Computer Law Commons^™

Overcoming The Digital Tsunami In E-Discovery: Is Visual Analysis The Answer?, Victoria L. Lemieux, Jason R. Baron

Canadian Journal of Law and Technology

New technologies are generating potentially discoverable evidence in electronic form in ever increasing volumes. As a result, traditional techniques of document search and retrieval in pursuit of electronic discovery in litigation are becoming less viable. One potential new technological solution to the e-discovery search and retrieval challenge is Visual Analysis (VA). VA is a technology that combines the computational power of the computer with graphical representations of large datasets to enable interactive analytic capabilities. This article provides an overview of VA technology and how it is being applied in the analysis of e-mail and other electronic documents in the field …

The Internet And Protection Of Children Online: Time For Change, Jill Scott

Canadian Journal of Law and Technology

This article explores the risks for children online and their privacy, with particular focus on the implications of widespread collection, use and retention of data about them. It touches on international standards and national laws that impact Internet activities and the special risk to children’s privacy in today’s ubiquitous computing environment. This is a complex topic that transcends national boundaries and involves both legal and policy issues confronting governments across the world.

Section I provides a brief outline of the online risks for children arising from the scope of data collection and the regulatory challenges of the Internet as it …

Direct-To-Consumer Advertising Of Pharmaceuticals On Television: A Charter Challenge, Elvina C. Chow

Canadian Journal of Law and Technology

The Supreme Court of Canada has consistently wrestled with the conflict between legislation designed to protect consumers’ health and the constitutional guarantee of the fundamental freedom of expression. This paper investigates the justification for the current regulatory framework for pharmaceutical advertising on television. Aware that the provisions in the FDA are able to withstand Charter of Rights and Freedoms (Charter) scrutiny, several possible policy initiations are nevertheless proposed.

The paper is divided into five separate sections. Having first introduced DTCA of pharmaceuticals on television in Section I, I will now turn to a more comprehensive examination of DTCA in Canada …

L'Impact D'Internet Sur Les Paradigmes De La Régulation De L'Audiovisuel, Gilles De Saint Exupéry

Canadian Journal of Law and Technology

Nous nous intéresserons particulièrement à la mutation du paradigme de la régulation de l’audiovisuel classique13 dû à plusieurs facteurs: pour être diffuseur sur les ondes hertzienne il fallait être titulaire d’une licence accordé par l’Etat, sur Internet tout le monde peut l’être à sa guise. Les moyens techniques et financiers ne sont plus une barrière à l’ entrée, le nombre de joueurs qui e ́ tait jusque-là restreint devient, en théorie, incalculable. Le mécanisme de responsabilité mis en place est remis en cause, par la dilution des frontières, l’anonymat, ou l’insolvabilité des diffuseurs. Les modèles d’affaires doivent être revus, le …

Electronic Discovery- Sedona Canada Is Inadequate On Records Management - Here's Sedona Canada In Amended Form, Ken Chasse

Canadian Journal of Law and Technology

A paper record can exist without its records system; an electronic record cannot. To use, corrupt, or destroy a paper record, one needs physical access to the records system wherein it is stored. But to use, corrupt, or destroy an electronic record one merely needs electronic access to its records system, from anywhere. Therefore any set of rules or principles for controlling the use of electronic records for any purpose, including electronic discovery, should incorporate the established policies and practices of electronic records management.

As to cost, rules of electronic discovery are needed with which to punish par- ties with …

Lessons From Bilski, Haewon Chung

Canadian Journal of Law and Technology

In this paper, I will examine how the U.S. and Canadian courts have approached the patentability of intangible inventions and discuss whether any lessons can be learned from the U.S.’s patent dilemma. In section 2, I will review the American jurisprudence on patentability of intangible inventions. In section 3, I will discuss the potential impact Bilski may have on the American jurisprudence. Section 4 will assess the Canadian jurisprudence on patentability of intangible inventions. In section 5, I will discuss the Federal Court of Canada’s decision in Amazon/FCC. I argue that based on recent events in the American jurisprudence, Canadian …

