Technology Corner: Analysing E-Mail Headers for Forensic Investigation

Electronic Mail (E-Mail), which is one of the most widely used applications of Internet, has become a global communication infrastructure service. However, security loopholes in it enable cybercriminals to misuse it by forging its headers or by sending it anonymously for illegitimate purposes, leading to e-mail forgeries. E-mail messages include transit handling envelope and trace information in the form of structured fields which are not stripped after messages are delivered, leaving a detailed record of e-mail transactions. A detailed header analysis can be used to map the networks traversed by messages, including information on the messaging software and patching policies of clients and gateways, etc. Cyber forensic e-mail analysis is employed to collect credible evidence to bring criminals to justice. This paper projects the need for e-mail forensic investigation and lists various methods and tools used for its realization. A detailed header analysis of a multiple tactic spoofed e-mail message is carried out in this paper. It also discusses various possibilities for detection of spoofed headers and identification of its originator. Further, difficulties that may be faced by investigators during forensic investigation of an e-mail message have been discussed along with their possible solutions

Authentication of Electronic Records: Limitations of Indian Legal Approach

Paper based documents have inherent authenticity and high evidentiary value for obvious reasons. The documents are permanent record of the contractual relationship of the parties and their contents cannot be so easily altered, modified or changed and even if any change is effected that can be easily detected. This is the reason that the Indian Evidence Act, 1872 excludes oral evidence in presence of documentary evidence. The moot point is that can an electronic record be treated equivalent to paper based record? In other words, can an electronic record have all the properties of the physical document appended with the hand written signature? This is necessitated by the fact that there are different laws in India providing that a contract is not valid unless it is in writing and signed by the parties. An attempt is made in this paper to analyze the provisions prescribing authentication of electronic records in India to demonstrate inherent limitations in them. To overcome these limitations, a new model of authentication is proposed which is based on digital signature combined with time stamping service

Modelling the Galactic Magnetic Field on the Plane in 2D

We present a method for parametric modelling of the physical components of the Galaxy's magnetised interstellar medium, simulating the observables, and mapping out the likelihood space using a Markov Chain Monte-Carlo analysis. We then demonstrate it using total and polarised synchrotron emission data as well as rotation measures of extragalactic sources. With these three datasets, we define and study three components of the magnetic field: the large-scale coherent field, the small-scale isotropic random field, and the ordered field. In this first paper, we use only data along the Galactic plane and test a simple 2D logarithmic spiral model for the magnetic field that includes a compression and a shearing of the random component giving rise to an ordered component. We demonstrate with simulations that the method can indeed constrain multiple parameters yielding measures of, for example, the ratios of the magnetic field components. Though subject to uncertainties in thermal and cosmic ray electron densities and depending on our particular model parametrisation, our preliminary analysis shows that the coherent component is a small fraction of the total magnetic field and that an ordered component comparable in strength to the isotropic random component is required to explain the polarisation fraction of synchrotron emission. We outline further work to extend this type of analysis to study the magnetic spiral arm structure, the details of the turbulence as well as the 3D structure of the magnetic field.Comment: 18 pages, 11 figures, updated to published MNRAS versio

Evidence of vorticity and shear at large angular scales in the WMAP data: a violation of cosmological isotropy?

Motivated by the large-scale asymmetry observed in the cosmic microwave background sky, we consider a specific class of anisotropic cosmological models -- Bianchi type VII_h -- and compare them to the WMAP first-year data on large angular scales. Remarkably, we find evidence of a correlation which is ruled out as a chance alignment at the 3sigma level. The best fit Bianchi model corresponds to x=0.55, Omega_0=0.5, a rotation axis in the direction (l,b)=(222degr,-62degr), shear (sigma/H)_0=2.4e-10 and a right--handed vorticity (omega/H)_0=6.1e-10. Correcting for this component greatly reduces the significance of the large-scale power asymmetry, resolves several anomalies detected on large angular scales (ie. the low quadrupole amplitude and quadrupole/octopole planarity and alignment), and can account for a non--Gaussian "cold spot" on the sky. Despite the apparent inconsistency with the best-fit parameters required in inflationary models to account for the acoustic peaks, we consider the results sufficiently provocative to merit further consideration.Comment: 4 pages, 3 figures; emulateapj.cls; ApJL accepted version plus fixed error in vorticity calculation (sqrt(2) off in Table 1, abstract, and conclusions); basic conclusions unchange

