The Challenges Of Seizing And Searching The Contents Of Wi-Fi Devices For The Modern Investigator,
2015
Edith Cowan University
The Challenges Of Seizing And Searching The Contents Of Wi-Fi Devices For The Modern Investigator, Dan Blackman, Patryk Szewczyk
Australian Digital Forensics Conference
To the modern law enforcement investigator, the potential for an offender to have a mobile device on his or her person, who connects to a Wi-Fi network, may afford evidence to place them at a scene, at a particular time. Whilst tools to interrogate mobile devices and Wi-Fi networks, have undergone significant development, little research has been conducted with regards to interrogating Wi-Fi routers and the evidence they may contain. This paper demonstrates that multiple inhibiting factors exist for forensic investigators when attempting to extract data from Wi-Fi routers at the scene. Data volatility means the Wi-Fi router cannot be …
From The Editor-In-Chief,
2015
JDFSL
From The Editor-In-Chief, Ibrahim Baggili
Journal of Digital Forensics, Security and Law
Welcome to JDFSL’s first issue for 2015! First, I would like to thank our editorial board, reviewers, and the JDFSL team for bringing this issue to life. It has been a big year for JDFSL as the journal continues to progress. We are continuing our indexing efforts for the journal and we are getting closer with some of the major databases.
Police Opinions Of Digital Evidence Response Handling In The State Of Georgia: An Examination From The Viewpoint Of Local Agencies’ Patrol Officers,
2015
Nova Southeastern University
Police Opinions Of Digital Evidence Response Handling In The State Of Georgia: An Examination From The Viewpoint Of Local Agencies’ Patrol Officers, Tanya Macneil
CCAC Theses and Dissertations
This research examined opinions of local law enforcement agencies’ patrol officers in the State of Georgia regarding preparedness and expectations for handling of digital evidence. The increased criminal use of technology requires that patrol officers be prepared to handle digital evidence in many different situations. The researcher’s goal was to gain insight into how patrol officers view their preparedness to handle digital evidence as well as their opinions on management expectations regarding patrol officers’ abilities to handle digital evidence. The research focused on identifying whether a gap existed between patrol officers’ opinions of digital evidence and the patrol officers’ views …
Network And Device Forensic Analysis Of Android Social-Messaging Applications,
2015
University of New Haven
Network And Device Forensic Analysis Of Android Social-Messaging Applications, Daniel Walnycky, Ibrahim Baggili, Andrew Marrington, Jason Moore, Frank Breitinger
Electrical & Computer Engineering and Computer Science Faculty Publications
In this research we forensically acquire and analyze the device-stored data and network traffic of 20 popular instant messaging applications for Android. We were able to reconstruct some or the entire message content from 16 of the 20 applications tested, which reflects poorly on the security and privacy measures employed by these applications but may be construed positively for evidence collection purposes by digital forensic practitioners. This work shows which features of these instant messaging applications leave evidentiary traces allowing for suspect data to be reconstructed or partially reconstructed, and whether network forensics or device forensics permits the reconstruction of …
An Empirical Comparison Of Widely Adopted Hash Functions In Digital Forensics: Does The Programming Language And Operating System Make A Difference?,
2015
University of New Haven
An Empirical Comparison Of Widely Adopted Hash Functions In Digital Forensics: Does The Programming Language And Operating System Make A Difference?, Satyendra Gurjar, Ibrahim Baggili, Frank Breitinger, Alice E. Fischer
Electrical & Computer Engineering and Computer Science Faculty Publications
Hash functions are widespread in computer sciences and have a wide range of applications such as ensuring integrity in cryptographic protocols, structuring database entries (hash tables) or identifying known files in forensic investigations. Besides their cryptographic requirements, a fundamental property of hash functions is efficient and easy computation which is especially important in digital forensics due to the large amount of data that needs to be processed when working on cases. In this paper, we correlate the runtime efficiency of common hashing algorithms (MD5, SHA-family) and their implementation. Our empirical comparison focuses on C-OpenSSL, Python, Ruby, Java on Windows and …
Science 108-002h Essentials Of Forensic Science Hybrid Fall 2015,
2015
Parkland College
Science 108-002h Essentials Of Forensic Science Hybrid Fall 2015, Sybil Anderson
General Science
No abstract provided.
