Unified Forensic Methodology for the Analysis of Embedded Systems

Embedded systems are ubiquitous in society and can contain information that could be used in criminal cases for example in a serious road traffic accident where the car management systems could provide vital forensic information concerning the engine speed etc. A critical review of a number of methods and procedures for the analysis of embedded systems were compared against a ‘standard’ methodology for use in a Forensic Computing Investigation. A Unified Forensic Methodology (UFM) has been developed that is forensically sound and capable of dealing with the analysis of a wide variety of Embedded Systems

An effective and efficient testing methodology for correctness testing for file recovery tools

We hereby develop an effective and efficient testing methodology for correctness testing for file recovery tools across different file systems. We assume that the tool tester is familiar with the formats of common file types and has the ability to use the tools correctly. Our methodology first derives a testing plan to minimize the number of runs required to identify the differences in tools with respect to correctness. We also present a case study on correctness testing for file carving tools, which allows us to confirm that the number of necessary testing runs is bounded and our results are statistically sound. <br /

Decision Tree Analysis as a Supplementary Tool to Enhance Histomorphological Differentiation when Distinguishing Human from Non-human Cranial Bone in both Burnt and Unburnt States: A feasibility study

This feasibility study was undertaken to describe and record the histological characteristics of burnt and unburnt cranial bone fragments from human and non-human bones. Reference series of fully mineralised, transverse sections of cranial bone, from all variables and specimen states were prepared by manual cutting and semi-automated grinding and polishing methods. A photomicrograph catalogue reflecting differences in burnt and unburnt bone from human and non-humans was recorded and qualitative analysis was performed using an established classification system based on primary bone characteristics. The histomorphology associated with human and non-human samples was, for the main part, preserved following burning at high temperature. Clearly, fibro-lamellar complex tissue subtypes, such as plexiform or laminar primary bone, were only present in non-human bones. A decision tree analysis based on histological features provided a definitive identification key for distinguishing human from non-human bone, with an accuracy of 100%. The decision tree for samples where burning was unknown was 96% accurate, and multi-step classification to taxon was possible with 100% accuracy. The results of this feasibility study, strongly suggest that histology remains a viable alternative technique if fragments of cranial bone require forensic examination in both burnt and unburnt states. The decision tree analysis may provide an additional, but vital tool to enhance data interpretation. Further studies are needed to assess variation in histomorphology taking into account other cranial bones, ontogeny, species and burning conditions

iPhone forensics methodology and tools

iPhone mobile devices are rapidly overtaking the new generation of mobile phones market, especially among the young generation. It is also gaining a lot of popularity among security specialists and fancy gadgets for collectors. The device is considered as a “special” mobile phone due to its ability to perform multi-operations if not multitasking. It can therefore be used as a entertainment media device, a camera, a GPS, Internet surfing via Wi-Fi technology, Internet Mobile Edge Services, personal organizer, and finally performing as a cell phone with all the usual services including sms, and so forth. However, the difference between the iPhone and the other conventional phones vendors is its ability to store and process huge volume of data which is supported by decent computing capabilities of the iPhone processor. As part of every technology, such a device can be used for legal and illegal activities. Therefore the potential risks from such “special” technology are not limited to the possibility of containing illegal materials, such as audios and visuals, including explicit materials, images, documents and the possibility of propagating malicious activities rapidly. Such modification can breach or tamper with the telecommunications network authorities and regulations. The goal of this paper is to focus on both the logical and the physical extraction of the iPhone generation one through the extraction of the iPhone flash drive NAND memory chip and also the logical extraction of data onto the second generation of iPhone using various techniques and methods at our disposal

The problems of offenders with mental disorders: A plurality of perspectives within a single mental health care organisation

Managers, doctors, nurses, occupational therapists, social workers, psychologists, unqualified staff and service users were interviewed for a qualitative study of risk management and rehabilitation in an inner city medium secure forensic mental health care unit. Different professional orientations to service user problems were identified. Doctors focused primarily on the diagnosis of mental disorder, which they managed mainly through pharmaceutical interventions. Psychologists were principally concerned with personal factors, for example service user insight into their biographical history. Occupational therapists concentrated mainly on daily living skills, and social workers on post-discharge living arrangements. Some front line nurses, held accountable for security lapses, adopted a criminogenic approach. Service users were more likely than professionals to understand their needs in terms of their wider life circumstances. These differences are explored qualitatively in relation to four models of crossdisciplinary relationships: monoprofessional self-organisation combined with restricted communication; hermeneutic reaching out to other perspectives; the establishment of interdisciplinary sub-systems; and transdisciplinary merger. Relationships between professions working in this unit, as portrayed in qualitative interviews, corresponded mainly to the first model of monoprofessional self-organisation. Reasons for restricted crossdisciplinary understanding, particularly the wide power/status differences between the medical and other professions, and between staff and patients, are discussed

The problems of offenders with mental disorders: A plurality of perspectives within a single mental health care organisation

Managers, doctors, nurses, occupational therapists, social workers, psychologists, unqualified staff and service users were interviewed for a qualitative study of risk management and rehabilitation in an inner city medium secure forensic mental health care unit. Different professional orientations to service user problems were identified. Doctors focused primarily on the diagnosis of mental disorder, which they managed mainly through pharmaceutical interventions. Psychologists were principally concerned with personal factors, for example service user insight into their biographical history. Occupational therapists concentrated mainly on daily living skills, and social workers on post-discharge living arrangements. Some front line nurses, held accountable for security lapses, adopted a criminogenic approach. Service users were more likely than professionals to understand their needs in terms of their wider life circumstances. These differences are explored qualitatively in relation to four models of crossdisciplinary relationships: monoprofessional self-organisation combined with restricted communication; hermeneutic reaching out to other perspectives; the establishment of interdisciplinary sub-systems; and transdisciplinary merger. Relationships between professions working in this unit, as portrayed in qualitative interviews, corresponded mainly to the first model of monoprofessional self-organisation. Reasons for restricted crossdisciplinary understanding, particularly the wide power/status differences between the medical and other professions, and between staff and patients, are discussed