Social Control, Law, Crime, and Deviance Commons^™

Malware In The Mobile Device Android Environment, Diana Hintea, Robert Bird, Andrew Walker

Annual ADFSL Conference on Digital Forensics, Security and Law

exploit smartphone operating systems has exponentially expanded. Android has become the main target to exploit due to having the largest install base amongst the smartphone operating systems and owing to the open access nature in which application installations are permitted. Many Android users are unaware of the risks associated with a malware infection and to what level current malware scanners protect them. This paper tests how efficient the currently available malware scanners are. To achieve this, ten representative Android security products were selected and tested against a set of 5,560 known and categorized Android malware samples. The tests were carried …

Forensic Analysis Of Smartphone Applications For Privacy Leakage, Diana Hintea, Chrysanthi Taramonli, Robert Bird, Rezhna Yusuf

Annual ADFSL Conference on Digital Forensics, Security and Law

Smartphone and tablets are personal devices that have diffused to near universal ubiquity in recent years. As Smartphone users become more privacy-aware and -conscious, research is needed to understand how “leakage” of private information (personally identifiable information – PII) occurs. This study explores how leakage studies in Droid devices should be adapted to Apple iOS devices. The OWASP Zed Attack Proxy (ZAP) is examined for 50 apps in various categories. This study confirms that: (1) most apps transmit unencrypted sensitive PII, (2) SSL is used by some recipient websites, but without corresponding app compliance with SSL, and (3) most apps …

Inferring Previously Uninstalled Applications From Residual Partial Artifacts, Jim Jones, Tahir Khan, Kathryn Laskey, Alex Nelson, Mary Laamanen, Douglas White

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper, we present an approach and experimental results to suggest the past presence of an application after the application has been uninstalled and the system has remained in use. Current techniques rely on the recovery of intact artifacts and traces, e.g., whole files, Windows Registry entries, or log file entries, while our approach requires no intact artifact recovery and leverages trace evidence in the form of residual partial files. In the case of recently uninstalled applications or an instrumented infrastructure, artifacts and traces may be intact and complete. In most cases, however, digital artifacts and traces are al- …

One-Time Pad Encryption Steganography System, Michael J. Pelosi, Gary Kessler, Michael Scott S. Brown

Annual ADFSL Conference on Digital Forensics, Security and Law

In this paper we introduce and describe a novel approach to adaptive image steganography which is combined with One-Time Pad encryption, and demonstrate the software which implements this methodology. Testing using the state-of-the-art steganalysis software tool StegExpose concludes the image hiding is reliably secure and undetectable using reasonably-sized message payloads (≤25% message bits per image pixel; bpp). Payload image file format outputs from the software include PNG, BMP, JP2, JXR, J2K, TIFF, and WEBP. A variety of file output formats is empirically important as most steganalysis programs will only accept PNG, BMP, and possibly JPG, as the file inputs.

Keywords: …

Applying Grounded Theory Methods To Digital Forensics Research, Ahmed Almarzooqi, Andrew Jones, Richard Howley

Annual ADFSL Conference on Digital Forensics, Security and Law

Deciding on a suitable research methodology is challenging for researchers. In this paper, grounded theory is presented as a systematic and comprehensive qualitative methodology in the emergent field of digital forensics research. This paper applies grounded theory in a digital forensics research project undertaken to study how organisations build and manage digital forensics capabilities. This paper gives a step-by-step guideline to explain the procedures and techniques of using grounded theory in digital forensics research. The paper gives a detailed explanation of how the three grounded theory coding methods (open, axial, and selective coding) can be used in digital forensics research. …

Covert6: A Tool To Corroborate The Existence Of Ipv6 Covert Channels, Raymond A. Hansen, Lourdes Gino, Dominic Savio

