The Experts below are selected from a list of 39 Experts worldwide ranked by ideXlab platform
Amber Burns - One of the best experts on this subject based on the ideXlab platform.
-
An easy to implement approach for laboratories to visualize particle spread during the Handling and analysis of drug Evidence
Forensic chemistry (Amsterdam Netherlands), 2020Co-Authors: Edward Sisco, Matthew E. Staymates, Amber BurnsAbstract:Abstract Recent work has shown that detectable levels of drugs exists on nearly all surfaces within a forensic laboratory – especially within the drug chemistry unit. This is an expected occurrence due to the Handling and opening of drug Evidence that contains powder material. The process of opening Evidence, which produces aerosolized particulate that can settle on surfaces throughout the lab, has never been visualized. This work presents the first attempt to visualize the spread of particulate throughout the laboratory during the analysis of drug Evidence and introduces an easy to implement approach laboratories can use to evaluate their specific protocols. By creating two simulated bricks of drugs that contained fluorescent particles, the spread of particulate was able to be monitored throughout the Evidence Handling process up to and including cleaning of surfaces after analysis. The protocols in this work showed the spread of particulate, prior to cleaning, to be quite extensive, with transfer onto surfaces and items that were handled. In this study, cleaning with methanol after processing the Evidence was shown to be effective at removing nearly all particulate that was released in the process. The use of visualization techniques such as this demonstrate promise for helping laboratories identify processes in their own protocols that may contribute to drug background levels and educate forensic chemists how trace residues spread.
George W. Burruss - One of the best experts on this subject based on the ideXlab platform.
-
Examining the stress, satisfaction, and experiences of computer crime examiners
Journal of Crime and Justice, 2011Co-Authors: Thomas J Holt, Kristie R. Blevins, George W. BurrussAbstract:While the stress of policing has been well documented for more traditional law enforcement duties, stress and job satisfaction among cybercrime investigators remains limited. This study examined the stress and job satisfaction from a sample of law enforcement agents who completed computer training from the National White Collar Crime Center and who had experience with digital Evidence Handling. The results show that role conflict was the most salient factor in predicting both stress and satisfaction. Experience with digital Evidence Handling increased job stress, but was not predictive of job satisfaction. The implications of the study are discussed.
Paul Turner - One of the best experts on this subject based on the ideXlab platform.
-
computer incident investigations e forensic insights on Evidence acquisition
Technical Legal & Social Aspects of IT-Security, 2004Co-Authors: Paul TurnerAbstract:The growing incidence and risk of inappropriate, illegal and/or criminal computer behaviours has increased the need to build bridges between technical and legal areas of expertise in order to produce more effective defensive and offensive responses. Although there is already a large volume of literature on organizational, technical and legal issues pertaining to computer misuse and e-crime there have until recently been only limited explorations of the interrelationships between these issues. This has been partly because of the lack of a conceptual framework within which to position these different approaches and partly because of the complexity of the specific sets of legal and technical challenges faced (Broucek & Turner, 2001a, 2001b; Hannan, Frings, Broucek, & Turner, 2003; Hannan, Turner, & Broucek, 2003). While at one level conventional approaches to social misconduct (including deterrence, security and education) retain their relevance in cyber-space, the variety of ways that individuals and/or groups can now use digital technologies to engage in computer misuse and e-crime does present unique challenges. As with other types of investigation when an incident occurs or behaviour is detected there is need to formally investigate and assess its extent and effect. There is also a need to gather Evidence and proof that may be used as the basis for responses. Significantly, in the case of computer misuse and e-crime, it is these Evidence acquisition activities that from an e-forensics perspective present the most difficult technical and legal challenges. On the technical side, problems remain in relation to the processes for detecting, identifying and logging these behaviours. On the legal side, numerous challenging legal considerations exist regarding types of Evidence acquisition (“forensic”) activity and the legal admissibility of the digital