Forensic Science and Technology Commons^™

Spectral Signatures Of Immature Lucilia Sericata (Meigen) (Diptera: Calliphoridae), Jodie-A. Warren, T. D. Pulindu Ratnasekera, David A. Campbell, Gail S. Anderson

Faculty Research, Scholarly, and Creative Activity

Hyperspectral remote sensing is an innovative technology with applications in many sciences and is a non-destructive method that may offer more precise aging within development stages. Hyperspectral reflectance measurements from the anterior, midsection, and posterior of Lucilia sericata (Meigen) larvae and pupae were conducted daily from samples of the developing insects beginning at second instar. Only midsection measurements were conducted on second instar larvae due to their size, to ensure that the measurement was not of reflective surroundings. Once measured, all insects were washed with deionized water, blotted with filter paper, and re-measured. Daily age prediction during the post-feeding stage …

Innovative Silver-Based Catalyst For Oxidation Of Methane To Methanol, Ashley Gordon

Discovery Day (formerly Post & Beyond)

Methane is a main component of many natural gas reserves. It is fundamental for an effective method to be developed for inexpensive and abundant methane to be converted to value added chemicals, such as methanol, formaldehyde, acetic acid, carbon monoxide, and fuel. The primary goal of this research is for the development of an innovative silver-based catalyst for effective conversion of methane to methanol. The Ag-based solution we developed can be tuned to be either acidic or basic to adapt to different catalyst support. The solution was characterized by Ultraviolet-visible spectroscopy and the Ag adsorption was determined. The heterogeneous catalyst …

Development Of A Novel Cu-Zn Based Heterogeneous Catalyst For Direct Methane Conversion, Wan Yee Lam

Discovery Day (formerly Post & Beyond)

Many researchers are working on an efficient method to convert methane into methanol because the main cause of global warming is due to the burning of petroleum, which emits greenhouse gases. The extraction of crude oil would pollute our environment. The present method of methanol production is inefficient and generally yields less than 5%. Moreover, the traditional two-step process is very expensive and energy intensive. Therefore, the primary objective of my research is to develop a novel Cu-Zn based heterogeneous catalyst to enhance the catalytic conversion of methane for the synthesis of value added chemical such as methanol. The Cu-Zn-based …

Quantitative Analysis Of Opioids And Cannabinoids In Wastewater Samples, Alethea Jacox, Jillian Wetzel, Shu-Yuan Cheng, Marta Concheiro-Guisan

Publications and Research

Wastewater-based epidemiology is an innovative approach that uses the analysis of human excretion products in wastewater to obtain information about exposure to drugs in defined population groups. We developed and validated an analytical method for the simultaneous determination of opioids (morphine, oxycodone, hydrocodone, oxymorphone and hydromorphone), and cannabinoids (Δ⁹-tetrahydrocannabinol, 11-nor-9-carboxy-tetrahydrocannabinol (THCCOOH) and THCCOOH-glucuronide) in raw-influent wastewater samples by ultra-high performance liquid chromatography-tandem mass spectrometry. Method validation included linearity (5–1 000 ng/L for opioids, 10–1 000 ng/L for cannabinoids), imprecision (<21.2%), accuracy (83%–131%), matrix effect (from –35.1% to –14.7%) and extraction efficiency (25%–84%), limit of detection (1–5 ng/L) and quantification (5–10 ng/L) and auto-sampler stability (no loss detected). River and wastewater samples were collected in triplicate from different locations in New York City and stored at −20 °C until analysis. Water from sewage overflow location tested positive for morphine (10.7 ng/L), oxycodone (4.2–23.5 ng/L), oxymorphone (4.8 ng/L) and hydromorphone (4.2 ng/L). Raw influent wastewater samples tested positive for morphine (133.0–258.3 ng/L), oxycodone (31.1–63.6 ng/L), oxymorphone (16.0–56.8 ng/L), hydromorphone (6.8–18.0 ng/L), hydrocodone (4.0–12.8 ng/L) and THCCOOH (168.2–772.0 ng/L). This method is sensitive and specific for opioids and marijuana determination in wastewater samples.