Annual ADFSL Conference on Digital Forensics, Security and Law

Covert channels are any communication channel that can be exploited to transfer information in a manner that violates the system’s security policy. Research in the field has shown that, like many communication channels, IPv4 and the TCP/IP protocol suite have been susceptible to covert channels, which could be exploited to leak data or be used for anonymous communications. With the introduction of IPv6, researchers are acutely aware that many vulnerabilities of IPv4 have been remediated in IPv6. However, a proof of concept covert channel system was demonstrated in 2006. A decade later, IPv6 and its related protocols have undergone major …

Acceleration Of Statistical Detection Of Zero-Day Malware In The Memory Dump Using Cuda-Enabled Gpu Hardware, Igor Korkin, Iwan Nesterow

Annual ADFSL Conference on Digital Forensics, Security and Law

This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cyber-attacks which use malware. In this paper, we will present first an idea of the highest stealth malware, as this is the most complicated scenario for detection because it combines both existing anti-forensic techniques together with their potential improvements. Second, we will present new detection methods which are resilient to this hidden prototype. To help solve this detection challenge, we have analyzed Windows’ memory content using a new method of Shannon Entropy calculation; methods of …

Using Computer Behavior Profiles To Differentiate Between Users In A Digital Investigation, Shruti Gupta, Marcus Rogers

Annual ADFSL Conference on Digital Forensics, Security and Law

Most digital crimes involve finding evidence on the computer and then linking it to a suspect using login information, such as a username and a password. However, login information is often shared or compromised. In such a situation, there needs to be a way to identify the user without relying exclusively on login credentials. This paper introduces the concept that users may show behavioral traits which might provide more information about the user on the computer. This hypothesis was tested by conducting an experiment in which subjects were required to perform common tasks on a computer, over multiple sessions. The …

Current Challenges And Future Research Areas For Digital Forensic Investigation, David Lillis, Brett A. Becker, Tadhg O’Sullivan, Mark Scanlon

Annual ADFSL Conference on Digital Forensics, Security and Law

Given the ever-increasing prevalence of technology in modern life, there is a corresponding increase in the likelihood of digital devices being pertinent to a criminal investigation or civil litigation. As a direct consequence, the number of investigations requiring digital forensic expertise is resulting in huge digital evidence backlogs being encountered by law enforcement agencies throughout the world. It can be anticipated that the number of cases requiring digital forensic analysis will greatly increase in the future. It is also likely that each case will require the analysis of an increasing number of devices including computers, smartphones, tablets, cloud-based services, Internet …

Forensic Analysis Of Ares Galaxy Peer-To-Peer Network, Frank Kolenbrander, Nhien-An Le-Khac, Tahar Kechadi

Annual ADFSL Conference on Digital Forensics, Security and Law

Child Abuse Material (CAM) is widely available on P2P networks. Over the last decade several tools were made for 24/7 monitoring of peer-to-peer (P2P) networks to discover suspects that use these networks for downloading and distribution of CAM. For some countries the amount of cases generated by these tools is so great that Law Enforcement (LE) just cannot handle them all. This is not only leading to backlogs and prioritizing of cases but also leading to discussions about the possibility of disrupting these networks and sending warning messages to potential CAM offenders. Recently, investigators are reporting that they are creating …

Keynote Speaker, Chuck Easttom

Annual ADFSL Conference on Digital Forensics, Security and Law

Conference Keynote Speaker, Chuck Easttom

Lockdown In Manchester Is A Slippery Slope, Risa Evans

Law Faculty Scholarship

[Excerpt] "Liberty. Security. Both are essential to a good life. But of course, neither is absolute, and at times circumstances demand that a society trade some measure of liberty for security. The tricky part is deciding when and how to draw the line."

The American Nightmare: Land Of The Incarcerated, Jamara Bernard

Capstone Projects and Master's Theses

A collection of poems focusing on the mass incarceration of African-American men and how the prison industrial complex is designed to legally exploit prisoners specifically for profits. Along with a reflective essay about the history of legal discrimination and the creative process by which the poems were created. Then how it ties in with the capstone course theme of race, gender, class, feminist theory, and social justice.

