Forensic Science and Technology Commons^™

Technique-Level Normalization For Cybersecurity Intelligence: An Empirical Evaluation Of Att&Ck Attribution From Hids Alerts Using Fine-Tuned Transformers And Metadata Re-Ranking, Emad Sherif

International Journal of Cybersecurity Intelligence & Cybercrime

Cybercrime investigations increasingly depend on the ability to interpret large volumes of automated security events. For organizations without dedicated security operations centres, a situation common among small and medium enterprises, the manual translation of raw alerts into structured threat intelligence represents a critical bottleneck that slows investigative triage and limits cross-case comparability. This paper evaluates an automated enrichment pipeline designed to address this bottleneck by mapping security events to standardised adversary behaviour labels drawn from the MITRE ATT&CK framework, supporting both operational response and cybercrime investigation workflows. We compare three pipeline configurations, a general-purpose encoder model, a cybersecurity domain-adapted variant, …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

At The Crossroads Of Traditional And Nuclear Forensics: Decontaminating Radiologically Contaminated Dna Evidence Using Magnetic Beads, Rin Nyx Ruby

UNLV Theses, Dissertations, Professional Papers, and Capstones

Known for its impressive discriminatory power, deoxyribonucleic acid (DNA) fingerprinting stands as the “gold standard” of forensic investigation. However, complications arise when such evidence is contaminated with radioactive material. Though biological samples exposed to ionizing radiation can still yield comprehensive DNA profiles, most forensic laboratories lack the facilities which meet the safety and security requirements necessary for handling radioactive material. While nuclear facilities can decontaminate samples prior to forensic analysis, conventional methods for radiological decontamination – such as mechanical cleaning and chemical washes – may degrade the quality of the forensic evidence. The purpose of this study is to evaluate …

Program And Proceedings, The Nebraska Academy Of Sciences 1880–2026: 146th Anniversary Year, One Hundred-Thirty-Sixth Annual Meeting

Nebraska Academy of Sciences: Programs and Proceedings

Program and abstracts of the proceedings for the Nebraska Academy of Sciences 136th annual meeting, 2025

Sessions

Aeronautics and Space Science

Anthropology

Biological and Medical Sciences

Earth Sciences

Ecology, Sustainability, and Environmental Science

Physics and Engineering

General Poster Session

2026 Maiben Lecture: Shifting Extremes: Understanding Nebraska’s Changing Climate and Preparing for What Lies Ahead, Deborah Bathke

2026 Friends of Science Awards: Julie Shaffer and Irina Filina

2026 C. Bertrand and Marian Othmer Schultz Colleaguate Schoalrship Award: Piper Ryschon and Bryce Reeson

In Memoriam: Paul Royster

Ai's Double Edged Sword: Fighting Against Synthetic Csam, Shekhinah Adra Green

Cybersecurity Undergraduate Research Showcase

The rapid advancements in generative artificial intelligence has introduced new challenges in the production and distribution of synthetic child sexual abuse material (CSAM). AI has the capabilities of creating highly realistic imagery and videos, which  raises serious legal and ethical concerns, increasing the risk of harm, exploitation, and revictimization.

This paper discusses the legal improvements needed in order to lower the change of legal loopholes, how digital forensic analyst use advanced tools to identify and investigate synthetic material, and different methods to start the reduction of synthetic CSAM.

Romance Scam Reporting And Support: Help-Seeking Timing, Trust, And Escalation, Ld Herrera

Research & Publications

Built on social engineering and identity deception, romance scams often create financial loss and distress. For victims, it can be difficult to know where to go, what information is needed, and what outcomes are realistic. This paper reports results from an anonymous survey of people who were targeted by or experienced a romance scam (completed surveys: n=386), focusing on (1) when and whether victims first reach out for help, (2) perceived difficulty and confidence in navigating support, (3) how trust relates to expectations of assistance, and (4) how loss severity relates to transfer-method complexity. When help was sought, it was …

The Psychology Behind Ai-Generated Phishing And Social Engineering Attacks, A’Shya Reynolds

School of Cybersecurity Master's Level Projects and Papers

Cybercrime has evolved significantly with the integration of artificial intelligence (AI), transforming traditional phishing and social engineering attacks into highly sophisticated and personalized threats. While early phishing attempts relied on generic messaging and low success rates, modern AI-driven attacks leverage advanced data analytics, natural language processing, and behavioral prediction to manipulate victims more effectively.

