirements necessary for handling radioactive material. While nuclear facilities can decontaminate samples prior to forensic analysis, conventional methods for radiological decontamination – such as mechanical cleaning and chemical washes – may degrade the quality of the forensic evidence. The purpose of this study is to evaluate …

Liquid Fire Accelerants' Effect On Blood Detectability, Genniltza Ramirez

Themis: Research Journal of Justice Studies and Forensic Science

Five liquid fire accelerants were studied in their effects on blood detection in attempts to yield presumptive accelerant indicators to benefit fire scene investigators. The experiment involved burning different accelerant types via a 1:1 pig blood and accelerant ratio on cloth squares in trials of three, and then presumptively testing for blood using luminol. Luminol was selected for its sensitivity, subjectivity, and previous use in arson fire and thermal studies. For this study, accelerants were determined to have positive presumptive blood detection if detectable by camera for documentation. Presumptive blood detection of the accelerants resulted in: paint thinner with detection …

From Prairie To Practice: Forensic Taphonomy, Ethics, And Regional Ecology In Southeastern Nebraska, Jessica F. L. Gammage

Department of Anthropology: Theses and Student Research

Forensic taphonomy examines the postmortem processes that affect human remains within specific environmental contexts and plays a critical role in medicolegal death investigation. Despite significant advances in decomposition research, experimental studies remain geographically and environmentally uneven, limiting the transferability of postmortem interval (PMI) estimation methods across regions. The Central Great Plains are underrepresented in forensic taphonomic research despite its distinct ecological and geomorphological characteristics.

This thesis evaluates southeastern Nebraska as a specific regional setting for forensic taphonomic research by integrating ecological, pedological, and geomorphological data with current forensic literature. Tallgrass prairie vegetation, loess-derived soils, seasonal moisture variability, and dynamic fluvial …

Understanding Roma Oppression In Europe Through Humantarian Forensic Analysis, Christal L. Quinn

Department of Anthropology: Theses and Student Research

This thesis examines the marginalization of Roma people in Europe, and how humanitarian forensic practices may help Roma communities in their quest for justice and recognition. The study draws exclusively on secondary information to examine the social, political, and legal issues affecting the Roma communities, who have endured centuries of institutional discrimination, marginalization, and violence. This thesis identifies ways in which systematic oppression continues to limit Roma communities’ access to education, housing, healthcare, and legal protection through a review of relevant literature and applicable theoretical frameworks. The study also examines the relevance of forensic science, particularly its humanitarian applications, in …

Rehumanizing Anatomized Individuals: Using Osteobiographies As A Step Towards Reparative Justice, Lillie C. Turpin

Department of Anthropology: Theses and Student Research

In 1985, India banned the export of human remains. This ended the major trade route for primarily US and European anatomical supply companies. Until this point, companies like Carolina Biological Supply exploited and erased vulnerable people's identities, molding them into anonymous anatomical specimens. This study investigates the life and postmortem history of twenty-five individuals, previously used as anatomical specimens, housed at the University of Nebraska–Lincoln. Using an osteobiographical approach, this research reconstructs aspects of these individuals' lived experiences and examines how anatomical preparation practices reflect structural violence and apathy.

Skeletal analysis of twenty-five individuals revealed a range of biological profiles, …

Non-Destructive Automated Classification Of Human And Large Mammal Long Bone Fragments: A Deep Learning Approach Using Micro-Ct Histomorphology And Grad-Cam Interpretation, Kathleen Marie Kelley

Department of Anthropology: Theses and Student Research

This study explores the development and validation of an automated, deep learning system designed to differentiate human from large mammal long bone fragments using micro-CT imagery. A comprehensive dataset of cross-sectional µCT images was assembled from human and animal skeletal material processed at the DPAA, Nebraska. A convolutional neural network (CNN) based on a ResNet-18 architecture, utilizing transfer learning from ImageNet weights, was trained to classify µCT images as human or animal. The model achieved a mean classification accuracy of 89.85% (± 8.27%) across five sample-level cross-validation folds, with a sensitivity of 96.21% and a 95% bootstrap confidence interval of …

Decomposition Study Using Pigs In Southeastern Nebraska During The Fall And Winter Seasons, Ryan Bodine

Department of Anthropology: Theses and Student Research

When an individual is found deceased, one of the tools used in the identification process is estimating the post-mortem interval (PMI). This estimate is used to determine how long an individual has been deceased once their remains are found. To estimate an accurate PMI, knowing how decomposition is affected by external factors is key. The transition period from fall to winter in southeastern Nebraska consists of fluctuating temperatures as the seasons transfer from fall to winter. This thesis investigates how decomposition is affected during this transition period while also looking at two different environments that are common in Nebraska, prairies …

Exploring The Biocultural Profile Of The Undocumented Populations Of The Sonoran Corridor: A Skeletal Assessment Of The Prevention Through Deterrence Strategy, Mary A. Vaughn

Department of Anthropology: Theses and Student Research

Over the last thirty years the mortality rate of the undocumented population at the US-Mexico border has risen, requiring methods distinguishing US-born individuals from immigrants to improve the likelihood of identification and repatriation through foreign consulates. Forensic anthropologists with the Pima County Office of the Medical Examiner (PCOME) have advocated for the use of the biocultural profile, combining the biological profile with factors including oral health, osteological stress, and personal effects. The biocultural profile serves two purposes, functioning both as a tool for identification and with which to document structural inequality within communities of origin.

