Defense and Security Studies Commons^™

Table Of Contents

International Journal of Nuclear Security

No abstract provided.

Call For The Student Writing Competition

International Journal of Nuclear Security

No abstract provided.

Call For Submission

International Journal of Nuclear Security

No abstract provided.

Security Culture And Its Self-Assessment As Supplementary Tools For Nuclear Security Training, Igor Khripunov, Sara Z. Kutchesfahani, Khairul -. Khairul -

International Journal of Nuclear Security

Security Culture and its Self-Assessment as Supplementary Tools for Nuclear Security Training

Igor Khripunov, PhD

Center for International Trade and Security, University of Georgia (USA)

Sara Z. Kutchesfahani, PhD

Center for International Trade and Security, University of Georgia (USA)

Khairul Khairul

National Nuclear Energy Agency of Indonesia (BATAN)

Abstract

Nuclear security culture – an emerging and widely recognized practice – serves as a means to support and enhance nuclear security. In fact, many International Atomic Energy Agency (IAEA) publications and the Nuclear Security Summits have highlighted the vital role of nuclear security culture and raised its status to the same …

Khalifa University Reachback Program Supporting Prevention Of Illicit Nuclear And Radiological Material Smuggling In The United Arab Emirates, Braden Goddard, Alexander A. Solodov, Patrick J. Simmons

International Journal of Nuclear Security

Trafficking of Illicit nuclear or radiological materials is a global threat which can involve and adversely affect any country. Ultimately, it is the responsibility of each state to prevent and combat illicit nuclear trafficking by screening all cargo and travelers entering, exiting, and transiting through its borders. As a part of the national radiation detection infrastructure of the United Arab Emirates (UAE), a reachback program was established at Khalifa University (KU) to provide capabilities for adjudication of radiation alarms at Khalifa Port and other radiation portal monitor (RPM) locations. In addition to the main mission, KU Reachback aims to educate …

Status Of Nuclear Security Education And Research In Bangladesh And Looking Forward, Md. Shafiqul Islam, Md. Mobasher Ahmed

International Journal of Nuclear Security

Bangladesh uses category I of nuclear materials and category 1-5 of radioactive materials in the field of research, medical and industries. The Government is going to implement its first nuclear power plant under an IGA between the Bangladesh and Russian Governments. With the emerging global nuclear and radiological terrorism by potential adversaries, enhancing nuclear security is the paramount importance for the country. The paper has found no established communication channels among stakeholders in order to work in a coordinated and collaborative manner for strengthening the nuclear security. This has resulted lacking importance of education, research, training and knowledge management initiatives …

Letter From The Editor - Frahi-Amroun, Akila Frahi-Amroun

International Journal of Nuclear Security

No abstract provided.

Letter From The Editor - Hirst, Russel K. Hirst

International Journal of Nuclear Security

No abstract provided.

Building The Education And Training Pillar Of The University Of Tennessee’S Institute For Nuclear Security, Howard Lewis Hall

International Journal of Nuclear Security

The University of Tennessee (UT) developed its first formal and coordinated efforts in nuclear security education in 2008-2009 with its graduate certificate program in nuclear security in the Department of Nuclear Engineering. Building on this work, in 2011 UT established the UT Institute for Nuclear Security (INS) as a collaborative center at the university to expand its curricular impact as well as foster research and partnerships with nearby major governmental facilities engaged in nuclear security work. Oak Ridge National Laboratory (ORNL), the Y-12 National Security Complex (Y-12), and Oak Ridge Associated Universities (ORAU) have joined with UT as charter members …

Promoting Excellence And Demonstrated Competence For Nuclear Security Training, Daniel Johnson, Brunelle Battistella, Roger Howsley

International Journal of Nuclear Security

The international community has spent considerable time, money, and effort attempting to establish a series of national and regional Centres of Excellence (COEs), also known as Nuclear Security Training and Support Centres (NSSCs). These Centres tend to have a wide variety of objectives, structures, and methods of delivery. Unsurprisingly, no internationally accepted standard exists on how they should operate. The IAEA has produced some excellent guidance (TECDOC 1734), but by virtue of its role cannot provide standards for benchmarking success. Against this backdrop, the World Institute for Nuclear Security (WINS) launched the WINS Academy, an initiative to provide practitioners with …

Nuclear Security Education At Pakistan Institute Of Engineering And Applied Sciences (Pieas): Current Status, Future Prospects And The Lessons Learnt, Tariq Majeed Dr.

