Assessing the legal risks in network forensic probing

This paper presents a framework for identifying the legal risks associated with performing network forensics on public networks. The framework is discussed in the context of the Gnutella P2P network protocol for which the legal issues related to authorized access have not yet been addressed

ASSESSING THE LEGAL RISKS IN NETWORK FORENSIC PROBING

Abstract This paper presents a framework for identifying the legal risks associated with performing network forensics on public networks. The framework is discussed in the context of the Gnutella P2P network protocol for which the legal issues related to authorized access have not yet been addressed

Honesty Without Truth: Lies, Accuracy, and the Criminal Justice Process

Focusing on “lying” is a natural response to uncertainty but too narrow of a concern. Honesty and truth are not the same thing and conflating them can actually inhibit accuracy. In several settings across investigations and trials, the criminal justice system elevates compliant statements, misguided beliefs, and confident opinions while excluding more complex evidence. Error often results. Some interrogation techniques, for example, privilege cooperation over information. Those interactions can yield incomplete or false statements, confessions, and even guilty pleas. Because of the impeachment rules that purportedly prevent perjury, the most knowledgeable witnesses may be precluded from taking the stand. The current construction of the Confrontation Clause right also excludes some reliable evidence—especially from victim witnesses—because it favors face-to-face conflict even though overrated demeanor cues can mislead. And courts permit testimony from forensic experts about pattern matches, such as bite-marks and ballistics, if those witnesses find their own methodologies persuasive despite recent studies discrediting their techniques. Exploring the points of disconnect between honesty and truth exposes some flaws in the criminal justice process and some opportunities to advance fact-finding, truth-seeking, and accuracy instead. At a time when “post-truth” challenges to shared baselines beyond the courtroom grow more pressing, scaffolding legal institutions, so they can provide needed structure and helpful models, seems particularly important. Assessing the legitimacy of legal outcomes and fostering the engagement necessary to reach just conclusions despite adversarial positions could also have an impact on declining facts and decaying trust in broader public life

Understanding Health Risks for Adolescents in Protective Custody

Children in child welfare protective custody (e.g., foster care) are known to have increased health concerns compared to children not in protective custody. The poor health documented for children in protective custody persists well into adulthood; young adults who emancipate from protective custody report poorer health, lower quality of life, and increased health risk behaviors compared to young adults in the general population. This includes increased mental health concerns, substance use, sexually transmitted infections, unintended pregnancy, and HIV diagnosis. Identifying youth in protective custody with mental health concerns, chronic medical conditions, and increased health risk behaviors while they remain in custody would provide the opportunity to target prevention and intervention efforts to curtail poor health outcomes while youth are still connected to health and social services. This study leveraged linked electronic health records and child welfare administrative records for 351 youth ages 15 and older to identify young people in custody who were experiencing mental health conditions, chronic medical conditions, and health risk behaviors (e.g., substance use, sexual risk). Results indicate that 41.6% of youth have a mental health diagnosis, with depression and behavior disorders most common. Additionally, 41.3% of youth experience chronic medical conditions, primarily allergies, obesity, and vision and hearing concerns. Finally, 39.6% of youth use substances and 37.0% engage in risky sexual behaviors. Predictors of health risks were examined. Those findings indicate that women, those with longer lengths of stay and more times in custody, and those in independent living and conjugate care settings are at greatest risk for mental health conditions, chronic medical conditions, and health risk behaviors. Results suggest a need to ensure that youth remain connected to health and mental health safety nets, with particular attention needed for adolescents in care for longer and/or those placed in non-family style settings. Understanding who is at risk is critical for developing interventions and policies to target youth who are most vulnerable for increased health concerns that can be implemented while they are in custody and are available to receive services

