Legal Studies Commons^™

On The Network Performance Of Digital Evidence Acquisition Of Small Scale Devices Over Public Networks, Irvin Homem, Spyridon Dosis

Journal of Digital Forensics, Security and Law

While cybercrime proliferates – becoming more complex and surreptitious on the Internet – the tools and techniques used in performing digital investigations are still largely lagging behind, effectively slowing down law enforcement agencies at large. Real-time remote acquisition of digital evidence over the Internet is still an elusive ideal in the combat against cybercrime. In this paper we briefly describe the architecture of a comprehensive proactive digital investigation system that is termed as the Live Evidence Information Aggregator (LEIA). This system aims at collecting digital evidence from potentially any device in real time over the Internet. Particular focus is made …

The "Bring Your Own Device" Conundrum For Organizations And Investigators: An Examination Of The Policy And Legal Concerns In Light Of Investigatory Challenges, Carla J. Utter, Alan Rea

Journal of Digital Forensics, Security and Law

In recent years, with the expansion of technology and the desire to downsize costs within the corporate culture, the technology trend has steered towards the integration of personally owned mobile devices (i.e. smartphones) within the corporate and enterprise environment. The movement, known as “Bring Your Own Device” (hereinafter referred to as “BYOD”), seeks to minimize or eliminate the need for two separate and distinct mobile devices for one employee. While taken at face value this trend seems favorable, the corporate policy and legal implications of the implementation of BYOD are further complicated by significant investigatory issues that far outweigh the …

Plc Forensics Based On Control Program Logic Change Detection, Ken Yau, Kam-Pui Chow

Journal of Digital Forensics, Security and Law

Supervisory Control and Data Acquisition (SCADA) system is an industrial control automated system. It is built with multiple Programmable Logic Controllers (PLCs). PLC is a special form of microprocessor-based controller with proprietary operating system. Due to the unique architecture of PLC, traditional digital forensic tools are difficult to be applied. In this paper, we propose a program called Control Program Logic Change Detector (CPLCD), it works with a set of Detection Rules (DRs) to detect and record undesired incidents on interfering normal operations of PLC. In order to prove the feasibility of our solution, we set up two experiments for …

Factors Influencing Digital Forensic Investigations: Empirical Evaluation Of 12 Years Of Dubai Police Cases, Ibtesam Alawadhi, Janet C. Read, Andrew Marrington, Virginia N. L. Franqueira

Journal of Digital Forensics, Security and Law

In Digital Forensics, the number of person-hours spent on investigation is a key factor which needs to be kept to a minimum whilst also paying close attention to the authenticity of the evidence. The literature describes challenges behind increasing person-hours and identifies several factors which contribute to this phenomenon. This paper reviews these factors and demonstrates that they do not wholly account for increases in investigation time. Using real case records from the Dubai Police, an extensive study explains the contribution of other factors to the increase in person-hours. We conclude this work by emphasizing on several factors affecting the …

Cyber Black Box/Event Data Recorder: Legal And Ethical Perspectives And Challenges With Digital Forensics, Michael Losavio, Pavel Pastukov, Svetlana Polyakova

Journal of Digital Forensics, Security and Law

With ubiquitous computing and the growth of the Internet of Things, there is vast expansion in the deployment and use of event data recording systems in a variety of environments. From the ships’ logs of antiquity through the evolution of personal devices for recording personal and environmental activities, these devices offer rich forensic and evidentiary opportunities that smash against rights of privacy and personality. The technical configurations of these devices provide for greater scope of sensing, interconnection options for local, near, and cloud storage of data, and the possibility of powerful analytics. This creates the unique situation of near-total data …

Two Challenges Of Stealthy Hypervisors Detection: Time Cheating And Data Fluctuations, Igor Korkin

Journal of Digital Forensics, Security and Law

Hardware virtualization technologies play a significant role in cyber security. On the one hand these technologies enhance security levels, by designing a trusted operating system. On the other hand these technologies can be taken up into modern malware which is rather hard to detect. None of the existing methods is able to efficiently detect a hypervisor in the face of countermeasures such as time cheating, temporary self uninstalling, memory hiding etc. New hypervisor detection methods which will be described in this paper can detect a hypervisor under these countermeasures and even count several nested ones. These novel approaches rely on …