Strategies For Enhanced Genetic Analysis Of Trace Dna From Touch Dna Evidence And Household Dust,
2015
University of Central Florida
Strategies For Enhanced Genetic Analysis Of Trace Dna From Touch Dna Evidence And Household Dust, Katherine Farash
Electronic Theses and Dissertations
In forensic casework it is often necessary to obtain genetic profiles from crime scene samples that contain increasingly smaller amounts of genetic material, called Low Template DNA (LTDNA). Two examples of LTDNA sources are touch DNA evidence and dust bunnies. Touch DNA refers to DNA that is left behind through casual contact of a donor with an object or another person. Touch DNA can be used to prove a suspect was present at a crime scene. Dust bunnies, or dust conglomerates, typically contain trapped shed skin cells of anyone in the vicinity along with fibers, dirt, hair, and other trace …
Providing Context To The Clues: Recovery And Reliability Of Location Data From Android Devices,
2015
University of Central Florida
Providing Context To The Clues: Recovery And Reliability Of Location Data From Android Devices, Connie Bell
Electronic Theses and Dissertations
Mobile device data continues to increase in significance in both civil and criminal investigations. Location data is often of particular interest. To date, research has established that the devices are location aware, incorporate a variety of resources to obtain location information, and cache the information in various ways. However, a review of the existing research suggests varying degrees of reliability of any such recovered location data. In an effort to clarify the issue, this project offers case studies of multiple Android mobile devices utilized in controlled conditions with known settings and applications in documented locations. The study uses data recovered …
Litigation Holds: Past, Present, And Future Directions,
2015
Metropolitan State University
Litigation Holds: Past, Present, And Future Directions, Milton Luoma, Vicki M. Luoma
Journal of Digital Forensics, Security and Law
Electronically Stored Information (ESI) first became a serious litigation issue in the late 1990s, and the first attempts to determine best practices did not occur until the early 2000s. As best practices developed, the litigation hold to prevent routine destruction of documents and to preserve documents relevant to litigation came into existence. The duty to preserve ESI is triggered when litigation is reasonably anticipated. All information that relates to potential litigation must be preserved from the time it becomes reasonably apparent that litigation is possible until the expiration of the statute of limitations. If steps are not taken to properly …
Mass Fatality Incidents And The Role Of The Dental Hygienist: Are We Prepared?,
2015
Old Dominion University
Mass Fatality Incidents And The Role Of The Dental Hygienist: Are We Prepared?, Tara L. Newcomb, Ann M. Bruhn, Bridget Giles
Dental Hygiene Faculty Publications
Dental hygienists can fill critical roles during mass fatality incidents in the area of disaster victim identification, providing much needed support to forensic odontologists. The purpose of this paper is to bring awareness that research is needed to assess current dental hygiene programs, continuing education opportunities and the type of approach being used to develop and implement pedagogy in the forensic specialty area, specifically mass fatality preparedness and response for the dental hygienist. Because of the threat of terrorism in the U.S. and natural disasters like hurricanes, the need to prepare dental professionals in disaster response and fatality management is …
Multiple Stain Histology Of Skeletal Fractures: Healing And Microtaphonomy,
2015
University of South Florida
Multiple Stain Histology Of Skeletal Fractures: Healing And Microtaphonomy, John Wellington Powell
USF Tampa Graduate Theses and Dissertations
The forensic examination of wounds is one of the key elements of analysis performed by forensic anthropologists and forensic pathologists. Gross examination and histological analysis can be used to determine the timing of the wound and its cause. While forensic pathologists are trained to analyze hard and soft tissue wounds, forensic anthropologists, bioarchaeologists, and paleopathologists, focus on hard tissue. Forensic anthropologists have the added benefit of potentially working with residual soft tissue and would benefit from the incorporation of microscopy techniques that take advantage of the soft tissue to better understand perimortem events. Little research has been published that examines …
An Evaluation Of The Differential Stability Of Nucleic Acids In Biological Fluids Compromised By Degradative Treatments And Environmental Exposure,
2015
Virginia Commonwealth University
An Evaluation Of The Differential Stability Of Nucleic Acids In Biological Fluids Compromised By Degradative Treatments And Environmental Exposure, Tiffany Layne
Master of Science in Forensic Science Directed Research Projects
In an attempt to determine the boundaries of degradation in nucleic acids with increased sensitivity, and provide support for a molecular method for body fluid identification, this study used specific treatments that are commonly found in crime scenes or are present in our daily environment to degrade DNA, messenger RNA, and microRNA in bodily fluids. Recently, the forensic science field has explored the use of RNAs regarding a molecular-based method for forensic body fluid identification. Specifically, messenger RNAs and microRNAs have been researched as markers for body fluids. Messenger RNAs are multifunctional and are shorter than DNA and some are …
Fors 401: Forensic Biochemistry—A Peer Review Of Teaching Project Inquiry Portfolio,
2015
University of Nebraska-Lincoln
Fors 401: Forensic Biochemistry—A Peer Review Of Teaching Project Inquiry Portfolio, Ashley Hall
UNL Faculty Course Portfolios
Students who participate in active and experiential learning activities develop a better understanding of basic scientific principles and are also more likely to be retained in a STEM discipline. Developing such activities, however, can be difficult. In the present study, we sought to develop classroom activities to engage university students and increase understanding of the theory and practice of forensic science. One common accessory amongst the target audience was the ever-present media, both social and popular (entertainment). In fact, a majority of students report watching at least one of the many popular forensic science shows on TV. Therefore, we hypothesized …