Web attack risk awareness with lessons learned from high interaction honeypots

Tese de mestrado, Segurança Informática, Universidade de Lisboa, Faculdade de Ciências, 2009Com a evolução da web 2.0, a maioria das empresas elabora negócios através da Internet usando aplicações web. Estas aplicações detêm dados importantes com requisitos cruciais como confidencialidade, integridade e disponibilidade. A perda destas propriedades influencia directamente o negócio colocando-o em risco. A percepção de risco providencia o necessário conhecimento de modo a agir para a sua mitigação. Nesta tese foi concretizada uma colecção de honeypots web de alta interacção utilizando diversas aplicações e sistemas operativos para analisar o comportamento do atacante. A utilização de ambientes de virtualização assim como ferramentas de monitorização de honeypots amplamente utilizadas providencia a informação forense necessária para ajudar a comunidade de investigação no estudo do modus operandi do atacante, armazenando os últimos exploits e ferramentas maliciosas, e a desenvolver as necessárias medidas de protecção que lidam com a maioria das técnicas de ataque. Utilizando a informação detalhada de ataque obtida com os honeypots web, o comportamento do atacante é classificado entre diferentes perfis de ataque para poderem ser analisadas as medidas de mitigação de risco que lidam com as perdas de negócio. Diferentes frameworks de segurança são analisadas para avaliar os benefícios que os conceitos básicos de segurança dos honeypots podem trazer na resposta aos requisitos de cada uma e a consequente mitigação de risco.With the evolution of web 2.0, the majority of enterprises deploy their business over the Internet using web applications. These applications carry important data with crucial requirements such as confidentiality, integrity and availability. The loss of those properties influences directly the business putting it at risk. Risk awareness provides the necessary know-how on how to act to achieve its mitigation. In this thesis a collection of high interaction web honeypots is deployed using multiple applications and diverse operating systems in order to analyse the attacker behaviour. The use of virtualization environments along with widely used honeypot monitoring tools provide the necessary forensic information that helps the research community to study the modus operandi of the attacker gathering the latest exploits and malicious tools and to develop adequate safeguards that deal with the majority of attacking techniques. Using the detailed attacking information gathered with the web honeypots, the attacking behaviour will be classified across different attacking profiles to analyse the necessary risk mitigation safeguards to deal with business losses. Different security frameworks commonly used by enterprises are analysed to evaluate the benefits of the honeypots security concepts in responding to each framework’s requirements and consequently mitigating the risk

Hidden Agendas and Ripple Effects: Implications of Four Recent Supreme Court Decisions for Forensic Mental Health Professionals

Supreme Court decisions have implications far beyond the legal principles they articulate, and it is essential that individuals working in the forensic mental health and correctional systems understand the extent to which such decisions can affect their practice and the facilities in which they work. The seemingly-unrelated cases of Godinez v. Moran (1993) (establishing a unitary standard for the determinations of competency to plead guilty, competency to waive counsel, and competency to stand trial), Kansas v. Hendricks (1997) (upholding the constitutionality of one state\u27s “Sexually Violent Predator Act”), Pennsylvania Department of Corrections v. Yeskey (1998) (ruling that the Americans with Disabilities Act (ADA) applies to state prisons), and Olmstead v. L.C. (1999) (finding a qualified right to community treatment for certain persons institutionalized because of mental disability) may have profound impacts on forensic mental health and correctional practices. These potential impacts, however, have been the subject of virtually no academic, practitioner, or clinical attention, and there has been no consideration at all of the “ripple effects” of these four cases as a grouping. It is critical that forensic mental health and correctional professionals understand these cases—not simply their holdings, but how they may profoundly affect day-to-day practices. Godinez makes it inevitable that more seriously mentally ill criminal defendants will be imprisoned; Hendricks makes it inevitable that more violent sexual offenders will be housed in forensic mental hospitals; Yeskey makes it inevitable that all aspects of institutionalization (whether in a facility labeled “criminal” or one labeled “mental health”) will be subject to far more probing external scrutiny. Olmstead makes it inevitable that institutional decisionmaking as to retention and release of certain patients will be examined more critically. This article discusses these cases, explains their holdings, demonstrates the likely “ripple effects” of these holdings, and discusses their implications for forensic mental health professionals