Data Extraction On Mtk-Based Android Mobile Phone Forensics, Joe Kong

Journal of Digital Forensics, Security and Law

In conducting criminal investigations it is quite common that forensic examiners need to recover evidentiary data from smartphones used by offenders. However, examiners encountered difficulties in acquiring complete memory dump from MTK Android phones, a popular brand of smartphones, due to a lack of technical knowledge on the phone architecture and that system manuals are not always available. This research will perform tests to capture data from MTK Android phone by applying selected forensic tools and compare their effectiveness by analyzing the extracted results. It is anticipated that a generic extraction tool, once identified, can be used on different brands …

Exploring The Use Of Plc Debugging Tools For Digital Forensic Investigations On Scada Systems, Tina Wu, Jason R.C. Nurse

Journal of Digital Forensics, Security and Law

The Stuxnet malware attack has provided strong evidence for the development of a forensic capability to aid in thorough post-incident investigations. Current live forensic tools are typically used to acquire and examine memory from computers running either Windows or Unix. This makes them incompatible with embedded devices found on SCADA systems that have their own bespoke operating system. Currently, only a limited number of forensics tools have been developed for SCADA systems, with no development of tools to acquire the program code from PLCs. In this paper, we explore this problem with two main hypotheses in mind. Our first hypothesis …

Forensic Acquisition Of Imvu: A Case Study, Robert Van Voorst, M-Tahar Kechadi, Nhien-An Le-Khac

Journal of Digital Forensics, Security and Law

There are many applications available for personal computers and mobile devices that facilitate users in meeting potential partners. There is, however, a risk associated with the level of anonymity on using instant message applications, because there exists the potential for predators to attract and lure vulnerable users. Today Instant Messaging within a Virtual Universe (IMVU) combines custom avatars, chat or instant message (IM), community, content creation, commerce, and anonymity. IMVU is also being exploited by criminals to commit a wide variety of offenses. However, there are very few researches on digital forensic acquisition of IMVU applications. In this paper, we …

Tracking And Taxonomy Of Cyberlocker Link Sharers Based On Behavior Analysis, Xiao-Xi Fan, Kam-Pui Chow

Journal of Digital Forensics, Security and Law

The growing popularity of cyberlocker service has led to significant impact on the Internet that it is considered as one of the biggest contributors to the global Internet traffic estimated to be illegally traded content. Due to the anonymity property of cyberlocker, it is difficult for investigators to track user identity directly on cyberlocker site. In order to find the potential relationships between cyberlocker users, we propose a framework to collect cyberlocker related data from public forums where cyberlocker users usually distribute cyberlocker links for others to download and identity information can be gathered easily. Different kinds of sharing behaviors …

A Survey Of Botnet Detection Techniques By Command And Control Infrastructure, Thomas S. Hyslip, Jason M. Pittman

Journal of Digital Forensics, Security and Law

Botnets have evolved to become one of the most serious threats to the Internet and there is substantial research on both botnets and botnet detection techniques. This survey reviewed the history of botnets and botnet detection techniques. The survey showed traditional botnet detection techniques rely on passive techniques, primarily honeypots, and that honeypots are not effective at detecting peer-to-peer and other decentralized botnets. Furthermore, the detection techniques aimed at decentralized and peer-to-peer botnets focus on detecting communications between the infected bots. Recent research has shown hierarchical clustering of flow data and machine learning are effective techniques for detecting botnet peer-to-peer …

Relationships Between Law Enforcement Officer-Involved Vehicle Collisions And Other Police Behaviors, John Andrew Hansen

Theses and Dissertations

Specialization and versatility regarding officer negative outcomes have different implications for agency policies and practices. Versatility suggests interventions that address several problematic behaviors, while specialization may necessitate more targeted interventions. If officers who engage in one form of negative behavior are also more likely to be involved in other undesired outcomes than co-monitoring behaviors via early intervention systems or other mechanisms may be an effective means of identifying problematic officers. The threat posed by officer-involved motor vehicle collisions to the safety of police and the public has received increased attention from practitioners and researchers in the past decade or so. …

Evaluating The Social Control Of Banking Crimes: An Examination Of Anti-Money Laundering Deficiencies And Industry Success, Erin M. Mulligan

USF Tampa Graduate Theses and Dissertations

Money laundering is a serious crime with potentially wide ranging consequences that have numerous implications for criminological research. However, criminology rarely explores this crime, nor its potential impact on other more central crimes of interest (e.g. drug trafficking or organized crime). The present study adds to a limited body of literature examining money laundering from a criminological perspective, evaluating aspects of its regulation and social control within the banking industry. Several aspects of regulatory oversight and company dynamics such as fine/settlement size, company size, and the likelihood of non-AML/OFAC violations to predict future AML/OFAC violations were evaluated. These analyses largely …