Joint Bayesian component separation and CMB power spectrum estimation

We describe and implement an exact, flexible, and computationally efficient algorithm for joint component separation and CMB power spectrum estimation, building on a Gibbs sampling framework. Two essential new features are 1) conditional sampling of foreground spectral parameters, and 2) joint sampling of all amplitude-type degrees of freedom (e.g., CMB, foreground pixel amplitudes, and global template amplitudes) given spectral parameters. Given a parametric model of the foreground signals, we estimate efficiently and accurately the exact joint foreground-CMB posterior distribution, and therefore all marginal distributions such as the CMB power spectrum or foreground spectral index posteriors. The main limitation of the current implementation is the requirement of identical beam responses at all frequencies, which restricts the analysis to the lowest resolution of a given experiment. We outline a future generalization to multi-resolution observations. To verify the method, we analyse simple models and compare the results to analytical predictions. We then analyze a realistic simulation with properties similar to the 3-yr WMAP data, downgraded to a common resolution of 3 degree FWHM. The results from the actual 3-yr WMAP temperature analysis are presented in a companion Letter.Comment: 23 pages, 16 figures; version accepted for publication in ApJ -- only minor changes, all clarifications. More information about the WMAP3 analysis available at http://www.astro.uio.no/~hke under the Research ta

On Foreground Removal from the Wilkinson Microwave Anisotropy Probe Data by an Internal Linear Combination Method: Limitations and Implications

We study the Internal Linear Combination (ILC) method presented by the Wilkinson Microwave Anisotropy Probe (WMAP) science team, with the goal of determining whether it may be used for cosmological purposes, as a template-free alternative to existing foreground correction methods. We conclude that the method does have the potential to do just that, but great care must be taken both in implementation, and in a detailed understanding of limitations caused by residual foregrounds which can still affect cosmological results. As a first step we demonstrate how to compute the ILC weights both accurately and efficiently by means of Lagrange multipliers, and apply this method to the observed data to produce a new version of the ILC map. Next we describe how to generate Monte Carlo simulations of the ILC map, and find that these agree well with the observed map on angular scales up to l~200. Finally we make two comments to the on-going debates concerning the large-scale properties of the WMAP data. First, we note that the Galactic south-eastern quadrant is associated with notably different ILC weights than the other three quadrants, possibly indicating a foreground related anisotropy. Second, we study the properties of the quadrupole and octopole (amplitude, alignment and planarity), and confirm the previously reported anomalies. Even more interestingly, we find that the l=5 mode is spherically symmetric at about 3 sigma, and that the l=6 mode is planar at the 2 sigma level. However, we also assess the impact of residual foregrounds on these statistics, and find that the ILC map is not clean enough to allow for cosmological conclusions. Alternative methods must be developed to study these issues further.Comment: 15 pages, 9 figures, accepted for publication in Ap

Power Spectrum of Primordial Inhomogeneity Determined from the 4-Year COBE DMR Sky Maps

Fourier analysis and power spectrum estimation of the cosmic microwave background anisotropy on an incompletely sampled sky developed by Gorski (1994) has been applied to the high-latitude portion of the 4-year COBE DMR 31.5, 53 and 90 GHz sky maps. Likelihood analysis using newly constructed Galaxy cuts (extended beyond |b| = 20deg to excise the known foreground emission) and simultaneously correcting for the faint high latitude galactic foreground emission is conducted on the DMR sky maps pixelized in both ecliptic and galactic coordinates. The Bayesian power spectrum estimation from the foreground corrected 4-year COBE DMR data renders n ~ 1.2 +/- 0.3, and Q_{rms-PS} ~ 15.3^{+3.7}_{-2.8} microK (projections of the two-parameter likelihood). These results are consistent with the Harrison-Zel'dovich n=1 model of amplitude Q_{rms-PS} ~ 18 microK detected with significance exceeding 14sigma (dQ/Q < 0.07). (A small power spectrum amplitude drop below the published 2-year results is predominantly due to the application of the new, extended Galaxy cuts.)Comment: 9 pages of text in LaTeX, 1 postscript Table, 4 postscript figures (2 color plates), submitted to The Astrophysical Journal (Letters

Footprints of Statistical Anisotropies

We propose and develop a formalism to describe and constrain statistically anisotropic primordial perturbations. Starting from a decomposition of the primordial power spectrum in spherical harmonics, we find how the temperature fluctuations observed in the CMB sky are directly related to the coefficients in this harmonic expansion. Although the angular power spectrum does not discriminate between statistically isotropic and anisotropic perturbations, it is possible to define analogous quadratic estimators that are direct measures of statistical anisotropy. As a simple illustration of our formalism we test for the existence of a preferred direction in the primordial perturbations using full-sky CMB maps. We do not find significant evidence supporting the existence of a dipole component in the primordial spectrum.Comment: 26 pages, 5 double figures. Uses RevTeX