Evidence that these activities produce. To address these challenges is particularly difficult because most technical e-security solutions are not currently designed to support such e-forensic data acquisition and most organisations are unfamiliar with the admissibility requirements for digital Evidence collection, collation and presentation (Broucek & Turner, 2002a, 2003c; Sommer, 1998). This research paper provides a forensic computing perspective on these issues through a discussion of a recent legal case against three Australian Universities involving MP3 piracy. The paper also explores the recently developed European CTOSE (Cyber Tools On-line Search for Evidence) methodology (Frings, Stanisic-Petrovic, & Urry, 2003; Leroux & Perez Asinari, 2003; Urry & Mitchison, 2003) and presents some basic key principles for approaching digital Evidence Handling. Key findings of the paper include: • “Best” practice for digital Evidence Handling involves deploying the highest investigative standards at all stages in the identification, analysis and presentation of digital data; • Targeted training and education of network administrators and end-users in the key principles of digital Evidence Handling is urgently required; Authors: Broucek, V. & Turner, P. EICAR 2004 Conference CD-rom: Best Paper Proceedings EICAR 2004 Conference CD-rom Editor: Urs E. Gattiker ISBN: 87-987271-6-8 Copyright © 2004 by EICAR e.V. 4 • Opportunities exist for the further refinement of e-forensic methodologies and processes such as those developed by CTOSE; • Enhancing e-forensic professionalism through the rapid development of processes for e-forensic computing competences and certification will lead to improved outcomes in the investigation and prosecution of computer misuse and e-crime.
Judie Mulholland - One of the best experts on this subject based on the ideXlab platform.
-
Evidence Handling in proactive cyberstalking investigations the papa approach
First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE'05), 2005Co-Authors: Sudhir Aggarwal, Peter Henry, L Kermes, Judie MulhollandAbstract:Stalking is the malicious, unsolicited intrusion on another's personal space, and cyber-stalking extends this to cyberspace via Internet technology. All fifty U.S. states criminalized stalking in the 1990's, and many have passed cyberstalking statutes as well. The anonymity and reach of the Internet, and the difficulties in capturing, recording, and verifying digital Evidence combine to create new challenges to law enforcement agencies trying to prevent and detect the crime and apprehend the criminals. In particular, the "expectation of privacy" afforded to all participants of live-wire communication makes it difficult to bind the actual perpetrator with his or her online persona. The PAPA system is a comprehensive toolkit that captures all relevant cyberstalking data with the potential for admissibility in a court of law. To this end, and as far as possible under existing federal, state, and international statutes, it captures data with the goal of producing Evidence that is admissible, authoritative, reliable, complete, and believable.
Edward Sisco - One of the best experts on this subject based on the ideXlab platform.
-
An easy to implement approach for laboratories to visualize particle spread during the Handling and analysis of drug Evidence
Forensic chemistry (Amsterdam Netherlands), 2020Co-Authors: Edward Sisco, Matthew E. Staymates, Amber BurnsAbstract:Abstract Recent work has shown that detectable levels of drugs exists on nearly all surfaces within a forensic laboratory – especially within the drug chemistry unit. This is an expected occurrence due to the Handling and opening of drug Evidence that contains powder material. The process of opening Evidence, which produces aerosolized particulate that can settle on surfaces throughout the lab, has never been visualized. This work presents the first attempt to visualize the spread of particulate throughout the laboratory during the analysis of drug Evidence and introduces an easy to implement approach laboratories can use to evaluate their specific protocols. By creating two simulated bricks of drugs that contained fluorescent particles, the spread of particulate was able to be monitored throughout the Evidence Handling process up to and including cleaning of surfaces after analysis. The protocols in this work showed the spread of particulate, prior to cleaning, to be quite extensive, with transfer onto surfaces and items that were handled. In this study, cleaning with methanol after processing the Evidence was shown to be effective at removing nearly all particulate that was released in the process. The use of visualization techniques such as this demonstrate promise for helping laboratories identify processes in their own protocols that may contribute to drug background levels and educate forensic chemists how trace residues spread.