Journal of Digital Forensics Security and Law最新文献_第2页

Fault Lines In The Application Of International Humanitarian Law To Cyberwarfare 国际人道法在网络战中的应用断层

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2022-01-01 DOI: 10.15394/jdfsl.2022.1761

Humna Sohail

引用次数: 0

Social Media User Relationship Framework (SMURF) 社交媒体用户关系框架(SMURF)

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2021-02-16 DOI: 10.15394/JDFSL.2021.1698

A. David, Sarah Morris, G. Appleby-Thomas

引用次数: 0

Identification of LSB image Steganography using Cover Image Comparisons 基于封面图像比对的LSB图像隐写识别

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2021-01-01 DOI: 10.15394/JDFSL.2021.1551

M. Pelosi, N. Poudel, Pratap Lamichhane, Devon Lam, Gary C. Kessler, Joshua MacMonagle

{"title":"Identification of LSB image Steganography using Cover Image Comparisons","authors":"M. Pelosi, N. Poudel, Pratap Lamichhane, Devon Lam, Gary C. Kessler, Joshua MacMonagle","doi":"10.15394/JDFSL.2021.1551","DOIUrl":"https://doi.org/10.15394/JDFSL.2021.1551","url":null,"abstract":"Steganography has long been used to counter forensic investigation. This use of steganography as an antiforensics technique is becoming more widespread. This requires forensic examiners to have additional tools to more effectively detect steganography. In this paper we introduce a new software concept specifically designed to allow the digital forensics professional to clearly identify and attribute instances of least significant bit (LSB) image steganography by using the original cover image in side-by-side comparison with a suspected steganographic payload image. This technique is embodied in a software implementation named CounterSteg. The CounterSteg software allows detailed analysis and comparison of both the original cover image and any modified image, using sophisticated bitand color-channel visual depiction graphics. In certain cases, the steganographic software used for message transmission can be identified by the forensic analysis of LSB and other changes in the payload image. This paper demonstrates usage and typical forensic analysis with eight commonly available steganographic programs. Future work will attempt to automate the typical types of analysis and detection. This is important, as currently there is a steep rise in the use of image LSB steganographic techniques to hide the payload code used by malware and viruses, and for the purposes of data exfiltration. This results because of the fact that the hidden code and/or data can more easily bypass virus and malware signature detection in such a manner as being surreptitiously hidden in an otherwise innocuous image file.","PeriodicalId":43224,"journal":{"name":"Journal of Digital Forensics Security and Law","volume":null,"pages":null},"PeriodicalIF":0.3,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"84786203","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

Backup and Recovery Mechanisms of Cassandra Database: A Review Cassandra数据库的备份与恢复机制综述

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2021-01-01 DOI: 10.15394/JDFSL.2021.1613

Karina Bohora, Amol Bothe, D. Sheth, Rupali M. Chopade, V. Pachghare

引用次数: 2

A Constructive DIREST Security Threat Modeling for Drone as a Service 无人机作为一种服务的建设性DIREST安全威胁建模

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2021-01-01 DOI: 10.15394/JDFSL.2021.1695

