Forensic Science and Technology Commons^™

Assessing The Detectability Of Cannabinoid Analogs (Delta-8 Thc, Delta-10 Thc And Cbd) And Their Major Metabolites In Six Commercial Cannabinoid Urine Screening Kits, Ashley A. Pokhai

Master of Science in Forensic Science Directed Research Projects

Background:

There has been an exponential surge in the presence and use of cannabinoids since the federal legalization of hemp (Agricultural Improvement Act of 2018), which involves the legalization of medical use, adult recreational use, and decriminalization of cannabis in several states. This growth is not only attributed to ∆9-tetrahydrocannabinol (∆9-THC) and cannabidiol (CBD), the most abundant phytocannabinoid components of cannabis and hemp, respectively, but with many other emerging THC analogs. Structurally, these analogs are similar to ∆9-THC, yet very little information is available about their potency and even less information is available regarding their detectability using commercially available cannabinoid …

A Low-Cost Machine Learning Based Network Intrusion Detection System With Data Privacy Preservation, Jyoti Fakirah, Lauhim Mahfuz Zishan, Roshni Mooruth, Michael L. Johnstone, Wencheng Yang

Annual ADFSL Conference on Digital Forensics, Security and Law

Network intrusion is a well-studied area of cyber security. Current machine learning-based network intrusion detection systems (NIDSs) monitor network data and the patterns within those data but at the cost of presenting significant issues in terms of privacy violations which may threaten end-user privacy. Therefore, to mitigate risk and preserve a balance between security and privacy, it is imperative to protect user privacy with respect to intrusion data. Moreover, cost is a driver of a machine learning-based NIDS because such systems are increasingly being deployed on resource-limited edge devices. To solve these issues, in this paper we propose a NIDS …

Human-Controlled Fuzzing With Afl, Maxim Grishin, Igor Korkin, Phd

Annual ADFSL Conference on Digital Forensics, Security and Law

Fuzzing techniques are applied to reveal different types of bugs and vulnerabilities. American Fuzzy Lop (AFL) is a free most popular software fuzzer used by many other fuzzing frameworks. AFL supports autonomous mode of operation that uses the previous step output into the next step, as a result fuzzer spends a lot of time analyzing minor code sections. By making fuzzing process more focused and human controlled security expert can save time and find more bugs in less time. We designed a new module that can fuzz only the specified functions. As a result, the chosen ones will be inspected …

The Amorphous Nature Of Hackers: An Exploratory Study, Kento Yasuhara, Daniel Walnycky, Ibrahim Baggili, Ahmed Alhishwan

Annual ADFSL Conference on Digital Forensics, Security and Law

In this work, we aim to better understand outsider perspectives of the hacker community through a series of situation based survey questions. By doing this, we hope to gain insight into the overall reputation of hackers from participants in a wide range of technical and non-technical backgrounds. This is important to digital forensics since convicted hackers will be tried by people, each with their own perception of who hackers are. Do cyber crimes and national security issues negatively affect people’s perceptions of hackers? Does hacktivism and information warfare positively affect people’s perception of hackers? Do individual personality factors affect one’s …

Death Scene Insect Succession In Nebraska: A Guidebook, Erin Bauer, Larry Barksdale, Emma Sidel, Justine Laviolette

Department of Entomology: Faculty Publications

Insect behavior can be helpful to law enforcement in determining time of death, manner of death, location, and environment related to human or other animal victims found at a death scene. They may also provide clues about other aspects associated with an investigation (i.e., fly specks, suspect DNA). The study of how insects and related arthropods can aid in legal investigations is known as forensic entomology. Although this includes both civil applications, such as urban (i.e., maggots in mortuaries or insect structural damage) or stored product (i.e., illness from food contamination) entomology, this manual focuses on criminal applications, such as …

Internal Validation Of Mastr™ Probabilistic Genotyping Software For The Interpretation Of 2–5 Person Mixed Dna Profiles, Michael S. Adamowicz, Taylor N. Rambo, Jennifer L. Clarke

Forensic Science: Faculty Publications

Mixed human deoxyribonucleic acid (DNA) samples present one of the most challenging pieces of evidence that a forensic analyst can encounter. When multiple contributors, stochastic amplification, and allele drop-out further complicate the mixture profile, interpretation by hand becomes unreliable and statistical analysis problematic. Probabilistic genotyping software has provided a tool to address complex mixture interpretation and provide likelihood ratios for defined sets of propositions. The MaSTR™ software is a fully continuous probabilistic system that considers a wide range of STR profile data to provide likelihood ratios on DNA mixtures. Mixtures with two to five contributors and a range of component …

Analysis Of Forensically Relevant Evidence Using Electrochemistry, Spectroscopy, And Mass Spectrometry Tools, Colby Edward Ott