Police Use Of Force With The Mentally Ill, Chelsea Moore

Doctor of Psychology (PsyD)

Police officers experience many difficult situations in their line of duty, but two situations stand out as particularly unsettling for police officers: when they interact with people who are (a) under the influence of drugs or alcohol, and when (b) people appear to be suffering from serious mental illness (Kaminski, DiGiovanni, & Downs, 2004). This study explores the impact of these conditions on whether or not police officers resort to using force within a Northwestern metropolitan police department. A set of archival data consisting of force incidents was divided into four subgroups depending on subject (suspect) substance use and mental …

How Code Enforcement Mitigates Hoarding In The Community, Jason Gibilisco

Master's Projects

No abstract provided.

Problem Analysis In Community Violence Assessments: Reavealing Early Childhood Trauma As A Driver Of Youth And Gang Violence, Laurie Ross Phd, Samantha Arsenault, Sergeant Miguel Lopez

Mosakowski Institute for Public Enterprise

Problem analysis conducted by a university-based research partner can provide communities with data-driven options to address the local drivers of serious youth and gang violence. Situated in Worcester, Massachusetts, this article describes how after early childhood trauma was identified as a potential driver of adolescent and young adult violence, problem analysis using local data confirmed that being the victim or witness of a traumatic incident before the age of 12 was significantly correlated with involvement in violence in adolescence or young adulthood. While there is a robust literature on the relationship between early childhood trauma and later delinquency, local decision-makers …

Rape And Sexual Violence: Questionable Inevitability And Moral Responsibility In Armed Conflict, Katherine W. Bogen

Scholarly Undergraduate Research Journal at Clark (SURJ)

Wartime sexual violence is a critical human rights issue that usurps the autonomy of its victims as well as their physical and psychological safety. It occurs in both ethnic and non-ethnic wars, across geographic regions, against both men and women, and regardless of the “official” position of commanders, states, and armed groups on the use of rape as tactic of war. This problem is current, pervasive, and global in spite of the status of wartime sexual violence perpetration as a crime against humanity and the capacity of the international criminal court to indict offenders. Though some scholars have argued that …

Formulating New Models In The More Guns, Less Crime Debate, Justin Shane Carothers

Student Theses and Dissertations

Recent statistical studies suggest that the presence of right to carry (RTC) laws increase crime on all fronts. Like many before it, this debate hinges on model specification and our ability to conceptualize real world mechanisms into social science models. I evaluate and modify previous economic models concerning the “More Guns, Less Crime” hypothesis in order to test those findings. I also expanded previous panel data that originally ended in 2006 with the most up to date uniform Crime Reporting (UCR) data and created a new open-carry dummy variable. Each model uses data from 1970 to 2013 for all fifty …

Body-Worn Cameras And Civilian Policy Oversight: A Camden Case Study (Presentation Slides From Nacole Symposium 2016 Held At John Jay College), Maria Ponomarenko, Barry Friedmann

Publications and Research

Throughout its Final Report, the Presidential Task Force on 21st Century Policing repeatedly called for a new form of civilian oversight: for police departments to involve community members in the process of developing and reviewing department policies on a variety of topics from use of new technologies to police training. The Task Force stressed that this sort of engagement is essential to promoting external legitimacy and building trust between policing agencies and the communities they serve. Yet as a number of police officials have acknowledged, community engagement around matters of policy raises a number of difficult questions—and there are few …

Early Warning/Intervention Systems (Presentation Slides From Nacole Symposium 2016 Held At John Jay College), Jennifer Helsby, Samuel Carton, Kenneth Joseph, Ayesha Mahmud, Youngsoo Park, Joe Walsh, Lauren Haynes

Publications and Research

Adverse interactions between police and the public harm police legitimacy and produce high costs due to harms to both officers and the public as well as litigation. Early intervention systems (EIS) that flag officers considered most likely to be involved in one of these adverse situations are an important tool for police supervision and for targeting of interventions such as counseling or training. However, the EIS that exist are often not data-driven and are based on supervior intuition. We have developed a prototype data-driven EIS that uses a diverse set of data sources from the Charlotte-Mecklenburg Police Department and machine …