Fors 401: Forensic Biochemistry—A Peer Review Of Teaching Project Inquiry Portfolio,
2015
University of Nebraska-Lincoln
Fors 401: Forensic Biochemistry—A Peer Review Of Teaching Project Inquiry Portfolio, Ashley Hall
UNL Faculty Course Portfolios
Students who participate in active and experiential learning activities develop a better understanding of basic scientific principles and are also more likely to be retained in a STEM discipline. Developing such activities, however, can be difficult. In the present study, we sought to develop classroom activities to engage university students and increase understanding of the theory and practice of forensic science. One common accessory amongst the target audience was the ever-present media, both social and popular (entertainment). In fact, a majority of students report watching at least one of the many popular forensic science shows on TV. Therefore, we hypothesized …
Identification And Exploitation Of Inadvertent Spectral Artifacts In Digital Audio,
2015
The MITRE Corporation
Identification And Exploitation Of Inadvertent Spectral Artifacts In Digital Audio, N. C. Donnangelo, W. S. Kuklinski, R. Szabo, R. A. Coury, G. R. Hamshar
Journal of Digital Forensics, Security and Law
We show that modulation products from local oscillators in a variety of commercial camcorders are coupled into the recorded audio track, creating narrow band time invariant spectral features. These spectral features, left largely intact by transcoding, compression and other forms of audiovisual post processing, can encode characteristics of specific camcorders used to capture the audio files, including the make and model. Using data sets both downloaded from YouTube and collected under controlled laboratory conditions we demonstrate an average probability of detection (Pd) approaching 0.95 for identification of a specific camcorder in a population of thousands of similar recordings, with a …
Computer Forensic Projects For Accountants,
2015
University of South Florida, St. Petersburg
Computer Forensic Projects For Accountants, Grover S. Kearns
Journal of Digital Forensics, Security and Law
Digital attacks on organizations are becoming more common and more sophisticated. Firms are interested in providing data security and having an effective means to respond to attacks. Accountants possess important investigative and analytical skills that serve to uncover fraud in forensic investigations. Some accounting students take courses in forensic accounting but few colleges offer a course in computer forensics for accountants. Educators wishing to develop such a course may find developing the curriculum daunting. A major element of such a course is the use of forensic software. This paper argues the importance of computer forensics to accounting students and offers …
Data Loss Prevention Management And Control: Inside Activity Incident Monitoring, Identification, And Tracking In Healthcare Enterprise Environments,
2015
Purdue University Calumet
Data Loss Prevention Management And Control: Inside Activity Incident Monitoring, Identification, And Tracking In Healthcare Enterprise Environments, Manghui Tu, Kimberly Spoa-Harty, Liangliang Xiao
Journal of Digital Forensics, Security and Law
As healthcare data are pushed online, consumers have raised big concerns on the breach of their personal information. Law and regulations have placed businesses and public organizations under obligations to take actions to prevent data breach. Among various threats, insider threats have been identified to be a major threat on data loss. Thus, effective mechanisms to control insider threats on data loss are urgently needed. The objective of this research is to address data loss prevention challenges in healthcare enterprise environment. First, a novel approach is provided to model internal threat, specifically inside activities. With inside activities modeling, data …
Rules Of Professional Responsibility In Digital Forensics: A Comparative Analysis,
2015
Purdue University
Rules Of Professional Responsibility In Digital Forensics: A Comparative Analysis, Filipo Sharevski
Journal of Digital Forensics, Security and Law
The consolidation of the rules of professional responsibility as recommended by the Committee on Identifying the Needs of Forensic Sciences Community (2009) accents the establishment of an uniform code of ethics emphasizing the importance of enforceability in strengthening the role the forensic science plays within the criminal justice system. Equally pertinent for the domain of digital forensics, this imperative entails a research commitment in comparing and contrasting the respective codes of ethics to illustrate their “variety, specificity and enforceability” in order to inform the discussion on the regulative aspects of the digital forensic discipline. Accordingly, this paper reviews the professional …