Graduate Theses, Dissertations, and Problem Reports (ETD)

Forensic science relies on the use of multiple techniques in the assessment of evidence to increase the accuracy and reliability of the results. However, with the rapidly changing drug landscape due to the introduction of novel psychoactive substances, many traditional screening methods are no longer sensitive or selective enough for use. Additionally, many screening methods such as chemical color tests are prone to false positive and negative results and are subjective. Therefore, the goal of this dissertation was to develop a novel analytical scheme that can provide a more efficient, rapid, and sensitive method that will facilitate adoption in the …

Digital Forensics For Mobility As A Service Platform: Analysis Of Uber Application On Iphone And Cloud, Nina Matulis, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Uber is a ride-hailing smartphone application (app) that allows users to order a ride in a highly efficient manner. The Uber app provides Mobility as a Service and allows users to easily order a ride in a private car with just a few clicks. Uber stores large amounts of data on both the mobile device the app is being used on, and in the cloud. Examples of this data include geolocation data, date/time, origin/destination addresses, departure/arrival times, and distance. Uber geolocation data has been previously researched to investigate the privacy of the Uber app; however, there is minimal research relating …

Smart Home Forensics: Identifying Ddos Attack Patterns On Iot Devices, Samuel Ho, Hope Greeson, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Smart homes are becoming more common as more people integrate IoT devices into their home environment. As such, these devices have access to personal data on their homeowners’ networks. One of the advantages of IoT devices is that they are compact. However, this limits the incorporation of security measures in their hardware. Misconfigured IoT devices are commonly the target of malicious attacks. Additionally, distributed denial-of-service attacks are becoming more common due to applications and software that provides users with easy-to-use user interfaces. Since one vulnerable device is all an attacker needs to launch an attack on a network, in regards …

Y-Chromosome Dna Extraction From Post-Cranial Skeletal Elements, Mykala D. Ward

Graduate Student Theses, Dissertations, & Professional Papers

The use of DNA in forensic science has become an integral tool for victim and perpetrator identifications, missing person’s cases, paternity testing, etc. A major use of DNA is in the identification of unknown deceased individuals. With a reported number of individuals well over 8,000 in the United States, improved methods to accurately collect and analyze DNA from modern human bone are needed.

This project took the preliminary steps to improve DNA sampling and extraction methods by analyzing the Y-chromosome DNA yield from the two bone types. While both types are composed of the same materials, cortical bone is the …

Analyzing The Viability Of Direct Pcr For Use In Conjunction With Cyanoacrylate Enhanced Fingerprints, Coral M. Smith

Graduate Theses, Dissertations, and Problem Reports (ETD)

Efficient methods for DNA analysis are desperately needed in laboratories due to the influx in DNA analysis requests. The current DNA processing methods are costly, time consuming, and involve multiple tube changes, increasing the risk of contamination. However, the use of direct PCR can simplify the DNA analysis process by eliminating the extraction, purification and quantitation steps. Presently, the FBI Quality Assurance Standard 9.4 requires all evidence samples to be quantitated. As a result, the direct PCR method of DNA processing cannot be implemented on evidence samples at this time. Direct PCR presents the opportunity to provide efficient DNA analysis, …

Microsoft Defender Will Be Defended: Memoryranger Prevents Blinding Windows Av, Denis Pogonin, Igor Korkin, Phd

Annual ADFSL Conference on Digital Forensics, Security and Law

Windows OS is facing a huge rise in kernel attacks. An overview of popular techniques that result in loading kernel drivers will be presented. One of the key targets of modern threats is disabling and blinding Microsoft Defender, a default Windows AV. The analysis of recent driver-based attacks will be given, the challenge is to block them. The survey of user- and kernel-level attacks on Microsoft Defender will be given. One of the recently published attackers’ techniques abuses Mandatory Integrity Control (MIC) and Security Reference Monitor (SRM) by modifying Integrity Level and Debug Privileges for the Microsoft Defender via syscalls. …

Detection Of Overlapping Passive Manipulation Techniques In Image Forensics, Gianna S. Lint, Umit Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

With a growing number of images uploaded daily to social media sites, it is essential to understand if an image can be used to trace its origin. Forensic investigations are focusing on analyzing images that are uploaded to social media sites resulting in an emphasis on building and validating tools. There has been a strong focus on understanding active manipulation or tampering techniques and building tools for analysis. However, research on manipulation is often studied in a vacuum, involving only one technique at a time. Additionally, less focus has been placed on passive manipulation, which can occur by simply uploading …

Development Of An Expert Algorithm For Substance Identification (Easi) To Discriminate Between Spectrally Similar Fentanyl Analogs In Mass Spectrometry, Alexandra Adeoye

Graduate Theses, Dissertations, and Problem Reports (ETD)

