Forensic Science and Technology Commons^™

A Quantifiler Trio-Based Hrm Mixture Screening Assay For The Quantstudio 6 Flex Qpcr Platform, Dayanara A. Torres

Master of Science in Forensic Science Directed Research Projects

At present, the forensic DNA workflow is not capable of providing information about the contributor status (single source vs. mixtures) of evidentiary samples prior to end-point analysis. This shortcoming can exacerbate the challenges inherent to mixtures and low-template DNA samples. Provided additional sample information earlier in the workflow, protocols could be implemented to mitigate these challenges. High-resolution melt (HRM) curve analysis is a technique used to detect genetic variation in DNA fragments and in the last decade has been evaluated for use in differentiation of samples by genotype and/or contributor status. To this end, a proof-of-concept HRM assay using the …

Classification And Differentiation Of Forensically Relevant Cell Populations Using Imaging Flow Cytometry, Arianna D. Decorte

Master of Science in Forensic Science Directed Research Projects

Forensic casework relies heavily on DNA profiles which may be time-consuming to generate and difficult to interpret when biological mixtures are present. Additionally, there are significant challenges in using sub-source data alone to answer the activity-level questions often most pertinent in criminal cases. Source level information can add critical probative value, however, methods that can provide information as to the source tissue of evidentiary cell populations are limited. There remains a need for new methods that can differentiate between and classify various cell populations, particularly for vaginal and epidermal tissue, since there are no conventional serological techniques specific to these …

Determination Of Cotinine Concentration In Urine By Liquid Chromatography Tandem Mass Spectrometry, Allison Beckett

Master of Science in Forensic Science Directed Research Projects

Tobacco use can cause lasting health conditions which can lead to death. Tobacco exposure comes from obvious sources like smoking or chewing tobacco, however these are not the only administration methods. Secondhand smoke exposure can affect even those who choose not to expose themselves to tobacco, which also opens them to the health issues that come along with tobacco use. Tobacco contains many different compounds, one of which is nicotine (Kataoka, 2009). Although nicotine is the most abundant compound in tobacco, it does not stay in the body for long periods of time. Nicotine metabolizes into cotinine which is more …

Assessing The Detectability Of Cannabinoid Analogs (Delta-8 Thc, Delta-10 Thc And Cbd) And Their Major Metabolites In Six Commercial Cannabinoid Urine Screening Kits, Ashley A. Pokhai

Master of Science in Forensic Science Directed Research Projects

Background:

There has been an exponential surge in the presence and use of cannabinoids since the federal legalization of hemp (Agricultural Improvement Act of 2018), which involves the legalization of medical use, adult recreational use, and decriminalization of cannabis in several states. This growth is not only attributed to ∆9-tetrahydrocannabinol (∆9-THC) and cannabidiol (CBD), the most abundant phytocannabinoid components of cannabis and hemp, respectively, but with many other emerging THC analogs. Structurally, these analogs are similar to ∆9-THC, yet very little information is available about their potency and even less information is available regarding their detectability using commercially available cannabinoid …

A Low-Cost Machine Learning Based Network Intrusion Detection System With Data Privacy Preservation, Jyoti Fakirah, Lauhim Mahfuz Zishan, Roshni Mooruth, Michael L. Johnstone, Wencheng Yang

Annual ADFSL Conference on Digital Forensics, Security and Law

Network intrusion is a well-studied area of cyber security. Current machine learning-based network intrusion detection systems (NIDSs) monitor network data and the patterns within those data but at the cost of presenting significant issues in terms of privacy violations which may threaten end-user privacy. Therefore, to mitigate risk and preserve a balance between security and privacy, it is imperative to protect user privacy with respect to intrusion data. Moreover, cost is a driver of a machine learning-based NIDS because such systems are increasingly being deployed on resource-limited edge devices. To solve these issues, in this paper we propose a NIDS …

Human-Controlled Fuzzing With Afl, Maxim Grishin, Igor Korkin, Phd

Annual ADFSL Conference on Digital Forensics, Security and Law

Fuzzing techniques are applied to reveal different types of bugs and vulnerabilities. American Fuzzy Lop (AFL) is a free most popular software fuzzer used by many other fuzzing frameworks. AFL supports autonomous mode of operation that uses the previous step output into the next step, as a result fuzzer spends a lot of time analyzing minor code sections. By making fuzzing process more focused and human controlled security expert can save time and find more bugs in less time. We designed a new module that can fuzz only the specified functions. As a result, the chosen ones will be inspected …

