Botnet Forensic Investigation Techniques and Cost Evaluation

Botnets are responsible for a large percentage of damages and criminal activity on the Internet. They have shifted attacks from push activities to pull techniques for the distribution of malwares and continue to provide economic advantages to the exploiters at the expense of other legitimate Internet service users. In our research we asked; what is the cost of the procedural steps for forensically investigating a Botnet attack? The research method applies investigation guidelines provided by other researchers and evaluates these guidelines in terms of the cost to a digital forensic investigator. We conclude that investigation of Botnet attacks is both possible and procedurally feasible for a forensic investigator; but that scope management is critical for controlling the cost of investigation. We recommend quantifying Botnet investigations into five levels of cost based on time, complexity and technical requirements. Keywords: Botnets, Cybercrime, Investigating, Techniques, Costs, Researc

Sibyl 2002

https://digitalcommons.otterbein.edu/yearbooks/1010/thumbnail.jp

Sibyl 2002

https://digitalcommons.otterbein.edu/yearbooks/1010/thumbnail.jp

The medical management of casualties in a chemical contaminated environment : a start for the CBRNE defence research program for clinicians

The main objective of this research program was to assess the status of clinical knowledge and evidence-based practice in the medical management of mass casualties, contaminated by exposure to a chemical weapon, during a medical evacuation, which is defined as from the incident site of a contaminated environment up-to a clean zone. First, in our published systematic review, we assessed past medical responses during a chemical attack. The lack of clinical data and intervention-related information, such as protection and decontamination capabilities, stresses not only the need to study acute or prehospital settings, but also a set of integrated competences in the contaminated environment (i.e.: protection, decontamination and clinical interventions) (Prospero registered CRD42019104473). Second, a method paper which presents an ongoing international retro-prospective observational study on the medical responses during a chemical attack has been submitted for publication. The goal of this study is to describe the acute clinical management of patients in the contaminated zone (1970-2036; US Clinical trial registered NCT05026645). Data gathering is currently ongoing with the use of a comprehensive online registry programmed by the Quebec Respiratory Health Research Network. In the third and fourth, we started the development of two technological innovations to improve the medical management of mass casualties, caused by a chemical weapon, in contaminated environments. The first is the creation of a mobile laboratory for the continuity of our work in both indoor and outdoor settings. The other is the launch of a research program, named VIMY Multi-System, which includes: (1) An electronic casualty card system integrating the United Kingdom National Early Warning System; (2) a forward-deployable telemedicine capability prototype – currently undergoing integration testing – that incorporates drone technology to monitor patients being clinically managed in a simulated chemically contaminated environment. Our fifth published paper, on the methods of oxygen conservation with an automated titration system (n= 60; US Clinical trial registered NCT02782936 and NCT02809807), showed that such an automated system may constitute a viable medical solution for interventions in a contaminated environment and also constitutes one of the possible solutions to improve therapeutic interventions. The system studied allows the maintenance of adequate oxygenation while reducing the use of oxygen in patients, making it possible to extend their treatment duration even under conditions of limited logistical resources in oxygen. The oxygen flow provided by the automated system allows a mean reduction in administered oxygen quantities of more than six-fold when decreasing the prescribed SpO2 target from 98 to 90% (5 L/min to1 L/min, p <0.001) in hospitalized patients with respiratory disorders. The comparison was conducted on the basis of conservative flow rate targets reported in the literature (2.5, 5.0, 10.0 and 15.0 l/min). When it comes to the automated correction of a hypoxemic condition in sick patients and healthy subjects wearing a gas mask, the prescribed SpO2 target resulted in maximum administered oxygen flow rates of 0.2 L/min and 2.9 L/min respectively. These results show a possible logistic and therapeutic optimization in the use of oxygen. Finally, these initial advances will be integrated as our research work progresses in order to improve clinical evidence-based practices in contaminated environments due to the use of chemical weapons.L’objectif principal de cette recherche était d’évaluer l’état des connaissances et le savoir-faire de la pratique clinique dans la gestion d’un grand nombre de blessés, contaminés des suites d’une exposition à l’arme chimique, pendant leur évacuation médicale depuis le site de l’incident dans un environnement contaminé jusqu’à la zone propre. Premièrement, dans une revue systématique que nous avons publiée, nous avons évalué les réponses médicales passées lors d’attaques chimiques. Le manque de données cliniques et d’autres informations liées à l’intervention, tel que les capacités de protection et de décontamination, souligne non seulement la nécessité d’étudier l’environnement préhospitalier, mais aussi la gamme de compétences interdépendantes en milieu contaminé (c.-à-d. : protection, décontamination et interventions cliniques) (Prospero CRD42019104473). Deuxièmement, nous avons soumis pour publication la méthodologie d’une étude rétroprospective observationnelle internationale s’intéressant aux réponses médicales lors d’une attaque chimique. Le but consiste à décrire la gestion clinique en soins aigus des blessés dans la zone contaminée (1970-2036) (ClinicalTrials.gov NCT05026645). L’acquisition de données est en cours à l’aide d’un registre de données intégral en ligne qui a été programmé par le Réseau de recherche en santé respiratoire du Québec. En troisième et quatrième lieu, nous avons entrepris le développement de deux innovations technologiques afin d’améliorer la prise en charge médicale des patients en milieu contaminé à la suite de l’utilisation de l’arme chimique. L’un est la création d’un laboratoire mobile pour poursuivre nos travaux tant à l’intérieur qu’à l’extérieur. L’autre est la mise sur pied d’un programme de recherche, nommé VIMY Multi-Systèmes, qui inclut : (1) un système de carte de blessés électronique intégrant le système national d’alerte précoce du Royaume-Uni, (2) les premiers tests d’intégration d’un prototype d’une capacité de télémédecine de déploiement avancé, incluant la technologie du drone, pour une surveillance clinique globale des patients pris en charge en milieu contaminé chimique simulé. Notre cinquième publication, qui porte sur les méthodes de maintien de l’oxygénation par titrage automatisée (n=60 ; ClinicalTrials.gov NCT02782936 et NCT02809807), nous a permis de démontrer qu’un système automatisé peut constituer une solution médicale intéressante qui serait applicable dans les interventions en milieu contaminé et de surcroît comme une solution pour améliorer les actions thérapeutiques. Le système que nous avons étudié permet de maintenir une oxygénation adéquate tout en limitant la consommation d’oxygène des patients, prolongeant ainsi leur durée de traitement, notamment en cas de ressources en oxygène limitées. D’une part, le débit de l’oxygène fourni par le système automatisé a permis une réduction moyenne des quantités administrées de l’ordre de plus de six fois lors de la diminution de la cible de saturation en oxygène (SpO2) prescrite de 98 à 90 % (5 L/min à 1 L/min, p < 0,001) chez les patients hospitalisés atteints de maladies respiratoires. La comparaison s’est faite par rapport à des débits conservateurs rapportés dans la littérature (2,5, 5,0, 10,0 et 15,0 L/min). D’autre part, la correction automatisée d’une condition hypoxémique chez les patients malades et les sujets sains portant le masque à gaz, la cible SpO2 a engendré des débits maximaux d’oxygènes administrés de 2,5 et 2,9 L/min respectivement. Ainsi, nous avons démontré une optimalisation logistique et thérapeutique de la consommation de l’oxygène. Finalement, ces premières avancées seront intégrées au fur et à mesure de l’avancement de nos recherches afin d’améliorer le processus de soins en milieu contaminé issu de l’utilisation de l’arme chimique

