Journal of Digital Forensics, Security and Law

Number 3, 2007

7-28
An Exploratory Analysis of Computer Mediated Communications on Cyberstalking Severity

Authors: Stephen D. Barnes, David P. Biros

Abstract

View in PDF

Number of views: 305

The interaction between disjunctive interpersonal relationships, those where the parties to the relationship disagree on the goals of the relationship, and the use of computer mediated communications channels is a relatively unexplored domain. Bargh (2002) suggests that CMC channels can amplify the development of interpersonal relationships, and notes that the effect is not constant across communications activities. This proposal suggests a line of research that explores the interaction between computer mediated communications (CMC) and stalking, which is a common form of disjunctive relationships. Field data from cyberstalking cases will be used to look at the effects of CMC channels on stalking case severity, and exploring the relative impacts of CMC channel characteristics on such cases. To accomplish this, a ratio scaled measure of stalking case severity is proposed for use in exploring the relationship between case severity and CMC media characteristics, anonymity, and the prior relationship between the stalker and the victim. Expected results are identified, and follow-up research is proposed.

29-44
Investigating Information Structure of Phishing Emails Based on Persuasive Communication Perspective

Authors: Ki Jung Lee, Il- Yeol Song

Abstract

View in PDF

Number of views: 308

Current approaches of phishing filters depend on classifying messages based on textually discernable features such as IP-based URLs or domain names as those features that can be easily extracted from a given phishing message. However, in the same sense, those easily perceptible features can be easily manipulated by sophisticated phishers. Therefore, it is important that universal patterns of phishing messages should be identified for feature extraction to serve as a basis for text classification. In this paper, we demonstrate that user perception regarding phishing message can be identified in central and peripheral routes of information processing. We also present a method of formulating quantitative model that can represent persuasive information structure in phishing messages. This paper makes contribution to phishing classification research by presenting the idea of universal information structure in terms of persuasive communication theories.

45-56
Providing a Foundation for Analysis of Volatile Data Stores

Authors: Timothy Vidas

Abstract

View in PDF

Number of views: 307

Current threats against typical computer systems demonstrate a need for forensic analysis of memory-resident data in addition to the conventional static analysis common today. Certain attacks and types of malware exist solely in memory and leave little or no evidentiary information on nonvolatile stores such as a hard disk drive. The desire to preserve system state at the time of response may even warrant memory acquisition independent of perceived threats and the ability to analyze the acquired duplicate. Tools capable of duplicating various types of volatile data stores are becoming widely available. Once the data store has been duplicated, current forensic procedures have no method for extrapolating further useful information from the duplicate. This paper is focused on providing the groundwork for performing forensic investigations on the data that is typically stored in a volatile data store, such as system RAM. It is intended that, when combined with good acquisition techniques, it will be shown that it is possible to obtain more post incident response information along with less impact to potential evidence when compared to typical incident response procedures.

57-60
Book Review: Computer Forensics: Principles and Practices

Authors: Jigang Liu

Abstract

View in PDF

Number of views: 332

Linda Volonino, Reynaldo Anzaldua, and Jana Godwin (2007). Computer Forensics: Principles and Practices. Pearson/Prentice Hall. 534 pages, ISBN: 0-13-154727-5 (paper), US$85.33 Reviewed by Jigang Liu (Jigang.Liu@metrostate.edu), Department of Information and Computer Sciences, College of Arts and Sciences, Metropolitan State University, St. Paul, MN 55106 Computer Forensics: Principles and Practices by Linda Volonino, Reynaldo Anzaldua, and Jana Godwin, published by Pearson/Prentice Hall in 2007 is one of the newest computer forensics textbooks on the market. The goal of the book, as the authors put it, is to teach students who want to learn about electronic evidence including what types exist and where it may be found and the computer forensics methods to investigate it so that they will be prepared in a career in information security, criminal justice, accounting, law enforcement, and federal investigations â€“ as well as computer forensics. Linda, Reynaldo, and Jana are not only experienced college professors, but also industry bounded professionals. All of them have substantial working experience with law firms or law enforcement in dealing with both civil and criminal cases. They are all certified information system security professionals (CISSP). Their teaching experience at the college level and their working experience on real cases make this book a must-read book for a college professor.