International Journal of Nuclear Security

In this paper, the details of nuclear security education at Pakistan Institute of Engineering and Applied Sciences (PIEAS) have been discussed. Nuclear Security education was initiated at PIEAS as a sub-specialty of its MS Nuclear Engineering Program in October 2009. Two courses, Nuclear Security (NE-581) and Physical Protection Systems (NE-582) have been offered on regular basis in the 3^rd and 4^th semesters. To date, 72 students have been graduated with this sub-specialty. The most important lesson learnt is that introduction of nuclear security related courses in nuclear engineering program has opened up new venues of applications of nuclear …

Nuclear Security And Hrd - Viet Nam’S Effort, Nu-Hoai-Vi Nguyen, Tan Huu Vuong

International Journal of Nuclear Security

Viet Nam is expanding its nuclear energy program for the application in various areas including industries, agriculture, healthcare, education and research. Recognizing the importance of the nineteen issues laid out in the IAEA document “Milestones in Development of a National Infrastructure for Nuclear Power” [1], Vietnam is considering how to address these issues. This paper describes the establishment of nuclear security infrastructure in Viet Nam and how Viet Nam has addressed one of the nineteen issues, that is human resource development in nuclear energy in general and in nuclear security in particular.

Challenges And Responses For Ensuring Sustainability Of Insa Training Programs, Jongsook Kim, Hyung-Kyung Lee, Jin-Young Lee

International Journal of Nuclear Security

Providing a systematic training is critical for a state or international perspective to reinforce nuclear security regime nationally or internationally. Korea government recognizes the importance of such challenge, and established the INSA under the KINAC as a Center of Excellence for fostering national nuclear security capacity and contributing international nuclear security governance. INSA started with the government policy that the establishment of sustainable education and training infrastructure and processes is fundamental to the capacity building strategy. After established, INSA has been designing and delivering the domestic and international/regional training programs for the purpose of fostering human resources development in nuclear …

The Utility Of Table-Top Exercises In Teaching Nuclear Security, Christopher Hobbs, Luca Lentini, Matthew Moran

International Journal of Nuclear Security

In the emerging field of nuclear security, those responsible for education and training are constantly seeking to identify and engage with tools and approaches that provide for a constructive learning environment. In this context, this paper explores the nature and value of Tabletop exercises (TTX) and how they can be applied in the nuclear security context. On the one hand, the paper dissects the key components of the TTX and considers the broader pedagogical benefits of this teaching method. On the other hand, the paper draws lessons from the authors’ experience of running TTXs as part of nuclear security professional …

After The Avalanche: The Post-Snowden Intelligence Politics Between The United States, The United Kingdom, And Germany, Jobel Kyle P. Vecino

Claremont-UC Undergraduate Research Conference on the European Union

The revelations of PRISM and XKeyscore by ex-National Security Agency (NSA) analyst Edward Snowden resulted in arguably the largest intelligence leak so far in the 21^st century. The leak revealed that the NSA was working with the British Government Communications Headquarters (GCHQ) on surveillance and data collection of individuals throughout Europe. Similarly, the NSA also colluded with the German Federal Intelligence Service (BND) on similar data collection and surveillance activities. Whereas the British government reacted relatively benignly to the revelations despite cries of government abuse, the German government reacted negatively to the revelations, eventually opening a rift between Washington …

Investigation Of Carbon Nanomaterials Embedded In A Cementitious Matrix, Clarissa A. Roe

Masters Theses & Specialist Projects

The objective of this thesis was to investigate whether the addition of carbon nanofibers had an effect on the splitting tensile strength of Hydro-Stone gypsum concrete. The carbon nanofibers used were single-walled carbon nanotubes (SWNT), buckminsterfullerene (C60), and graphene oxide (GO). Evidence of the nanofibers interacting with gypsum crystals in a connective manner was identified in both 1 mm thick concrete discs and concrete columns possessing a height of 2 in and a diameter of 1 in. Before imaging, the columns were subjected to a splitting tensile strength test. The results illustrate that while there is a general decrease in …

Wartime Construction Project Outcomes As A Function Of Contract Type, Ryan M. Hoff, Gregory D. Hammond, Peter P. Feng, Edward D. White