Fentanyl is an opioid that is about 100 times more potent than morphine, and its analogs are just as potent, and some like carfentanil are even more so potent. In recent years, fentanyl and its analogs have been responsible for over 50% of overdose-related deaths. In response, the DEA has placed all fentanyl analogs as Schedule I compounds because of their non-medicinal use and high potential for abuse and physical dependence. However, fentanyl analogs have high structural and mass spectral similarities due to the extremely conservative nature of the core fentanyl structure, which makes the differentiation and identification of fentanyl …

Mtdna Heteroplasmy In Hair Shafts Versus Buccal Swabs For Forensic Applications, Sara R. Bodnar

Graduate Theses, Dissertations, and Problem Reports (ETD)

Mitochondrial DNA (mtDNA) analysis has several forensic applications such as criminal investigations, identification of human remains, and missing person investigations. It is also the only type of DNA that is available from certain sample types such as hair shafts. The presence of mtDNA heteroplasmy within and between tissue types can lead to mtDNA sequence differences when comparing samples originating from the same individual. Studies on mtDNA heteroplasmy are increasingly being carried out for their implications in forensic interpretation of mtDNA sequences. Specifically, mtDNA in buccal swabs compared to hair samples from one individual may show differences in sequence due to …

Assessment Of Quechers Extraction Protocol For The Lc-Ms/Ms Detection Of Emerging Fentanyl Analogs In Biological Specimens For Clinical And Forensic Purposes, Kylea M. Morris

Graduate Theses, Dissertations, and Problem Reports (ETD)

Drug abuse within the United States is a dynamic and pervasive issue that affects the quality and life expectancy of our society. One of the major drug classes that are constantly utilized is opioids. Opioids are prescribed for pain management in patients suffering from cancer and other medical illnesses. Long-term use of opioids could lead to tolerance in humans, which poses a risk of reaching fatal overdose levels. Unfortunately, opioids are abused recreationally, and in some instances, individuals are unaware of the presence of dangerous synthetic drugs like fentanyl, hidden in materials such as heroin, cocaine, oxycodone, and methamphetamine. Recent …

Evaluating A Test For Shedding Propensity Using Tape Lifts From Different Skin Locations, Xiao M. Chen

Student Theses

The shedding propensity of a person can assist data interpretation in casework when assessing the possibility of passive transfer for DNA analysis. Past studies on shedding propensity evaluated palmar skin (washed and unwashed) deposits. This study compared different skin locations with respect to shedding propensity, and explored the potential of tape-lifts as a skin surface collection method. Eight different skin types and samples were collected with adhesive tape disks from 28 participants over three non-consecutive days; the washed and unwashed fingers from both hands, toe, and arm, neck below ear, and nape. Samples were extracted, quantified, amplified, genotyped, and evaluated …

Reproducibility Of Individual Dna Deposits Detected Through Cellular Fluorescence, Natalee Small-Davidson

Student Theses

Contact traces are an important part of DNA casework, but the probative value of any identified associations depends on the possibility of passive transfer. There is known individual variation in DNA left behind during contact, this DNA shedding propensity has an effect on whose DNA is detected. This study evaluated this variability using a cell staining approach. Volunteers were asked to deposit a fingerprint on a clean glass slide, then wash their hands and deposit a second fingerprint after a 30-minute wait without touching anything. Three sets of samples were collected over three consecutive weeks. Fingerprints were stained with a …

The Understanding Of Digital And Multimedia Evidence (Dme) By Attorneys And Digital Forensic Examiners (Dfe) Within The United States Criminal Justice System, Joseph Levi White

Dissertations

One goal of this research was to determine potential themes that may influence the understanding of Digital and Multimedia Evidence (DME) by attorneys and Digital Forensic Examiners (DFE) within the United States Criminal Justice System. Qualitative semi-structured interviews were conducted to gather information from experienced criminal attorneys and DFEs regarding potential influences on their understanding of DME. The results of these interviews were transcribed, and the data coded to allow for qualitative analysis. Five themes were developed from this data and are thought to play a role in understanding of DME by attorneys and DFEs: motivation for involvement in the …

Detecting Gsr Indicative Particles On Decayed Bones Using A Novel Field Kit, Sven Engling

Student Theses

Decomposed human remains are complex forensic puzzles, escalating in difficulty as the remains’ age obscures evidence, like trauma. Research has shown that scanning electron microscopes with energy dispersive X-ray spectrometers (SEM-EDX) are capable of detecting and identifying gunshot residue (GSR) particles on bones. However, SEM-EDX work is time consuming, expensive, and not accessible to every forensic department. Therefore, a preliminary field test capable of detecting GSR indicative particles, like lead, could save departments money and assist in trauma identification. This study examines the viability of using either the 3M Lead Check Test swabs or a sodium rhodizonate solution as part …