Forensic Science and Technology Commons^™

Technique-Level Normalization For Cybersecurity Intelligence: An Empirical Evaluation Of Att&Ck Attribution From Hids Alerts Using Fine-Tuned Transformers And Metadata Re-Ranking, Emad Sherif

International Journal of Cybersecurity Intelligence & Cybercrime

Cybercrime investigations increasingly depend on the ability to interpret large volumes of automated security events. For organizations without dedicated security operations centres, a situation common among small and medium enterprises, the manual translation of raw alerts into structured threat intelligence represents a critical bottleneck that slows investigative triage and limits cross-case comparability. This paper evaluates an automated enrichment pipeline designed to address this bottleneck by mapping security events to standardised adversary behaviour labels drawn from the MITRE ATT&CK framework, supporting both operational response and cybercrime investigation workflows. We compare three pipeline configurations, a general-purpose encoder model, a cybersecurity domain-adapted variant, …

Viability Of Manually Passing Projectiles Through The Barrel Of A Firearm In Lieu Of Test Firing, Mara V. Mineo

Student Theses

Forensic examinations of discharged projectiles are made possible by the toolmarks and striations made by the barrel the projectiles pass through. Suspect barrels are attached to firearms and test fired to compare these toolmarks and striations with found evidence. However, physically damaged barrels could potentially be unable to produce exemplars. This study tests the viability of manually passing projectiles through stationary barrels as a meaningful and accurate means to produce acceptable exemplars that are able to be compared against recovered evidence. A total of 18 projectiles were manually passed between two distinct Glock handgun barrels and viewed under a comparison …

Effect Of Food Resource, Preservation Method, And Preservation Duration On Larval Size Of Forensically Important Fly Species (Order: Diptera), John Zukowski

Student Theses

Forensic entomology is a vital discipline that can aid in the proceedings of criminal cases. Larval age and development are important aspects to consider when utilizing blow flies (Family: Calliphoridae) for estimates pertaining to the initial time of colonization (TOC), which contributes to postmortem interval (PMI) estimations. Thus, it is important to understand the factors that influence larval size and development, since larval size is commonly used as a proxy for age. Larvae of three species of flies, Lucilia sericata (Meigen), Calliphora vicina (Robineau-Desvoidy), and Phormia regina (Meigen), were reared on five different food resources. Specimens of L. sericata and …

Stop Blaming My Users: Illumination Of The Technocentric Mythos Bias, Ervin H. Frenzel, Richard Lightcap

Journal of Cybersecurity Education, Research and Practice

 Abstract -This conceptual essay addresses the need for systemic and systematic transdisciplinary analytical techniques within cybersecurity and technical security. This conceptual essay is contingent upon recognition that cybersecurity is not simply technical in nature, it does not need an adversary, and more importantly it is based upon systems engineering and systems thinking.  The essay contributes a socio-technical attribution chain and field-specific ontology/taxonomy which distinguish user-triggered events from root causes, latent conditions, technical debt, validation failures, governance failures, and attribution bias before assigning responsibility to end users. It systematically defines an ontology inclusive of developer technical debt, organizational debt arising from …

Adversarial Robustness Of Perceptual Hashing Systems: A Unified Security Evaluation Framework, Avijit Roy

Student Theses

Social network platforms, child safety organizations, and image provenance systems use perceptual hashing to identify known child sexual abuse material (CSAM), support content moderation and reverse image search, and verify image integrity. Perceptual hashing works by producing similar fingerprints for visually similar images, even after common transformations such as compression, resizing, or minor brightness changes. This useful similarity-preserving property also creates an adversarial attack surface, as attackers can use AI-assisted or conventional image manipulation techniques to move a hash across a matching threshold while maintaining visual similarity, often without access to specialized hardware.

The security failures produced by adversarial attacks …

A Qualitative And Quantitative Comparative Analysis Of Ballistic Bone Trauma From Frangible And Full Metal Jacket Projectiles, Hajar S. Hassan

Student Theses

Ballistic bone research is essential as 90% of homicides with the use of a firearm include injuries to bone. Forensic anthropologists use ballistic bone trauma to gather details and reconstruct an event, but ballistic bone trauma depends on many intrinsic and extrinsic factors. These factors include the type of bone, the type of firearm, and the type of ammunition. As new ammunition and firearms emerge, the literature on ballistic bone trauma remains limited. This novel study compares the bone trauma from the most common projectile, the full metal jacket, to a frangible projectile which is made to break upon impact. …

The Accuracy Of Free Ai Generated Image Detection Tools Compared To Human Judgment, Rachel Tsai

Themis: Research Journal of Justice Studies and Forensic Science

The rise of artificial intelligence has led to a surge in AI-generated images, creating new obstacles for forensic investigations. As synthetic images become increasingly realistic, distinguishing them from authentic content becomes more difficult. In forensic investigations, it is essential to prove the authenticity and integrity of digital evidence to maintain admissibility in court. Currently, there are various AI detection tools on the market; however, their accuracy and reliability remain uncertain. This study evaluates the effectiveness of several free AI-generated image-detection tools compared with judgments from unaided college students or recent graduates. Participants were asked to analyze a set of 30 …