This study examines changes in …

Program And Proceedings, The Nebraska Academy Of Sciences 1880–2026: 146th Anniversary Year, One Hundred-Thirty-Sixth Annual Meeting

Nebraska Academy of Sciences: Programs and Proceedings

Program and abstracts of the proceedings for the Nebraska Academy of Sciences 136th annual meeting, 2025

Sessions

Aeronautics and Space Science

Anthropology

Biological and Medical Sciences

Earth Sciences

Ecology, Sustainability, and Environmental Science

Physics and Engineering

General Poster Session

2026 Maiben Lecture: Shifting Extremes: Understanding Nebraska’s Changing Climate and Preparing for What Lies Ahead, Deborah Bathke

2026 Friends of Science Awards: Julie Shaffer and Irina Filina

2026 C. Bertrand and Marian Othmer Schultz Colleaguate Schoalrship Award: Piper Ryschon and Bryce Reeson

In Memoriam: Paul Royster

Applications Of Suas Thermal Imaging And Lidar At Letort Spring Garden Preserve: An Independent Study, Kelsey Wardell

Harrisburg University Other Works

No abstract provided.

The Role Of Dna Exoneration In The Bloodsworth Case, John T. Brasfield

SACAD: Scholarly Activities

In the Kirk Bloodsworth case, a man was falsely convicted for the rape and murder of Dawn Hamilton. He spent eight years in prison after being convicted through witness testimony, where he learned about DNA profiling. After submitting a request to check his DNA against the DNA left at the scene, he was exonerated. Later, the DNA left at the scene was checked against a database and got a hit on a convicted rapist who had been charged shortly after Mr. Bloodsworth. If there had been the same access to DNA technology during the trial or if they had listened …

Ai's Double Edged Sword: Fighting Against Synthetic Csam, Shekhinah Adra Green

Cybersecurity Undergraduate Research Showcase

The rapid advancements in generative artificial intelligence has introduced new challenges in the production and distribution of synthetic child sexual abuse material (CSAM). AI has the capabilities of creating highly realistic imagery and videos, which  raises serious legal and ethical concerns, increasing the risk of harm, exploitation, and revictimization.

This paper discusses the legal improvements needed in order to lower the change of legal loopholes, how digital forensic analyst use advanced tools to identify and investigate synthetic material, and different methods to start the reduction of synthetic CSAM.

Romance Scam Reporting And Support: Help-Seeking Timing, Trust, And Escalation, Ld Herrera

Research & Publications

Built on social engineering and identity deception, romance scams often create financial loss and distress. For victims, it can be difficult to know where to go, what information is needed, and what outcomes are realistic. This paper reports results from an anonymous survey of people who were targeted by or experienced a romance scam (completed surveys: n=386), focusing on (1) when and whether victims first reach out for help, (2) perceived difficulty and confidence in navigating support, (3) how trust relates to expectations of assistance, and (4) how loss severity relates to transfer-method complexity. When help was sought, it was …

The Psychology Behind Ai-Generated Phishing And Social Engineering Attacks, A’Shya Reynolds

School of Cybersecurity Master's Level Projects and Papers

Cybercrime has evolved significantly with the integration of artificial intelligence (AI), transforming traditional phishing and social engineering attacks into highly sophisticated and personalized threats. While early phishing attempts relied on generic messaging and low success rates, modern AI-driven attacks leverage advanced data analytics, natural language processing, and behavioral prediction to manipulate victims more effectively.

This research examines how cybercriminals utilize AI to enhance psychological manipulation techniques in phishing and social engineering attacks, increasing victim susceptibility. Drawing from interdisciplinary literature in cybersecurity and psychology, this study explores key psychological mechanisms, including cognitive biases, emotional triggers, and decision-making processes that influence victim …

Confession Contamination And Dna Exonerations, 1989-2025, Brandon L. Garrett

Faculty Scholarship

No abstract provided.

Muzzle-To-Target Distance Determination Based On Lead (Pb) Concentration Of Gunshot Residue (Gsr) Using Icp-Oes, Abry Lloyd

Master of Science in Forensic Science Directed Research Projects

The determination of muzzle-to-target distance remains a significant challenge in forensic casework. Current approaches to gunshot residue (GSR) analysis rely primarily on colorimetric testing to indicate chemical components present and subjective interpretation, limiting specificity and contributing to ongoing scrutiny within the field. This study investigates a quantitative method for estimating shooting distance based on the concentration of lead present in GSR samples (w/w%) with the utilization of inductively coupled plasma optical emission spectrometry (ICP-OES). Test firings were conducted using caliber 22 Long Rifle, 9mm Luger, and 40 S&W semiautomatic handguns at defined distances to evaluate the relationship between lead concentration …

Differentiation Of Cell Populations In Saliva-Skin Mixtures Using Autofluorescence Profiling, Kara Fairfax

Master of Science in Forensic Science Directed Research Projects

While DNA profiling of sexual assault evidence can identify biological contributors, determining the tissue source of recovered profiles remains a significant challenge, particularly in cases of suspected oral assault involving mixtures of epithelial cells. The initial goal of this study was to identify non-genetic signatures for differentiating two types of epithelial cells relevant to oral assaults, saliva epithelial cells and epidermal skin cells. To develop tissue-specific signatures, reference cell populations from saliva and epidermal skin surfaces were collected from 20 donors and analyzed using full spectrum flow cytometry.

Results from single-source reference samples showed that saliva-derived particle populations exhibited higher …