Fahad E. Salamh, Umit Karabiyik, M. Rogers

{"title":"A Constructive DIREST Security Threat Modeling for Drone as a Service","authors":"Fahad E. Salamh, Umit Karabiyik, M. Rogers","doi":"10.15394/JDFSL.2021.1695","DOIUrl":"https://doi.org/10.15394/JDFSL.2021.1695","url":null,"abstract":"The technology used in drones is similar or identical across drone types and components, with many common risks and opportunities. The purpose of this study is to enhance the risk assessment procedures for Drone as a Service (DaaS) capabilities. STRIDE is an acronym that includes the following security risks: Spooﬁng, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privileges. The paper presents a modiﬁed STRIDE threat model and prioritizes its desired properties (i.e., authenticity, integrity, non-reputability, conﬁdentiality, availability, and authorization) to generate an appropriate DaaS threat model. To this end, the proposed DIREST threat model better meets the overall security assessment needs of DaaS. Moreover, this paper discusses the security risks of drones, identiﬁes best practices for security assessment, and proposes a novel software update mechanism for drones during their operations. We explore the best practices related to drone penetration testing, including an eﬀective methodology to maintain the continuity of drone operations, particularly drones used for emergency, safety, and rescue operations. Moreover, this research raises awareness of DaaS and drone operation in general as well as in the forensic science community due to its focus on the importance of securely operated drones for ﬁrst responders. Furthermore, we address various aspects of security concerns, including data transmission, software restrictions, and embedded system-related events. In order to propose a security assessment for drones, we incorporate digital forensics and penetration testing techniques related to drone operations. Our results show that the proposed threat model enhances the security of ﬂying devices and provides consistency in digital forensic procedures. This work introduces modiﬁcations to the STRIDE threat model based on the current literature, drone images provided by the NIST program, and a ﬁrmware static analysis of a zino hubsan brand drone.","PeriodicalId":43224,"journal":{"name":"Journal of Digital Forensics Security and Law","volume":null,"pages":null},"PeriodicalIF":0.3,"publicationDate":"2021-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"87788406","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

A Two-Stage Model for Social Network Investigations in Digital Forensics 数字取证中社会网络调查的两阶段模型

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2020-08-20 DOI: 10.15394/jdfsl.2020.1667

A. David, Sarah Morris, G. Appleby-Thomas

引用次数: 3

What’s in the Cloud? - An examination of the impact of cloud storage usage on the browser cache 云里有什么?-检查云存储使用对浏览器缓存的影响

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2020-01-01 DOI: 10.15394/JDFSL.2020.1592

G. Horsman

{"title":"What’s in the Cloud? - An examination of the impact of cloud storage usage on the browser cache","authors":"G. Horsman","doi":"10.15394/JDFSL.2020.1592","DOIUrl":"https://doi.org/10.15394/JDFSL.2020.1592","url":null,"abstract":"Cloud storage is now a well established and popular service adopted by many individuals and organizations, often at a scaled cost, with free accounts also available. It provides users with the ability to store content on a cloud service provider’s infrastructure, offering the benefit of redundancy, reliability, security, the flexibility of access, and the potential assumed the liability of the provider for data loss within the contexts of a licensing agreement. Consequently, this form of remote storage provides a regulatory challenge as content which once resided upon a seized digital exhibit, available for scrutiny during a digital forensic investigatory, may no longer be present where attempting to acquire access to it creates costing and juridical difficulties. This article offers a digital forensic examination of trace-evidence left in the Internet browser cache following cloud storage account usage and interaction. Following interactions with Dropbox and Google Drive in the Chrome browser, testing demonstrates the possibility to recover data capable of facilitating a partial reconstruction of a user’s cloud storage account, with results offered and contextualized.","PeriodicalId":43224,"journal":{"name":"Journal of Digital Forensics Security and Law","volume":null,"pages":null},"PeriodicalIF":0.3,"publicationDate":"2020-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"87554561","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

A FORENSIC FIRST LOOK AT A POS DEVICE: SEARCHING FOR PCI DSS DATA STORAGE VIOLATIONS 首先检查pos设备:搜索pci DSS数据存储违规

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2020-01-01 DOI: 10.15394/JDFSL.2020.1614

Stephen Larson, James H. Jones, Jim Swauger

引用次数: 0

An Evaluation Of Data Erasing Tools 数据擦除工具的评价

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2020-01-01 DOI: 10.15394/JDFSL.2020.1615

T. Martin, Andrew Jones

引用次数: 6

Cryptography, Passwords, Privacy, and the Fifth Amendment 密码学，密码，隐私和第五修正案

IF 0.3

Journal of Digital Forensics Security and Law Pub Date : 2020-01-01 DOI: 10.15394/jdfsl.2020.1678

G. Kessler, Ann M. Phillips

引用次数: 2