The Necessity Of Human Taphonomy Facilities, Mia Frame

Themis: Research Journal of Justice Studies and Forensic Science

This review explores the question of whether human taphonomy facilities (HTFs) are necessary for forensic science research. These facilities are used for multiple facets of research including postmortem interval (PMI) estimation or time since death, entomology, taphonomy, and the study of volatile organic compounds. The use of human analogues like pigs and rabbits will also be addressed to show why taphonomic research on human remains must be done. It is important to look at the physical and logistical limitations of these facilities, as well as ethical limitations including religious beliefs and public perception. This article will conclude by examining future …

The Effects Of Pesticide-Treated Pork Meat On Insect Colonization: Implications For Postmortem Interval Estimation In Forensic Investigations, Alejandra Veja

Themis: Research Journal of Justice Studies and Forensic Science

Forensic entomologists estimate the postmortem interval (PMI) by analyzing insect colonization patterns on remains. Colonization can be influenced by factors such as state of decomposition, environment type, weather, and chemical exposure. Household products and pesticides may be used to conceal remains by delaying decomposition and preventing insect activity. Despite this, their impact on PMI estimation remains unclear. This study examined the effects of 98.11% DEET, 20% picaridin, and 20% IR3535 on insect colonization, compared to a control. Twelve boneless pork chops were placed outdoors in a suburban setting and monitored twice daily at 12-hour intervals. Results showed that high concentrations …

Diagnosing Mushroom Toxicities, Eetu Mäkinen

Themis: Research Journal of Justice Studies and Forensic Science

Although mushroom poisonings or “mycetisms” occur more frequently than is commonly recognized, they are often misdiagnosed due to their relative rarity, diverse clinical presentations, and the broad chemical variety of the toxins involved. More than a hundred different mushroom-derived toxins have been identified to cause at least 14 different poisoning syndromes or “toxidromes”, several of which can result in death through means such as organ failure. Understanding the toxicology of these mushroom toxins is essential for diagnosis in both clinical and forensic settings. Modern analytical techniques, such as liquid-chromatography–tandem mass spectrometry (LC–MS/MS) and enzyme-linked immunosorbent assays (ELISA), have improved the …

Development Of Latent Prints On Glass After A Fire, Meg Ross

Themis: Research Journal of Justice Studies and Forensic Science

In the United States, there is no standard procedure to collect fingerprint evidence from a fire. The goal of this research is to determine if fingerprints can survive a fire and can be developed using three different techniques. In previous research studies, some fingerprints were able to be recovered. In Australia, they found fingerprints were recoverable at 300℃ and 450℃ after using a cremation oven. However, O’Hagan (2018) claims that fingerprints start to degrade after 100℃ as fingerprints are made of 98% water. For this project, six bottles consisting of 30 fingerprints were put in a fire, with temperatures reading …

Detection Of Blood On Glazed Ceramic Tiles, Alexis Puente

Themis: Research Journal of Justice Studies and Forensic Science

This experiment tested how different bleach dilutions effectively remove blood from floor tiles and how they might affect the Kastle-Meyer (KM) presumptive blood test. Matte Calacatta 12 in. x 12 in. glazed ceramic tiles were used. Glazed tiles are considered non-porous on the surface but the ceramic body contains pores that can retain blood; this retained blood can be detected by the KM test. The bleach dilutions used to clean the tiles were 0% (water), 25%, 50%, 75%, and 100%. Trial 1 tiles were cleaned during the day while Trials 2-5 were cleaned at night. After the tiles were dried, …

Differentiation Of Human Pubic And Underarm Hair Using Atr-Ftir Spectroscopy, Kris Weller

Themis: Research Journal of Justice Studies and Forensic Science

This study investigates whether ATR-FTIR can differentiate human pubic and underarm hairs, either on its own or as a supplement to morphological examination via light microscopy. Determining somatic origin may provide useful context in criminal cases, especially in sexual assault cases. The morphological similarity between pubic and underarm hair means that these somatic regions are particularly in need of a more quantitative method of differentiation than the current qualitative approach. The ATR-FTIR spectra of pubic and underarm hairs collected from nine volunteers were not visually differentiable. Six peaks in the fingerprint region shared by all the spectra were selected and …

At The Crossroads Of Traditional And Nuclear Forensics: Decontaminating Radiologically Contaminated Dna Evidence Using Magnetic Beads, Rin Nyx Ruby