On The Network Performance Of Digital Evidence Acquisition Of Small Scale Devices Over Public Networks,
2015
Stockholm University
On The Network Performance Of Digital Evidence Acquisition Of Small Scale Devices Over Public Networks, Irvin Homem, Spyridon Dosis
Journal of Digital Forensics, Security and Law
While cybercrime proliferates – becoming more complex and surreptitious on the Internet – the tools and techniques used in performing digital investigations are still largely lagging behind, effectively slowing down law enforcement agencies at large. Real-time remote acquisition of digital evidence over the Internet is still an elusive ideal in the combat against cybercrime. In this paper we briefly describe the architecture of a comprehensive proactive digital investigation system that is termed as the Live Evidence Information Aggregator (LEIA). This system aims at collecting digital evidence from potentially any device in real time over the Internet. Particular focus is made …
The "Bring Your Own Device" Conundrum For Organizations And Investigators: An Examination Of The Policy And Legal Concerns In Light Of Investigatory Challenges,
2015
University of Maryland University College
The "Bring Your Own Device" Conundrum For Organizations And Investigators: An Examination Of The Policy And Legal Concerns In Light Of Investigatory Challenges, Carla J. Utter, Alan Rea
Journal of Digital Forensics, Security and Law
In recent years, with the expansion of technology and the desire to downsize costs within the corporate culture, the technology trend has steered towards the integration of personally owned mobile devices (i.e. smartphones) within the corporate and enterprise environment. The movement, known as “Bring Your Own Device” (hereinafter referred to as “BYOD”), seeks to minimize or eliminate the need for two separate and distinct mobile devices for one employee. While taken at face value this trend seems favorable, the corporate policy and legal implications of the implementation of BYOD are further complicated by significant investigatory issues that far outweigh the …
Plc Forensics Based On Control Program Logic Change Detection,
2015
University of Hong Kong
Plc Forensics Based On Control Program Logic Change Detection, Ken Yau, Kam-Pui Chow
Journal of Digital Forensics, Security and Law
Supervisory Control and Data Acquisition (SCADA) system is an industrial control automated system. It is built with multiple Programmable Logic Controllers (PLCs). PLC is a special form of microprocessor-based controller with proprietary operating system. Due to the unique architecture of PLC, traditional digital forensic tools are difficult to be applied. In this paper, we propose a program called Control Program Logic Change Detector (CPLCD), it works with a set of Detection Rules (DRs) to detect and record undesired incidents on interfering normal operations of PLC. In order to prove the feasibility of our solution, we set up two experiments for …
Factors Influencing Digital Forensic Investigations: Empirical Evaluation Of 12 Years Of Dubai Police Cases,
2015
University of Central Lancashire
Factors Influencing Digital Forensic Investigations: Empirical Evaluation Of 12 Years Of Dubai Police Cases, Ibtesam Alawadhi, Janet C. Read, Andrew Marrington, Virginia N. L. Franqueira
Journal of Digital Forensics, Security and Law
In Digital Forensics, the number of person-hours spent on investigation is a key factor which needs to be kept to a minimum whilst also paying close attention to the authenticity of the evidence. The literature describes challenges behind increasing person-hours and identifies several factors which contribute to this phenomenon. This paper reviews these factors and demonstrates that they do not wholly account for increases in investigation time. Using real case records from the Dubai Police, an extensive study explains the contribution of other factors to the increase in person-hours. We conclude this work by emphasizing on several factors affecting the …
Cyber Black Box/Event Data Recorder: Legal And Ethical Perspectives And Challenges With Digital Forensics,
2015
University of Louisville
Cyber Black Box/Event Data Recorder: Legal And Ethical Perspectives And Challenges With Digital Forensics, Michael Losavio, Pavel Pastukov, Svetlana Polyakova
Journal of Digital Forensics, Security and Law
With ubiquitous computing and the growth of the Internet of Things, there is vast expansion in the deployment and use of event data recording systems in a variety of environments. From the ships’ logs of antiquity through the evolution of personal devices for recording personal and environmental activities, these devices offer rich forensic and evidentiary opportunities that smash against rights of privacy and personality. The technical configurations of these devices provide for greater scope of sensing, interconnection options for local, near, and cloud storage of data, and the possibility of powerful analytics. This creates the unique situation of near-total data …