A Survey Of Botnet Detection Techniques By Command And Control Infrastructure,
2015
Norwich University
A Survey Of Botnet Detection Techniques By Command And Control Infrastructure, Thomas S. Hyslip, Jason M. Pittman
Journal of Digital Forensics, Security and Law
Botnets have evolved to become one of the most serious threats to the Internet and there is substantial research on both botnets and botnet detection techniques. This survey reviewed the history of botnets and botnet detection techniques. The survey showed traditional botnet detection techniques rely on passive techniques, primarily honeypots, and that honeypots are not effective at detecting peer-to-peer and other decentralized botnets. Furthermore, the detection techniques aimed at decentralized and peer-to-peer botnets focus on detecting communications between the infected bots. Recent research has shown hierarchical clustering of flow data and machine learning are effective techniques for detecting botnet peer-to-peer …
Data Loss Prevention Management And Control: Inside Activity Incident Monitoring, Identification, And Tracking In Healthcare Enterprise Environments,
2015
Purdue University Calumet
Data Loss Prevention Management And Control: Inside Activity Incident Monitoring, Identification, And Tracking In Healthcare Enterprise Environments, Manghui Tu, Kimberly Spoa-Harty, Liangliang Xiao
Journal of Digital Forensics, Security and Law
As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and public organizations under obligations to take actions to prevent data breach. Among various threats, insider threats have been identified to be a major threat on data loss. Thus, effective mechanisms to control insider threats on data loss are urgently needed. The objective of this research is to address data loss prevention challenges in healthcare enterprise environment. First, a novel approach is provided to model internal threat, specifically inside activities. With inside activities modeling, data …
To License Or Not To License Reexamined: An Updated Report On State Statutes Regarding Private Investigators And Digital Examiners,
2015
Roger Williams University
To License Or Not To License Reexamined: An Updated Report On State Statutes Regarding Private Investigators And Digital Examiners, Thomas Lonardo, Alan Rea, Doug White
Journal of Digital Forensics, Security and Law
In this update to the 2012 year's study, the authors examine statutes that regulate, license, and enforce investigative functions in each US state. As before, the authors find that very few state statutes explicitly differentiate between Private Investigators and Digital Examiners. There is a small trend in which some states are changing definitions or moving to exempt DE from PI licensing requirements. However, we look at some additional information in terms of practicing attorney exemptions that may cloud the licensing waters.
As with the previous research studies (Lonardo et al., 2008, 2009, 2012) the authors contacted all state regulatory agencies …
On The Network Performance Of Digital Evidence Acquisition Of Small Scale Devices Over Public Networks,
2015
Stockholm University
On The Network Performance Of Digital Evidence Acquisition Of Small Scale Devices Over Public Networks, Irvin Homem, Spyridon Dosis
Journal of Digital Forensics, Security and Law
While cybercrime proliferates – becoming more complex and surreptitious on the Internet – the tools and techniques used in performing digital investigations are still largely lagging behind, effectively slowing down law enforcement agencies at large. Real-time remote acquisition of digital evidence over the Internet is still an elusive ideal in the combat against cybercrime. In this paper we briefly describe the architecture of a comprehensive proactive digital investigation system that is termed as the Live Evidence Information Aggregator (LEIA). This system aims at collecting digital evidence from potentially any device in real time over the Internet. Particular focus is made …
A 3-D Stability Analysis Of Lee Harvey Oswald In The Backyard Photo,
2015
Dartmouth College
A 3-D Stability Analysis Of Lee Harvey Oswald In The Backyard Photo, Srivamshi Pittala, Emily Whiting, Hany Farid
Journal of Digital Forensics, Security and Law
Fifty years have passed since the assassination of U.S. President Kennedy. Despite the long passage of time, it is still argued that the famous backyard photo of Oswald, holding the same type of rifle used to assassinate the President, is a fake. These claims include, among others, that Oswald’s pose in the photo is physically implausible. We describe a detailed 3-D stability analysis to determine if this claim is warranted.
Computer Forensic Projects For Accountants,
2015
University of South Florida, St. Petersburg
Computer Forensic Projects For Accountants, Grover S. Kearns
Journal of Digital Forensics, Security and Law
Digital attacks on organizations are becoming more common and more sophisticated. Firms are interested in providing data security and having an effective means to respond to attacks. Accountants possess important investigative and analytical skills that serve to uncover fraud in forensic investigations. Some accounting students take courses in forensic accounting but few colleges offer a course in computer forensics for accountants. Educators wishing to develop such a course may find developing the curriculum daunting. A major element of such a course is the use of forensic software. This paper argues the importance of computer forensics to accounting students and offers …
Identification And Exploitation Of Inadvertent Spectral Artifacts In Digital Audio,
2015
The MITRE Corporation
Identification And Exploitation Of Inadvertent Spectral Artifacts In Digital Audio, N. C. Donnangelo, W. S. Kuklinski, R. Szabo, R. A. Coury, G. R. Hamshar
Journal of Digital Forensics, Security and Law
We show that modulation products from local oscillators in a variety of commercial camcorders are coupled into the recorded audio track, creating narrow band time invariant spectral features. These spectral features, left largely intact by transcoding, compression and other forms of audiovisual post processing, can encode characteristics of specific camcorders used to capture the audio files, including the make and model. Using data sets both downloaded from YouTube and collected under controlled laboratory conditions we demonstrate an average probability of detection (Pd) approaching 0.95 for identification of a specific camcorder in a population of thousands of similar recordings, with a …