The Amorphous Nature Of Hackers: An Exploratory Study, Kento Yasuhara, Daniel Walnycky, Ibrahim Baggili, Ahmed Alhishwan

Annual ADFSL Conference on Digital Forensics, Security and Law

In this work, we aim to better understand outsider perspectives of the hacker community through a series of situation based survey questions. By doing this, we hope to gain insight into the overall reputation of hackers from participants in a wide range of technical and non-technical backgrounds. This is important to digital forensics since convicted hackers will be tried by people, each with their own perception of who hackers are. Do cyber crimes and national security issues negatively affect people’s perceptions of hackers? Does hacktivism and information warfare positively affect people’s perception of hackers? Do individual personality factors affect one’s …

Death Scene Insect Succession In Nebraska: A Guidebook, Erin Bauer, Larry Barksdale, Emma Sidel, Justine Laviolette

Department of Entomology: Faculty Publications

Insect behavior can be helpful to law enforcement in determining time of death, manner of death, location, and environment related to human or other animal victims found at a death scene. They may also provide clues about other aspects associated with an investigation (i.e., fly specks, suspect DNA). The study of how insects and related arthropods can aid in legal investigations is known as forensic entomology. Although this includes both civil applications, such as urban (i.e., maggots in mortuaries or insect structural damage) or stored product (i.e., illness from food contamination) entomology, this manual focuses on criminal applications, such as …

Internal Validation Of Mastr™ Probabilistic Genotyping Software For The Interpretation Of 2–5 Person Mixed Dna Profiles, Michael S. Adamowicz, Taylor N. Rambo, Jennifer L. Clarke

Forensic Science: Faculty Publications

Mixed human deoxyribonucleic acid (DNA) samples present one of the most challenging pieces of evidence that a forensic analyst can encounter. When multiple contributors, stochastic amplification, and allele drop-out further complicate the mixture profile, interpretation by hand becomes unreliable and statistical analysis problematic. Probabilistic genotyping software has provided a tool to address complex mixture interpretation and provide likelihood ratios for defined sets of propositions. The MaSTR™ software is a fully continuous probabilistic system that considers a wide range of STR profile data to provide likelihood ratios on DNA mixtures. Mixtures with two to five contributors and a range of component …

Analysis Of Forensically Relevant Evidence Using Electrochemistry, Spectroscopy, And Mass Spectrometry Tools, Colby Edward Ott

Graduate Theses, Dissertations, and Problem Reports (ETD)

Forensic science relies on the use of multiple techniques in the assessment of evidence to increase the accuracy and reliability of the results. However, with the rapidly changing drug landscape due to the introduction of novel psychoactive substances, many traditional screening methods are no longer sensitive or selective enough for use. Additionally, many screening methods such as chemical color tests are prone to false positive and negative results and are subjective. Therefore, the goal of this dissertation was to develop a novel analytical scheme that can provide a more efficient, rapid, and sensitive method that will facilitate adoption in the …

Assessment Of Quechers Extraction Protocol For The Lc-Ms/Ms Detection Of Emerging Fentanyl Analogs In Biological Specimens For Clinical And Forensic Purposes, Kylea M. Morris

Graduate Theses, Dissertations, and Problem Reports (ETD)

Drug abuse within the United States is a dynamic and pervasive issue that affects the quality and life expectancy of our society. One of the major drug classes that are constantly utilized is opioids. Opioids are prescribed for pain management in patients suffering from cancer and other medical illnesses. Long-term use of opioids could lead to tolerance in humans, which poses a risk of reaching fatal overdose levels. Unfortunately, opioids are abused recreationally, and in some instances, individuals are unaware of the presence of dangerous synthetic drugs like fentanyl, hidden in materials such as heroin, cocaine, oxycodone, and methamphetamine. Recent …

Digital Forensics For Mobility As A Service Platform: Analysis Of Uber Application On Iphone And Cloud, Nina Matulis, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Uber is a ride-hailing smartphone application (app) that allows users to order a ride in a highly efficient manner. The Uber app provides Mobility as a Service and allows users to easily order a ride in a private car with just a few clicks. Uber stores large amounts of data on both the mobile device the app is being used on, and in the cloud. Examples of this data include geolocation data, date/time, origin/destination addresses, departure/arrival times, and distance. Uber geolocation data has been previously researched to investigate the privacy of the Uber app; however, there is minimal research relating …