Two Challenges Of Stealthy Hypervisors Detection: Time Cheating And Data Fluctuations,
2015
National Research Nuclear University Moscow Engineering & Physics Institute
Two Challenges Of Stealthy Hypervisors Detection: Time Cheating And Data Fluctuations, Igor Korkin
Journal of Digital Forensics, Security and Law
Hardware virtualization technologies play a significant role in cyber security. On the one hand these technologies enhance security levels, by designing a trusted operating system. On the other hand these technologies can be taken up into modern malware which is rather hard to detect. None of the existing methods is able to efficiently detect a hypervisor in the face of countermeasures such as time cheating, temporary self uninstalling, memory hiding etc. New hypervisor detection methods which will be described in this paper can detect a hypervisor under these countermeasures and even count several nested ones. These novel approaches rely on …
Data Extraction On Mtk-Based Android Mobile Phone Forensics,
2015
The University of Hong Kong
Data Extraction On Mtk-Based Android Mobile Phone Forensics, Joe Kong
Journal of Digital Forensics, Security and Law
In conducting criminal investigations it is quite common that forensic examiners need to recover evidentiary data from smartphones used by offenders. However, examiners encountered difficulties in acquiring complete memory dump from MTK Android phones, a popular brand of smartphones, due to a lack of technical knowledge on the phone architecture and that system manuals are not always available. This research will perform tests to capture data from MTK Android phone by applying selected forensic tools and compare their effectiveness by analyzing the extracted results. It is anticipated that a generic extraction tool, once identified, can be used on different brands …
Exploring The Use Of Plc Debugging Tools For Digital Forensic Investigations On Scada Systems,
2015
University of Oxford
Exploring The Use Of Plc Debugging Tools For Digital Forensic Investigations On Scada Systems, Tina Wu, Jason R.C. Nurse
Journal of Digital Forensics, Security and Law
The Stuxnet malware attack has provided strong evidence for the development of a forensic capability to aid in thorough post-incident investigations. Current live forensic tools are typically used to acquire and examine memory from computers running either Windows or Unix. This makes them incompatible with embedded devices found on SCADA systems that have their own bespoke operating system. Currently, only a limited number of forensics tools have been developed for SCADA systems, with no development of tools to acquire the program code from PLCs. In this paper, we explore this problem with two main hypotheses in mind. Our first hypothesis …
Forensic Acquisition Of Imvu: A Case Study,
2015
National Police of the Netherlands
Forensic Acquisition Of Imvu: A Case Study, Robert Van Voorst, M-Tahar Kechadi, Nhien-An Le-Khac
Journal of Digital Forensics, Security and Law
There are many applications available for personal computers and mobile devices that facilitate users in meeting potential partners. There is, however, a risk associated with the level of anonymity on using instant message applications, because there exists the potential for predators to attract and lure vulnerable users. Today Instant Messaging within a Virtual Universe (IMVU) combines custom avatars, chat or instant message (IM), community, content creation, commerce, and anonymity. IMVU is also being exploited by criminals to commit a wide variety of offenses. However, there are very few researches on digital forensic acquisition of IMVU applications. In this paper, we …
Tracking And Taxonomy Of Cyberlocker Link Sharers Based On Behavior Analysis,
2015
The University of Hong Kong
Tracking And Taxonomy Of Cyberlocker Link Sharers Based On Behavior Analysis, Xiao-Xi Fan, Kam-Pui Chow
Journal of Digital Forensics, Security and Law
The growing popularity of cyberlocker service has led to significant impact on the Internet that it is considered as one of the biggest contributors to the global Internet traffic estimated to be illegally traded content. Due to the anonymity property of cyberlocker, it is difficult for investigators to track user identity directly on cyberlocker site. In order to find the potential relationships between cyberlocker users, we propose a framework to collect cyberlocker related data from public forums where cyberlocker users usually distribute cyberlocker links for others to download and identity information can be gathered easily. Different kinds of sharing behaviors …