Exploring The Interactive Effects Of Social Learning Theory And Psychopathy On Serious Juvenile Delinquency, Brandy Barenna Henderson

USF Tampa Graduate Theses and Dissertations

Social learning theory continues to be one of the most enduring theories of crime. Psychological criminology, on the other hand, tends to explain crime in terms of behavioral propensities. This research is specifically focused on the generality of social learning theory as it varies across a measure of criminal propensity- in this case, psychopathy. Prior studies have tested various theories with the use of measures of propensity, but the theory is rarely social learning, and the measure of propensity has never been psychopathy. The current study examines three components of social learning theory (definitions, differential association, and differential reinforcement) to …

Effective Innovation Policies For Development: Uganda, Julius Ecuru, Dick Kawooya

Faculty Publications

No abstract provided.

Tampa Electric Company's Big Bend Utility Plant In Hillsborough County, Florida: A Case Study, Lynne M. Hodalski-Champagne

USF Tampa Graduate Theses and Dissertations

This is an in-depth analysis of coal fire burning power plants, their effects on human health and the environment. It also employed case study data from Tampa Electric Company’s Big Bend facility to examine environmental infractions at that facility. Tampa Electric Company’s Big Bend Utility Plant, violated the Clean Air Act, which led to a lawsuit filed by the Department of Justice on behalf of the United States Environmental Protection Agency and the Florida Department of Environmental Protection in 1997. This case study details the lawsuit, and subsequent settlement as well as Tampa Electric Company’s record of compliance since 2000. …

Multiple Stain Histology Of Skeletal Fractures: Healing And Microtaphonomy, John Wellington Powell

USF Tampa Graduate Theses and Dissertations

The forensic examination of wounds is one of the key elements of analysis performed by forensic anthropologists and forensic pathologists. Gross examination and histological analysis can be used to determine the timing of the wound and its cause. While forensic pathologists are trained to analyze hard and soft tissue wounds, forensic anthropologists, bioarchaeologists, and paleopathologists, focus on hard tissue. Forensic anthropologists have the added benefit of potentially working with residual soft tissue and would benefit from the incorporation of microscopy techniques that take advantage of the soft tissue to better understand perimortem events. Little research has been published that examines …

The Role Of Social Support In The Disclosure And Recovery Process Of Rape Victims, Jessica Nicole Mitchell

USF Tampa Graduate Theses and Dissertations

Women disproportionately account for a majority of all completed and attempted rape victimizations each year in the U.S. relative to men. Female college students, in particular, have been noted as a group with the highest risk for rape. Rape among women not only has a substantial public health impact, but has been linked to a number of individual mental health and substance use problems. Despite the fact that service utilization (formal help-seeking with a counselor, mental health professional, rape crisis center, and police reporting) has been shown to deter negative sequelae of rape, few victims of rape receive assistance from …

Powerlessness Within A Budget-Driven Paradigm: A Grounded Theory Leadership Study From The Perspective Of Michigan Corrections Officers, Timothy Michael Eklin

Antioch University Dissertations & Theses

This study explored the lived-experiences of 15 correctional officers and 5 sergeants working in adult state-operated prison facilities in Michigan. In particular, this qualitative grounded theory study revealed the impact that budget driven decision-making had on the lives of correctional officers: its effect on institutional custody, security, and safety. The study finds that many recent policy changes resulted in a sense of powerlessness expressed by the participants of the study. Participants found themselves in a precarious position, situated in between the prison population and the administration. Having an understanding of how correctional officers make meaning of their work in relation …

Conduct Of Business Regulation, Andrew F. Tuch

Scholarship@WashULaw

This chapter provides a survey and comparative analysis of conduct of business (COB) regulation. COB regulation governs financial intermediaries’ conduct toward their clients, that is, toward the actors – whether individuals or institutions – with whom financial intermediaries transact in providing financial products and services. Modal regulatory strategies include anti-fraud rules, and duties of care, loyalty, fair-dealing and best-execution – and variants of these duties.

The chapter describes the justifications for COB regulation, the modal regulatory strategies used and the complex frameworks within which COB regulation operates. It then generally assesses US COB regulation, focusing on the regulation of broker-dealers …