The Use Of Raman Spectroscopy For The Identification Of Forensically Relevant Body Fluid Stains, Tyler Schlagetter, Claire L. Glynn, Brooke Weinger Kammrath

Forensic Science Publications

Raman spectroscopy is fast becoming a popular technique in the forensic science discipline, and more recently its focus has turned to biological samples. This study reveals the ability of Raman spectroscopy to identify some forensically relevant body fluids, both individually and within mixed samples, that can be crucial in some forensic investigations. This study also further demonstrates the capabilities of Raman as a means for human blood identification in simulated crime scene samples to include bloodstains on a variety of fabrics, at varying dilutions, following laundering, and with the use of various blood-enhancement reagents. The impact of washing and blood-enhancement …

Changes In J-Soap-Ii And Savry Scores Over The Course Of Residential, Cognitive-Behavioral Treatment For Adolescent Sexual Offending, Jodi L. Viljoen, Andrew L. Gray, Catherine Shaffer, Natasha E. Latzman, Mario Scalora, Daniel Ullman

Department of Psychology: Faculty Publications

Although the Juvenile Sex Offender Assessment Protocol–II (J-SOAP-II) and the Structured Assessment of Violence Risk in Youth (SAVRY) include an emphasis on dynamic, or modifiable factors, there has been little research on dynamic changes on these tools. To help address this gap, we compared admission and discharge scores of 163 adolescents who attended a residential, cognitive-behavioral treatment program for sexual offending. Based on reliable change indices, one half of youth showed a reliable decrease on the J-SOAP-II Dynamic Risk Total Score and one third of youth showed a reliable decrease on the SAVRY Dynamic Risk Total Score. Contrary to expectations, …

Drop (Drone Open Source Parser) Your Drone: Forensic Analysis Of The Dji Phantom Iii, Devon R. Clark, Christopher S. Meffert, Ibrahim Baggili, Frank Breitinger

Electrical & Computer Engineering and Computer Science Faculty Publications

The DJI Phantom III drone has already been used for malicious activities (to drop bombs, remote surveillance and plane watching) in 2016 and 2017. At the time of writing, DJI was the drone manufacturer with the largest market share. Our work presents the primary thorough forensic analysis of the DJI Phantom III drone, and the primary account for proprietary file structures stored by the examined drone. It also presents the forensically sound open source tool DRone Open source Parser (DROP) that parses proprietary DAT files extracted from the drone's nonvolatile internal storage. These DAT files are encrypted and encoded. The …

Convicting The Innocent Redux, Brandon L. Garrett

Faculty Scholarship

No abstract provided.

Adjudicating Death: Professionals Or Politicians?, Stephen J. Choi, Mitu Gulati

Faculty Scholarship

Variation exists in how death examinations take place in the United States. In some counties and states decisions about autopsies and the issuance of death certificates are made by a local coroner who often needs nothing more than a high school diploma to run for election to the job of coroner. In other counties and states, an appointed medical professional performs the death examination. We provide preliminary tests of the difference in performance between death examination offices run by appointed medical professionals compared with elected coroners. We find that death examiner offices in elected coroner states are less likely to …

Approximate Bayesian Computation In Forensic Science, Jessie H. Hendricks

The Journal of Undergraduate Research

Forensic evidence is often an important factor in criminal investigations. Analyzing evidence in an objective way involves the use of statistics. However, many evidence types (i.e., glass fragments, fingerprints, shoe impressions) are very complex. This makes the use of statistical methods, such as model selection in Bayesian inference, extremely difficult.

Approximate Bayesian Computation is an algorithmic method in Bayesian analysis that can be used for model selection. It is especially useful because it can be used to assign a Bayes Factor without the need to directly evaluate the exact likelihood function - a difficult task for complex data. Several criticisms …

Testing A Novel 3d Printed Radiographic Imaging Device For Use In Forensic Odontology, Tara L. Newcomb, Ann M. Bruhn, Bridget Giles, Hector M. Garcia, M. Arch, Norou Diawara

Dental Hygiene Faculty Publications

There are specific challenges related to forensic dental radiology and difficulties in aligning X-ray equipment to teeth of interest. Researchers used 3D printing to create a new device, the combined holding and aiming device (CHAD), to address the positioning limitations of current dental X-ray devices. Participants (N = 24) used the CHAD, soft dental wax, and a modified external aiming device (MEAD) to determine device preference, radiographer's efficiency, and technique errors. Each participant exposed six X-rays per device for a total of 432 X-rays scored. A significant difference was found at the 0.05 level between the three devices ( …

Availability Of Datasets For Digital Forensics–And What Is Missing, Cinthya Grajeda, Frank Breitinger, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

This paper targets two main goals. First, we want to provide an overview of available datasets that can be used by researchers and where to find them. Second, we want to stress the importance of sharing datasets to allow researchers to replicate results and improve the state of the art. To answer the first goal, we analyzed 715 peer-reviewed research articles from 2010 to 2015 with focus and relevance to digital forensics to see what datasets are available and focused on three major aspects: (1) the origin of the dataset (e.g., real world vs. synthetic), (2) if datasets were released …

Exploring Myths In Digital Forensics: Separating Science From Ritual, Gary C. Kessler, Gregory H. Carlton