This research examines how cybercriminals utilize AI to enhance psychological manipulation techniques in phishing and social engineering attacks, increasing victim susceptibility. Drawing from interdisciplinary literature in cybersecurity and psychology, this study explores key psychological mechanisms, including cognitive biases, emotional triggers, and decision-making processes that influence victim …

Operationalizing Cyber-Routine Activities Theory For Senior Cybercrime Prevention: An Evaluation Of The Shield Training-The-Trainer Program, Kyung-Shick Choi, Insun Park, Mijin Kim, Ji Yae Bong

International Journal of Cybersecurity Intelligence & Cybercrime

Older adults face growing risks of cyber-enabled fraud, yet scalable, evidence-based prevention programs remain limited. Guided by Cyber-Routine Activities Theory (Cyber-RAT), this study evaluates the pilot implementation of the Seniors Harnessing Internet Education for Lasting Defense (SHIELD) Training-the-Trainer program, designed to prepare law enforcement officers and community leaders to deliver cybercrime prevention education to older adults. A key innovation of SHIELD is its integration of interactive game-based simulations, which allow participants to practice verification, refusal, and reporting behaviors in realistic cybercrime scenarios. Following the December 2025 pilot session in Boston, semi-structured interviews were conducted with 12 participants from law enforcement, …

From Authorization To Loss: A Blockchain Forensic Analysis Of Transaction-Level Mechanisms In Cryptocurrency Airdrop Scams, Chanwoo Shin, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

Cryptocurrency airdrop scams have emerged as a rapidly growing form of cyber-enabled financial crime, yet remain underexplored in empirical research. This study examines how transaction-level mechanisms and offender strategies influence variation in monetary loss in airdrop scam incidents. Grounded in Cyber-Routine Activities Theory (Cyber-RAT), the study conceptualizes financial harm as occurring within decentralized environments where users’ online behaviors, particularly transaction authorization, intersect with limited digital capable guardianship. Data were drawn from 112 validated airdrop scam cases reported on Chainabuse.com between January and December 2025. Blockchain forensic analysis using Breadcrumbs was conducted to reconstruct transaction pathways, identify exchange interactions, and detect …

Cybercrime, Vulnerability And Digital Guardianship: Opportunity Structures And Prevention In A Changing Online Landscape, Mike Toro-Alvarez, Amy Lim

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Analyzing Modern Scam Typologies: From Pig-Butchering And Nigerian Advance-Fee Fraud To Crypto Airdrop Schemes, Katalin Parti, Sinyong Choi, Thomas Dearden

International Journal of Cybersecurity Intelligence & Cybercrime

Rapid advancements in digital infrastructure and decentralized networks have fundamentally altered the nature of contemporary cybercrime, making comprehensive empirical and technical analysis more crucial than ever. To address these challenges, this editorial summarizes the research contributions featured in this issue of the International Jour nal of Cybersecurity Intelligence and Cybercrime. The included papers examine the structural on-chain dynamics of sanctioned pig-butchering operations, the representational production and AI-driven evolution of the “Nigerian scam” label, the critical transaction-authorization factors driving losses in crypto airdrop schemes, and the optimization of sentence-transformer models for automated Host Intrusion Detection System (HIDS) alert enrichment. Together, these …

Three-Tier On-Chain Transaction Architecture In A Sanctions-Linked Pig-Butchering Network: A Blockchain-Forensics Case Study, Matthew Stern, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

n October 2025, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned 29 Bitcoin addresses asso ciated with the Prince Group and Chen Zhi, providing an opportunity to examine the internal on-chain structure of a sanctions-linked pig-butchering network. This blockchain-forensics case study analyzes the group of 29 addresses using blockchain tracing, cross-plat form attribution checks across multiple commercial analytics platforms, exposure screening, and thematic analysis of transaction be havior. Because the case rests on OFAC designations and DOJ allegations, the traced flows are interpreted as patterns consistent with suspected laundering rather than adjudicated crimes; no fiat …

Attribution Post ‘Aura’ Loss: A Qualitative Discourse Analysis Of The Nigerian Scam Label And Fraud Attribution, Emaediong Akpan

International Journal of Cybersecurity Intelligence & Cybercrime

In this essay, I employ qualitative discourse analysis of eleven purposively selected literature to examine how “Nigerian scam” became an established yet detached signifier of advance-fee fraud in global discourse. I do not treat this association as a reflection of offender identity or national inclination. Instead, the analysis traces how attribution is produced through representational repetition, institu tional uptake, and the circulation of familiar narrative cues. Using qualitative discourse analysis and an interpretive approach, this paper distinguishes among the socio-technical conditions that enable fraud, the institutional processes that stabilize attribution, and the semiotic dynamics through which national categories acquire durability. …

Deepfakes On Trial: Developing A High-Accuracy, Court-Admissible Ai Pipeline For Deepfake Detection In Corporate Fraud Litigation, Aiden J. Green