Reputational Privacy and the Internet: A Matter for Law?

Reputation - we all have one. We do not completely comprehend its workings and are mostly unaware of its import until it is gone. When we lose it, our traditional laws of defamation, privacy, and breach of confidence rarely deliver the vindication and respite we seek due, primarily, to legal systems that cobble new media methods of personal injury onto pre-Internet laws. This dissertation conducts an exploratory study of the relevance of law to loss of individual reputation perpetuated on the Internet. It deals with three interrelated concepts: reputation, privacy, and memory. They are related in that the increasing lack of privacy involved in our online activities has had particularly powerful reputational effects, heightened by the Internet’s duplicative memory. The study is framed within three research questions: 1) how well do existing legal mechanisms address loss of reputation and informational privacy in the new media environment; 2) can new legal or extra-legal solutions fill any gaps; and 3) how is the role of law pertaining to reputation affected by the human-computer interoperability emerging as the Internet of Things? Through a review of international and domestic legislation, case law, and policy initiatives, this dissertation explores the extent of control held by the individual over her reputational privacy. Two emerging regulatory models are studied for improvements they offer over current legal responses: the European Union’s General Data Protection Regulation, and American Do Not Track policies. Underscoring this inquiry are the challenges posed by the Internet’s unique architecture and the fact that the trove of references to reputation in international treaties is not making its way into domestic jurisprudence or daily life. This dissertation examines whether online communications might be developing a new form of digital speech requiring new legal responses and new gradients of personal harm; it also proposes extra-legal solutions to the paradox that our reputational needs demand an overt sociality while our desire for privacy has us shunning the limelight. As we embark on the Web 3.0 era of human-machine interoperability and the Internet of Things, our expectations of the role of law become increasingly important

Mass surveillance or licence to operate: a Critical Discourse Analysis of UK newspaper reporting on The Investigatory Powers Act 2016

Introduced in parliament in November 2015, the Draft Investigatory Powers Bill was the most recent version of legislation written to provide a statutory basis for a range of powers providing police and security services with various means of capturing or intercepting electronic communications. Previous efforts at legislating for these powers attracted widespread criticism, and provoked political and legal opposition, and this Bill reprised concerns over what some felt to be the excessive scope of the powers included. This research seeks to examine UK national newspaper reporting of the legislation, published around the dates of the publication of the draft version of the bill, and when the legislation passed into law as The Investigatory Powers Act 2016, in order to evaluate the quality of this reporting. Using the methodology of Critical Discourse Analysis to examine reports from a representative selection of UK national newspapers, the study aims to identify the dominant ways in which the issues are constructed in the news, and the range of sources which are drawn upon to demonstrate the disparate perspectives available. Working from the basis that newspapers represent a significant source of public information on important contemporary social issues, the research seeks to evaluate the effectiveness of newspaper reporting in providing a full and informative depiction of such matters