UNLV Theses, Dissertations, Professional Papers, and Capstones

Known for its impressive discriminatory power, deoxyribonucleic acid (DNA) fingerprinting stands as the “gold standard” of forensic investigation. However, complications arise when such evidence is contaminated with radioactive material. Though biological samples exposed to ionizing radiation can still yield comprehensive DNA profiles, most forensic laboratories lack the facilities which meet the safety and security requirements necessary for handling radioactive material. While nuclear facilities can decontaminate samples prior to forensic analysis, conventional methods for radiological decontamination – such as mechanical cleaning and chemical washes – may degrade the quality of the forensic evidence. The purpose of this study is to evaluate …

Liquid Fire Accelerants' Effect On Blood Detectability, Genniltza Ramirez

Themis: Research Journal of Justice Studies and Forensic Science

Five liquid fire accelerants were studied in their effects on blood detection in attempts to yield presumptive accelerant indicators to benefit fire scene investigators. The experiment involved burning different accelerant types via a 1:1 pig blood and accelerant ratio on cloth squares in trials of three, and then presumptively testing for blood using luminol. Luminol was selected for its sensitivity, subjectivity, and previous use in arson fire and thermal studies. For this study, accelerants were determined to have positive presumptive blood detection if detectable by camera for documentation. Presumptive blood detection of the accelerants resulted in: paint thinner with detection …

From Prairie To Practice: Forensic Taphonomy, Ethics, And Regional Ecology In Southeastern Nebraska, Jessica F. L. Gammage

Department of Anthropology: Theses and Student Research

Forensic taphonomy examines the postmortem processes that affect human remains within specific environmental contexts and plays a critical role in medicolegal death investigation. Despite significant advances in decomposition research, experimental studies remain geographically and environmentally uneven, limiting the transferability of postmortem interval (PMI) estimation methods across regions. The Central Great Plains are underrepresented in forensic taphonomic research despite its distinct ecological and geomorphological characteristics.

This thesis evaluates southeastern Nebraska as a specific regional setting for forensic taphonomic research by integrating ecological, pedological, and geomorphological data with current forensic literature. Tallgrass prairie vegetation, loess-derived soils, seasonal moisture variability, and dynamic fluvial …

Understanding Roma Oppression In Europe Through Humantarian Forensic Analysis, Christal L. Quinn

Department of Anthropology: Theses and Student Research

This thesis examines the marginalization of Roma people in Europe, and how humanitarian forensic practices may help Roma communities in their quest for justice and recognition. The study draws exclusively on secondary information to examine the social, political, and legal issues affecting the Roma communities, who have endured centuries of institutional discrimination, marginalization, and violence. This thesis identifies ways in which systematic oppression continues to limit Roma communities’ access to education, housing, healthcare, and legal protection through a review of relevant literature and applicable theoretical frameworks. The study also examines the relevance of forensic science, particularly its humanitarian applications, in …

Rehumanizing Anatomized Individuals: Using Osteobiographies As A Step Towards Reparative Justice, Lillie C. Turpin

Department of Anthropology: Theses and Student Research

In 1985, India banned the export of human remains. This ended the major trade route for primarily US and European anatomical supply companies. Until this point, companies like Carolina Biological Supply exploited and erased vulnerable people's identities, molding them into anonymous anatomical specimens. This study investigates the life and postmortem history of twenty-five individuals, previously used as anatomical specimens, housed at the University of Nebraska–Lincoln. Using an osteobiographical approach, this research reconstructs aspects of these individuals' lived experiences and examines how anatomical preparation practices reflect structural violence and apathy.

Skeletal analysis of twenty-five individuals revealed a range of biological profiles, …

Non-Destructive Automated Classification Of Human And Large Mammal Long Bone Fragments: A Deep Learning Approach Using Micro-Ct Histomorphology And Grad-Cam Interpretation, Kathleen Marie Kelley

Department of Anthropology: Theses and Student Research

This study explores the development and validation of an automated, deep learning system designed to differentiate human from large mammal long bone fragments using micro-CT imagery. A comprehensive dataset of cross-sectional µCT images was assembled from human and animal skeletal material processed at the DPAA, Nebraska. A convolutional neural network (CNN) based on a ResNet-18 architecture, utilizing transfer learning from ImageNet weights, was trained to classify µCT images as human or animal. The model achieved a mean classification accuracy of 89.85% (± 8.27%) across five sample-level cross-validation folds, with a sensitivity of 96.21% and a 95% bootstrap confidence interval of …

Decomposition Study Using Pigs In Southeastern Nebraska During The Fall And Winter Seasons, Ryan Bodine

Department of Anthropology: Theses and Student Research

When an individual is found deceased, one of the tools used in the identification process is estimating the post-mortem interval (PMI). This estimate is used to determine how long an individual has been deceased once their remains are found. To estimate an accurate PMI, knowing how decomposition is affected by external factors is key. The transition period from fall to winter in southeastern Nebraska consists of fluctuating temperatures as the seasons transfer from fall to winter. This thesis investigates how decomposition is affected during this transition period while also looking at two different environments that are common in Nebraska, prairies …