Honors College Theses

As deepfake technology advances, cybercriminals are increasingly using AI-generated videos and audios to impersonate executives and carry out sophisticated CEO fraud schemes. These synthetic forgeries target human trust and corporate communication systems, creating an urgent need for forensic tools capable of authenticating digital evidence with legal accuracy. This thesis presents a forensic-grade AI deepfake detection pipeline designed for this purpose, emphasizing courtroom admissibility, reproducibility, and evidentiary integrity. Built entirely with free, opensource tools, the framework combines metadata analysis, AI-powered spectrogram analysis, neural artifact detection, and facial manipulation recognition into a transparent workflow that accurately identifies synthetic media. It was trained …

Maggot Mass Effect On The Development And Survival Of Forensic Blow Flies, Akomavo Fabrice Gbenonsi

School of Natural Resources: Dissertations, Theses, and Student Research

Forensic entomology scientists use blow flies' developing patterns to estimate the postmortem interval (PMI). However, larval aggregations produce metabolic heat, resulting in complex microclimates that may change growth timetables. This study investigates how larval density and associated temperature changes affect the development and survival of two forensically essential blow fly species, Lucilia sericata and Calliphora vicina.

This study examined how larval density and associated thermal profiles affect the development of both blow fly species. Using a split-plot design, we tested four larval densities at 25°C and 30°C, with temperature gradients measured via thermocouple at four mass positions three times …

Global Crossroads Of Cybercrime: Youth, Enterprise And State Vulnerabilities In The Digital Age, Christopher S. Kayser, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Need Of Paradigm Shift In Cybersecurity Implementation For Small And Medium Enterprises (Smes), Shekhar Pawar, Hemant Palivela

International Journal of Cybersecurity Intelligence & Cybercrime

The increasing digitization of small and medium enterprises (SMEs) has significantly increased their attack surface, creating opportunities for various cyberthreats. In the global market, there are various cybersecurity standards and frameworks available, but there are still many cyber news stories from each corner of the world talking about increasing sophisticated cyber-attacks among organizations. According to recent studies, one out of five cyberattacks is targeting SMEs. Even though SMEs are relatively smaller as individuals, they are responsible for maximum contribution towards the betterment of the global economy, including the highest role in GDP and various employment opportunities. As compared to large …

Program And Proceedings: Nebraska Academy Of Sciences 1880–2025, 145th Anniversary Year, One Hundred-Thirty-Fifth Annual Meeting

Nebraska Academy of Sciences: Programs and Proceedings

Program

Aeronautics and Space Science

Biological and Medical Sciences

Biology

Chemistry

Earth Sciences

Science Education

Anthropology

Applied Science and Technology

Physics and Engineering

Forensic Sciences

Ecology, Sustainability, and Environmental Science

Maiben Lecture: Mary Ann Vinton, "State of the Academy"

Friends of Science Awards: David Crouse and Daniel Sitzman

Assessment Of Analytical Workflows Of Gunshot Residue Evidence And Strategies For Implementation Of Advanced Technology In Crime Laboratories., Leah D. Thomas

Graduate Theses, Dissertations, and Problem Reports (ETD)

The rise in gun violence in the United States has increased the demand on forensic agencies to process evidence promptly and accurately. The exchange of imperceptible traces among objects, suspects, and victims can provide critical insights into the interactions and sequence of events during a crime. Gunshot residue (GSR) is a type of trace evidence that holds significant investigative value in shooting reconstructions. GSR can help identify potential shooters, intermediate targets, and bullet trajectories; however, its analysis is often expensive and time-consuming. Consequently, there is an urgent need for more effective solutions.

Methods for on-site screening can significantly streamline forensic …

A New Deepfake Detection Method With No-Reference Image Quality Assessment To Resist Image Degradation, Jiajun Jiang, Wen-Chao Yang, Chung-Hao Chen, Timothy Young

Electrical & Computer Engineering Faculty Publications

Deepfake technology, which utilizes advanced AI models such as Generative Adversarial Networks (GANs), has led to the proliferation of highly convincing manipulated media, posing significant challenges for detection. Existing detection methods often struggle with the low-quality or compressed press, which is prevalent on social media platforms. This paper proposes a novel Deepfake detection framework that leverages No-Reference Image Quality Assessment (NRIQA) techniques, specifically, BRISQUE, NIQE, and PIQUE, to extract quality-related features from facial images. These features are then classified using a Support Vector Machine (SVM) with various kernel functions. We evaluate our method under both intra-dataset and cross-dataset settings. For …

Navigating The Digital Frontier: New Perspectives On Cybercrime And Governance, Christopher S. Kayser, Thomas Dearden, Katalin Parti, Sinyong Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

Modus Operandi And Blockchain Analysis Of Romance Scams: Cryptocurrency-Driven Victimization, Amy Lim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

The Legal Response To The Intrusion Into Digital Identity In Social Media, Maria González-García Vinuela

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.