Publications

Digital forensic methodology deviates significantly relative to the methods of other forensic sciences for numerous practical reasons, and it has been largely influenced by factors derived from the inception and evolution of this relatively new and rapidly changing field. Digital forensics methodology was developed more by practitioners in its early days rather than by computer scientists. This led to accepted best practices in the field that may not represent the best or, at least, tested, science. This paper explores some of these differences in the practice and evolution between digital and other forensic sciences, and recommends scientific approaches to apply …

Optimizing Laboratory Pyrolysis Methods To Compliment Real World Fire Debris, Richard Coulson

Electronic Theses and Dissertations

Forensic analysts are tasked with determining the presence of ignitable liquid residue in fire debris. Analysis of fire debris allows the analyst to understand how the fire occurred. However, the presence of some substrates can potentially impact the identification of ignitable liquid residue and classification of a sample as positive or negative for the presence of ignitable liquid. Pyrolysis of building materials and furnishings (substrates) lead to background interference within the resulting chromatographic profile. To combat misclassification of a sample as positive for ignitable liquid residue, knowledge of the pyrolysis products from individual substrates is of utmost importance. However, unburned …

Leveraging The Srtp Protocol For Over-The-Network Memory Acquisition Of A Ge Fanuc Series 90-30, George Denton, Filip Karpisek, Frank Breitinger, Ibrahim Baggili

Electrical & Computer Engineering and Computer Science Faculty Publications

Programmable Logic Controllers (PLCs) are common components implemented across many industries such as manufacturing, water management, travel, aerospace and hospitals to name a few. Given their broad deployment in critical systems, they became and still are a common target for cyber attacks; the most prominent one being Stuxnet. Often PLCs (especially older ones) are only protected by an outer line of defense (e.g., a firewall) but once an attacker gains access to the system or the network, there might not be any other defense layers. In this scenario, a forensic investigator should not rely on the existing software as it …

The Impact Of Md5 File Hash Collisions On Digital Forensic Imaging, Gary C. Kessler

Journal of Digital Forensics, Security and Law

The Message Digest 5 (MD5) hash is commonly used as for integrity verification in the forensic imaging process. The ability to force MD5 hash collisions has been a reality for more than a decade, although there is a general consensus that hash collisions are of minimal impact to the practice of computer forensics. This paper describes an experiment to determine the results of imaging two disks that are identical except for one file, the two versions of which have different content but otherwise occupy the same byte positions on the disk, are the same size, and have the same hash …

A New Distributed Chinese Wall Security Policy Model, Saad Fehis, Omar Nouali, Mohand-Tahar Kechadi

Journal of Digital Forensics, Security and Law

The application of the Chinese wall security policy model (CWSPM) to control the information flows between two or more competing and/or conflicting companies in cloud computing (Multi-tenancy) or in the social network, is a very interesting solution. The main goal of the Chinese Wall Security Policy is to build a wall between the datasets of competing companies, and among the system subjects. This is done by the applying to the subjects mandatory rules, in order to control the information flow caused between them. This problem is one of the hottest topics in the area of cloud computing (as a distributed …

Leveraging The Windows Amcache.Hve File In Forensic Investigations, Bhupendra Singh, Upasna Singh

Journal of Digital Forensics, Security and Law

The Amcache.hve is a registry hive file that is created by Microsoft® Windows® to store the information related to execution of programs. This paper highlights the evidential potential of Amcache.hve file and its application in the area of user activity analysis. The study uncovers numerous artifacts retained in Amcache.hve file when a user performs certain actions such as running host-based applications, installation of new applications, or running portable applications from external devices. The results of experiments demonstrate that Amcache.hve file stores intriguing artifacts related to applications such as timestamps of creation and last modification of any application; name, description, publisher …

Bloom Filters Optimized Wu-Manber For Intrusion Detection, Monther Aldwairi, Koloud Al-Khamaiseh, Fatima Alharbi, Babar Shah

Journal of Digital Forensics, Security and Law

With increasing number and severity of attacks, monitoring ingress and egress network traffic is becoming essential everyday task. Intrusion detection systems are the main tools for capturing and searching network traffic for potential harm. Signature-based intrusion detection systems are the most widely used, and they simply use a pattern matching algorithms to locate attack signatures in intercepted network traffic. Pattern matching algorithms are very expensive in terms of running time and memory usage, leaving intrusion detection systems unable to detect attacks in real-time. We propose a Bloom filters optimized Wu-Manber pattern matching algorithm to speed up intrusion detection. The Bloom …

The Impact Of Sha-1 File Hash Collisions On Digital Forensic Imaging: A Follow-Up Experiment, Gary C. Kessler

Journal of Digital Forensics, Security and Law

A previous paper described an experiment showing that Message Digest 5 (MD5) hash collisions of files have no impact on integrity verification in the forensic imaging process. This paper describes a similar experiment applied when two files have a Secure Hash Algorithm (SHA-1) collision.