Prohibiting Medical Method Patents: A Criticism Of The Status Quo, Mark S. Wilke

Canadian Journal of Law and Technology

Methods of medical treatment are not patentable in Canada. This means that inventions involving the performance of surgery, administration of medicine, or extraction of fluids or tissue for diagnostic tests cannot directly be protected under the current patent regime. However, this prohibition is not an absolute ban. Many medical innovations are patentable, including surgical tools and devices, drugs and other chemical compounds, medical “uses”, diagnostic assays and methods of treat- ing “natural” conditions. The practical reality is that the distinction between what is and what is not patentable is poorly defined. This uncertainty presents a steep challenge for inventors and …

Tax Implications For Non-Residents Conducting E-Commerce In Canada, Mike Nienhuis

Canadian Journal of Law and Technology

This paper focuses on taxation issues faced by non-resident e-commerce companies with no sustained presence in Canada apart from a web site. The tax liability of foreign corporations with a Canadian subsidiary, a physical Canadian office, or Canadian-based employees or agents will not be considered, even though there is substantial overlap in some of the relevant issues. By e-commerce companies we refer broadly to any firms conducting their primary business — whether business- to-business (B2B) or business-to-consumer (B2C) — by means of the internet.

In the first section we outline the framework for Canada’s taxation of non-residents conducting business in …

Lord Of The Files: International Secondary Liability For Internet Service Providers, Emerald Smith

Washington and Lee Law Review

No abstract provided.

Location-Based Services And Privacy, Teresa Scassa, Anca Sattler

Canadian Journal of Law and Technology

In this paper we begin by describing location-based services, their evolution and their future directions. We then outline privacy issues raised by such services. In Part III we consider how current Canadian data protection laws apply to location-based services, and indicate where such laws fall short of addressing the full range of issues raised by location-based services. Part IV of the paper explores some technological methods to address the privacy challenges raised by location-based services. The paper concludes with a series of recommendations.

Ios Mobile Device Forensics: Initial Analysis, Rita M. Barrios, Michael R. Lehrfeld

Annual ADFSL Conference on Digital Forensics, Security and Law

The ability to recover forensic artifacts from mobile devices is proving to be an ever-increasing challenge for investigators. Coupling this with the ubiquity of mobile devices and the increasing complexity and processing power they contain results in a reliance on them by suspects. In investigating Apple’s iOS devices -- namely the iPhone and iPad -- an investigator’s challenges are increased due to the closed nature of the platforms. What is left is an extremely powerful and complex mobile tool that is inexpensive, small, and can be used in suspect activities. Little is known about the internal data structures of the …

Forensic Analysis Of Smartphones: The Android Data Extractor Lite (Adel), Felix Freiling, Michael Spreitzenbarth, Sven Schmitt

Annual ADFSL Conference on Digital Forensics, Security and Law

Due to the ubiquitous use of smartphones, these devices become an increasingly important source of digital evidence in forensic investigations. Thus, the recovery of digital traces from smartphones often plays an essential role for the examination and clarification of the facts in a case. Although some tools already exist regarding the examination of smartphone data, there is still a strong demand to develop further methods and tools for forensic extraction and analysis of data that is stored on smartphones. In this paper we describe specifications of smartphones running Android. We further introduce a newly developed tool – called ADEL – …

Survey On Cloud Forensics And Critical Criteria For Cloud Forensic Capability: A Preliminary Analysis, Keyun Ruan, Ibrahim Baggili, Joe Carthy, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we present the current results and analysis of the survey “Cloud forensics and critical criteria for cloud forensic capability” carried out towards digital forensic experts and practitioners. This survey was created in order to gain a better understanding on some of the key questions of the new field - cloud forensics - before further research and development. We aim to understand concepts such as its definition, the most challenging issues, most valuable research directions, and the critical criteria for cloud forensic capability.

Keywords: Cloud Forensics, Cloud Computing, Digital Forensics, Survey, Cloud Forensic Capability

Kindle Forensics: Acquisition & Analysis, Peter Hannay

Annual ADFSL Conference on Digital Forensics, Security and Law

The Amazon Kindle eBook reader supports a wide range of capabilities beyond reading books. This functionality includes an inbuilt cellular data connection known as Whispernet. The Kindle provides web browsing, an application framework, eBook delivery and other services over this connection. The historic data left by user interaction with this device may be of forensic interest. Analysis of the Amazon Kindle device has resulted in a method to reliably extract and interpret data from these devices in a forensically complete manner.