A Study Of Pattern Of Cybercrime Abuse Of Individual Internet Users In Umuahia North Lga, Abia State Of South-Eastern Nigeria, Ogochukwu Favour Nzeakor, Rita Ngozi Okafor, Chibuike Ndubuisi Nwoke

International Journal of Cybersecurity Intelligence & Cybercrime

Although a number of studies exist on cybercrime and its abuses, little is known about the pattern of cybercrime abuses individual Internet users experience in Nigeria, especially the south eastern region. Using data collected via various methods, this study examines the pattern of cybercrime abuses of individual Internet users in Umuahia, Abia State, of South Eastern Nigeria. The result of the analysis of 1,067 samples drawn from 223,134 Internet users in Umuahia North LGA of Abia Sate showed that: while most users are victims of stolen ICT-gadgets (19%), fraud related offences (17%), and hacking (15%); they rarely fall victims of …

Analyzing Visual Attention In Virtual Crime Scene Investigations Using Eye-Tracking And Vr: Insights For Cognitive Modeling, Wen-Chao Yang, Chih-Hung Shih, Jiajun Jiang, Sergio Pallas Enguita, Chung-Hao Chen

Electrical & Computer Engineering Faculty Publications

Understanding human perceptual strategies in high-stakes environments, such as crime scene investigations, is essential for developing cognitive models that reflect expert decision-making. This study presents an immersive experimental framework that utilizes virtual reality (VR) and eye-tracking technologies to capture and analyze visual attention during simulated forensic tasks. A 360° panoramic crime scene, constructed using the Nikon KeyMission 360 camera, was integrated into a VR system with HTC Vive and Tobii Pro eye-tracking components. A total of 46 undergraduate students aged 19 to 24–23, from the National University of Singapore in Singapore and 23 from the Central Police University in Taiwan—participated …

Development Of A Rapid Method For Pfas Detection And Quantitation In Human Hair, Justin M. Allen

Student Theses

In recent years, per- and polyfluoroalkyl substances (PFAS) have emerged as a critical focus in environmental and public health research due to their persistent nature and widespread use in products ranging from non-stick cookware to firefighting foams. These "forever chemicals" resist degradation, posing significant ecological and human health risks. While extensive studies have explored PFAS in environmental matrices, research into their presence in human hair remains limited, with only a handful of studies addressing this biomarker's potential. This thesis aims to develop a robust analytical method for detecting PFAS in human hair, leveraging its unique properties to provide a long-term …

Cyber Victimization In The Healthcare Industry: Analyzing Offender Motivations And Target Characteristics Through Routine Activities Theory (Rat) And Cyber-Routine Activities Theory (Cyber-Rat), Yashna Praveen, Mijin Kim, Kyung-Shick Choi

International Journal of Cybersecurity Intelligence & Cybercrime

The integration of computer technology in healthcare has revolutionized patient care but has also introduced significant cyber risks. Despite the healthcare sector being a primary target for cyber-attacks, research on the dynamics of these threats and practical solutions remains limited. Understanding the complexities of cyberattacks in this sector is critical, as the impact extends beyond financial losses to directly affect patient care and the protection of sensitive information. This paper applies Routine Activities Theory (RAT) and Cyber Routine Activities Theory (C-RAT) to analyze high-tech cyber victimization case studies in healthcare. The analysis explores the motivations behind these attacks and identifies …

Understanding The Use Of Artificial Intelligence In Cybercrime, Sinyong Choi, Thomas Dearden, Katalin Parti

International Journal of Cybersecurity Intelligence & Cybercrime

Artificial intelligence is one of the newest innovations that offenders also exploit to satisfy their criminal desires. Although understanding cybercrimes associated with this relatively new technology is essential in developing proper preventive measures, little has been done to examine this area. Therefore, this paper provides an overview of the articles featured in the special issue of the International Journal of Cybersecurity Intelligence and Cybercrime, ranging from deepfake in the metaverse to social engineering attacks. This issue includes articles that were presented by the winners of the student paper competition at the 2024 International White Hat Conference.

Investigating The Intersection Of Ai And Cybercrime: Risks, Trends, And Countermeasures, Sanaika Shetty, Kyung-Shick Choi, Insun Park

International Journal of Cybersecurity Intelligence & Cybercrime

No abstract provided.