Smart Home Forensics: Identifying Ddos Attack Patterns On Iot Devices, Samuel Ho, Hope Greeson, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Smart homes are becoming more common as more people integrate IoT devices into their home environment. As such, these devices have access to personal data on their homeowners’ networks. One of the advantages of IoT devices is that they are compact. However, this limits the incorporation of security measures in their hardware. Misconfigured IoT devices are commonly the target of malicious attacks. Additionally, distributed denial-of-service attacks are becoming more common due to applications and software that provides users with easy-to-use user interfaces. Since one vulnerable device is all an attacker needs to launch an attack on a network, in regards …

Y-Chromosome Dna Extraction From Post-Cranial Skeletal Elements, Mykala D. Ward

Graduate Student Theses, Dissertations, & Professional Papers

The use of DNA in forensic science has become an integral tool for victim and perpetrator identifications, missing person’s cases, paternity testing, etc. A major use of DNA is in the identification of unknown deceased individuals. With a reported number of individuals well over 8,000 in the United States, improved methods to accurately collect and analyze DNA from modern human bone are needed.

This project took the preliminary steps to improve DNA sampling and extraction methods by analyzing the Y-chromosome DNA yield from the two bone types. While both types are composed of the same materials, cortical bone is the …

Development Of An Expert Algorithm For Substance Identification (Easi) To Discriminate Between Spectrally Similar Fentanyl Analogs In Mass Spectrometry, Alexandra Adeoye

Graduate Theses, Dissertations, and Problem Reports (ETD)

Fentanyl is an opioid that is about 100 times more potent than morphine, and its analogs are just as potent, and some like carfentanil are even more so potent. In recent years, fentanyl and its analogs have been responsible for over 50% of overdose-related deaths. In response, the DEA has placed all fentanyl analogs as Schedule I compounds because of their non-medicinal use and high potential for abuse and physical dependence. However, fentanyl analogs have high structural and mass spectral similarities due to the extremely conservative nature of the core fentanyl structure, which makes the differentiation and identification of fentanyl …

Analyzing The Viability Of Direct Pcr For Use In Conjunction With Cyanoacrylate Enhanced Fingerprints, Coral M. Smith

Graduate Theses, Dissertations, and Problem Reports (ETD)

Efficient methods for DNA analysis are desperately needed in laboratories due to the influx in DNA analysis requests. The current DNA processing methods are costly, time consuming, and involve multiple tube changes, increasing the risk of contamination. However, the use of direct PCR can simplify the DNA analysis process by eliminating the extraction, purification and quantitation steps. Presently, the FBI Quality Assurance Standard 9.4 requires all evidence samples to be quantitated. As a result, the direct PCR method of DNA processing cannot be implemented on evidence samples at this time. Direct PCR presents the opportunity to provide efficient DNA analysis, …

Mtdna Heteroplasmy In Hair Shafts Versus Buccal Swabs For Forensic Applications, Sara R. Bodnar

Graduate Theses, Dissertations, and Problem Reports (ETD)

Mitochondrial DNA (mtDNA) analysis has several forensic applications such as criminal investigations, identification of human remains, and missing person investigations. It is also the only type of DNA that is available from certain sample types such as hair shafts. The presence of mtDNA heteroplasmy within and between tissue types can lead to mtDNA sequence differences when comparing samples originating from the same individual. Studies on mtDNA heteroplasmy are increasingly being carried out for their implications in forensic interpretation of mtDNA sequences. Specifically, mtDNA in buccal swabs compared to hair samples from one individual may show differences in sequence due to …

Microsoft Defender Will Be Defended: Memoryranger Prevents Blinding Windows Av, Denis Pogonin, Igor Korkin, Phd

Annual ADFSL Conference on Digital Forensics, Security and Law

Windows OS is facing a huge rise in kernel attacks. An overview of popular techniques that result in loading kernel drivers will be presented. One of the key targets of modern threats is disabling and blinding Microsoft Defender, a default Windows AV. The analysis of recent driver-based attacks will be given, the challenge is to block them. The survey of user- and kernel-level attacks on Microsoft Defender will be given. One of the recently published attackers’ techniques abuses Mandatory Integrity Control (MIC) and Security Reference Monitor (SRM) by modifying Integrity Level and Debug Privileges for the Microsoft Defender via syscalls. …

Detection Of Overlapping Passive Manipulation Techniques In Image Forensics, Gianna S. Lint, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

With a growing number of images uploaded daily to social media sites, it is essential to understand if an image can be used to trace its origin. Forensic investigations are focusing on analyzing images that are uploaded to social media sites resulting in an emphasis on building and validating tools. There has been a strong focus on understanding active manipulation or tampering techniques and building tools for analysis. However, research on manipulation is often studied in a vacuum, involving only one technique at a time. Additionally, less focus has been placed on passive manipulation, which can occur by simply uploading …