A Survey Of Botnet Detection Techniques By Command And Control Infrastructure,
2015
Norwich University
A Survey Of Botnet Detection Techniques By Command And Control Infrastructure, Thomas S. Hyslip, Jason M. Pittman
Journal of Digital Forensics, Security and Law
Botnets have evolved to become one of the most serious threats to the Internet and there is substantial research on both botnets and botnet detection techniques. This survey reviewed the history of botnets and botnet detection techniques. The survey showed traditional botnet detection techniques rely on passive techniques, primarily honeypots, and that honeypots are not effective at detecting peer-to-peer and other decentralized botnets. Furthermore, the detection techniques aimed at decentralized and peer-to-peer botnets focus on detecting communications between the infected bots. Recent research has shown hierarchical clustering of flow data and machine learning are effective techniques for detecting botnet peer-to-peer …
Multiple Stain Histology Of Skeletal Fractures: Healing And Microtaphonomy,
2015
University of South Florida
Multiple Stain Histology Of Skeletal Fractures: Healing And Microtaphonomy, John Wellington Powell
USF Tampa Graduate Theses and Dissertations
The forensic examination of wounds is one of the key elements of analysis performed by forensic anthropologists and forensic pathologists. Gross examination and histological analysis can be used to determine the timing of the wound and its cause. While forensic pathologists are trained to analyze hard and soft tissue wounds, forensic anthropologists, bioarchaeologists, and paleopathologists, focus on hard tissue. Forensic anthropologists have the added benefit of potentially working with residual soft tissue and would benefit from the incorporation of microscopy techniques that take advantage of the soft tissue to better understand perimortem events. Little research has been published that examines …
A Novel Method For Confirming The Presence Of Volatile Reduced Sulfide Compounds Via Inductively Coupled Plasma-Optical Emission Spectroscopy,
2014
University of Southern Mississippi
A Novel Method For Confirming The Presence Of Volatile Reduced Sulfide Compounds Via Inductively Coupled Plasma-Optical Emission Spectroscopy, Krystal Lynne Parker
Master's Theses
Millions of dollars in destruction in the past decade have resulted from the use of Chinese drywall in homes. There are also potential health hazards related to this corrosive material. As such, it is important to find a way to identify Chinese drywall. Drywall can be tested for certain markers, such as strontium, sulfur, and carbonates to identify it as corrosive Chinese drywall. The laboratory preparation and analysis should be efficient and cost effective. The methods previously used, such as an X-ray fluorescence gun have had issues with getting a proper reading due to the layers of other materials found …
Bite Marks On Skin And Clay: A Comparative Analysis,
2014
Salman Bin Abdul Aziz University,
Bite Marks On Skin And Clay: A Comparative Analysis, R K. Gorea, O. P. Jasuja, Abdulwahab Ali Abuderman, Abhinav Gorea
Research outputs 2014 to 2021
Bite marks are always unique because teeth are distinctive. Bite marks are often observed at the crime scene in sexual and in physical assault cases on the skin of the victims and sometimes on edible leftovers in burglary cases. This piece of evidence is often ignored, but if properly harvested and investigated, bite marks may prove useful in apprehending and successfully prosecuting the criminals. Due to the importance of bite marks, we conducted a progressive randomised experimental study conducted on volunteers. A total of 188 bite marks on clay were studied. Based on these findings, 93.34% of the volunteers could …
Reliability Of Eyewitness Reports To A Major Aviation Accident,
2014
Arizona State University
Reliability Of Eyewitness Reports To A Major Aviation Accident, Dave English, Michael Kuzel
International Journal of Aviation, Aeronautics, and Aerospace
There is a paucity of studies on the reliability of eyewitness reports to aviation crashes. We examine witness statements to a widely observed major airline accident to determine if reported accident investigator distrust of details in eyewitness reports is supported by empirical evidence. The extensive archival witness record (N > 300) of a wide-body airliner crash in clear daylight conditions is subjected to statistical analysis to test eyewitness reliability. Even with over 200 witnesses within a three square kilometre (1.6 square mile) area answering a binary observation question, the variance is sometimes high enough to preclude forming statistically significant conclusions …