Keywords: forensics, digital forensics, kindle, mobile, embedded, ebook, ereader

Aacsb‐Accredited Schools’ Adoption Of Information Security Curriculum, Linda Lau, Cheryl Davis

Annual ADFSL Conference on Digital Forensics, Security and Law

The need to professionally and successfully conduct computer forensic investigations of incidents has never been greater. This has launched an increasing demand for a skilled computer security workforce (Locasto, et al., 2011). This paper examines the extent to which AACSB-accredited universities located in Virginia, Maryland and Washington, D.C. are working towards providing courses that will meet this demand. The authors conduct an online research of the information security courses and programs offered by the 27 AACSB-accredited business schools in the selected area.

The preliminary investigation revealed that eight of the 27 participating universities did not offer any courses in cybersecurity, …

Digital Forensics Investigation In A Collegiate Environment, Robert E. Johnston

Annual ADFSL Conference on Digital Forensics, Security and Law

Creating, building, managing a cost effective digital forensics lab including a team of qualified examiners can be a challenge for colleges [1] with multiple campuses in multiple towns, counties and states. Leaving such examination responsibilities to each of the campuses results in not only disparity in the results but more than likely excessive duplication of efforts as well as the potential for compromise of evidence. Centralizing the forensic efforts results in a team that is not subject to the political pressures of a campus and virtually eliminates the possibility of examiner favoritism. Learn what it takes to create a cost …

Backtrack In The Outback - A Preliminary Report On Cyber Security Evaluation Of Organisations In Western Australia, Craig Valli, Andrew Woodward, Peter Hannay

Annual ADFSL Conference on Digital Forensics, Security and Law

The authors were involved in extensive vulnerability assessment and penetration testing of over 15 large organisations across various industry sectors in the Perth CBD. The actual live testing involved a team of five people for approximately a four week period, and was black box testing. The scanning consisted of running network and web vulnerability tools, and in a few cases, exploiting vulnerability to establish validity of the tools. The tools were run in aggressive mode with no attempt made to deceive or avoid detection by IDS/IPS or firewalls. The aim of the testing was to determine firstly whether these organisations …

Creating Realistic Corpora For Security And Forensic Education, Kam Woods, Christopher A. Lee, Simson Garfinkel, David Dittrich, Adam Russell, Kris Kearton

Annual ADFSL Conference on Digital Forensics, Security and Law

We present work on the design, implementation, distribution, and use of realistic forensic datasets to support digital forensics and security education. We describe in particular the “M57-Patents” scenario, a multi-modal corpus consisting of hard drive images, RAM images, network captures, and images from other devices typically found in forensics investigations such as USB drives and cellphones. Corpus creation has been performed as part of a scripted scenario; subsequently it is less “noisy” than real-world data but retains the complexity necessary to support a wide variety of forensic education activities. Realistic forensic corpora allow direct comparison of approaches and tools across …

Developing A Forensic Continuous Audit Model, Grover S. Kearns, Katherine J. Barker

Annual ADFSL Conference on Digital Forensics, Security and Law

Despite increased attention to internal controls and risk assessment, traditional audit approaches do not seem to be highly effective in uncovering the majority of frauds. Less than 20 percent of all occupational frauds are uncovered by auditors. Forensic accounting has recognized the need for automated approaches to fraud analysis yet research has not examined the benefits of forensic continuous auditing as a method to detect and deter corporate fraud. The purpose of this paper is to show how such an approach is possible. A model is presented that supports the acceptance of forensic continuous auditing by auditors and management as …

Development Of A Distributed Print‐Out Monitoring System For Efficient Forensic Investigation, Satoshi Kai, Tetsutaro Uehara

Annual ADFSL Conference on Digital Forensics, Security and Law

If information leakage occurs, an investigator is instructed to specify what documents were leaked and who leaked them. In the present work, a distributed print-out monitoring system—which consists of a virtual printer driver and print-out policy/log management servers—was developed. For easily matching the discovered (i.e., leaked) paper document with the print-out log, the virtual printer driver acquires full-text of printed-out documents by DDI hooking technique to check the content, transforms a spool file to a picture file and creates both a thumbnail and text log for forensic investigation afterwards. The log size is as only about 0.04 times bigger than …