Faculty Publications

The United States has spent more than $23 billion on construction in Afghanistan since 2001. The dynamic security situation created substantial project uncertainty, and many construction projects used cost-plus-fixed-fee contracts (CPFF) instead of the firm-fixed-price (FFP) norm. Using a dataset of 25 wartime construction projects managed by the Air Force Civil Engineer Center, the authors sought to confirm that both contract types yield project outcomes consistent with the established literature. As expected, they found CPFF contracts had greater cost and schedule growth than FFP. However, they did not find differences regarding as-built quality. Additionally, the authors sought to determine whether …

Sim Card Forensics: Digital Evidence, Nada Ibrahim, Nuha Al Naqbi, Farkhund Iqbal, Omar Alfandi

Annual ADFSL Conference on Digital Forensics, Security and Law

With the rapid evolution of the smartphone industry, mobile device forensics has become essential in cybercrime investigation. Currently, evidence forensically-retrieved from a mobile device is in the form of call logs, contacts, and SMSs; a mobile forensic investigator should also be aware of the vast amount of user data and network information that are stored in the mobile SIM card such as ICCID, IMSI, and ADN. The aim of this study is to test various forensic tools to effectively gather critical evidence stored on the SIM card. In the first set of experiments, we compare the selected forensic tools in …

Assessing The Gap: Measure The Impact Of Phishing On An Organization, Brad Wardman

Annual ADFSL Conference on Digital Forensics, Security and Law

Phishing has become one of the most recognized words associated with cybercrime. As more organizations are being targeted by phishing campaigns, there are more options within the industry to deter such attacks. However, there is little research into how much damage these campaigns are causing organizations. This paper will show how financial organizations can be impacted by phishing and present a method for accurately quantifying resultant monetary losses. The methodology presented in this paper can be adapted to other organizations in order to quantify phishing losses across industries.

Keywords: phishing, cybercrime, economics

Wban Security Management In Healthcare Enterprise Environments, Karina Bahena, Manghui Tu

Annual ADFSL Conference on Digital Forensics, Security and Law

As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and public organizations under obligations to take actions to prevent such data breaches. Various vulnerabilities have been identified in healthcare enterprise environments, in which the Wireless Body Area Networks (WBAN) remains to be a major vulnerability, which can be easily taken advantage of by determined adversaries. Thus, vulnerabilities of WBAN systems and the effective countermeasure mechanisms to secure WBAN are urgently needed. In this research, first, the architecture of WBAN system has been explored, and the …

Forensics Analysis Of Privacy Of Portable Web Browsers, Ahmad Ghafarian

Annual ADFSL Conference on Digital Forensics, Security and Law

Web browser vendors offer a portable web browser option which is considered as one of the features that provides user privacy. Portable web browser is a browser that can be launched from a USB flash drive without the need for its installation on the host machine. Most popular web browsers have portable versions of their browsers as well. Portable web browsing poses a great challenge to computer forensic investigators who try to reconstruct the past browsing history, in case of any computer incidence. This research examines various sources in the host machine such as physical memory, temporary, recent, event files, …

Reverse Engineering A Nit That Unmasks Tor Users, Matthew Miller, Joshua Stroschein, Ashley Podhradsky

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper is a case study of a forensic investigation of a Network Investigative Technique (NIT) used by the FBI to deanonymize users of a The Onion Router (Tor) Hidden Service. The forensic investigators were hired by the defense to determine how the NIT worked. The defendant was ac- cused of using a browser to access illegal information. The authors analyzed the source code, binary files and logs that were used by the NIT. The analysis was used to validate that the NIT collected only necessary and legally authorized information. This paper outlines the publicly available case details, how the …

Malware In The Mobile Device Android Environment, Diana Hintea, Robert Bird, Andrew Walker

Annual ADFSL Conference on Digital Forensics, Security and Law

exploit smartphone operating systems has exponentially expanded. Android has become the main target to exploit due to having the largest install base amongst the smartphone operating systems and owing to the open access nature in which application installations are permitted. Many Android users are unaware of the risks associated with a malware infection and to what level current malware scanners protect them. This paper tests how efficient the currently available malware scanners are. To achieve this, ten representative Android security products were selected and tested against a set of 5,560 known and categorized Android malware samples. The tests were carried …

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …