Query: Survey on Different Phases of DigitalForensics Investigation Models

Relevant passages:
Getting Physical with the Digital Investigation Process <=SEP=> In this paper, a process model for digital investigations is defined using the theories and techniques from the physical investigation world. While digital investigations have recently become more common, physical investigations have existed for thousands of years and the experience from them can be applied to the digital world. This paper introduces the notion of a digital crime scene with its own witnesses, evidence, and events that can be investigated using the same model as a physical crime scene. The proposed model integrates the physical crime scene investigation with the digital crime scene investigation to identify a person who is responsible for the digital activity. The proposed model applies to both law enforcement and corporate investigations.

Digital Forensic Model Based On Malaysian Investigation Process <=SEP=> Faculty Of Science & Technology Islamic Science University Of Malaysia Summary With the proliferation of the digital crime around the world, numerous digital forensic investigation models already being develop .In fact many of the digital forensic investigation model focus on technical implementation of the investigation process as most of it develop by traditional forensic expert and technologist. As an outcome of this problem most of the digital forensic practitioners focus on technical aspect and forget the core concept of digital forensic investigation model .In this paper we are introducing a new digital forensic model which will be capture a full scope of an investigation process based on Malaysia Cyber Law .The proposed model is also compared with the existing model which currently available and being apply in the investigation process.

A hierarchical, objectives-based framework for the digital investigations process <=SEP=> Although digital forensics investigations can vary drastically in their level of complexity, each investigative process must follow a rigorous path. Previously proposed frameworks are predominantly single-tier, higher order process models, focusing on the abstract, rather than more concrete principles of the investigation. We contend that these frameworks, although useful in explaining overarching concepts, require additional detail in order to be useful to investigators and researchers. We therefore propose a multi-tier, hierarchical framework to guide digital investigations. Our framework includes objectivesbased sub-phases that are applicable to various layers of abstraction.

An Extended Model of Cybercrime Investigations <=SEP=> A comprehensive model of cybercrime investigations is important for standardising terminology, defining requirements, and supporting the development of new techniques and tools for investigators. In this paper a model of investigations is presented which combines the existing models, generalises them, and extends them by explicitly addressing certain activities not included in them. Unlike previous models, this model explicitly represents the information flows in an investigation and captures the full scope of an investigation, rather than only the processing of evidence. The results of an evaluation of the model by practicing cybercrime investigators are presented. This new model is compared to some important existing models and applied to a real investigation.

Defining Digital Forensic Examination and Analysis Tool Using Abstraction Layers <=SEP=> This paper uses the theory of abstraction layers to describe the purpose and goals of digital forensic analysis tools. Using abstraction layers, we identify where tools can introduce errors and provide requirements that the tools must follow. Categories of forensic analysis types are also defined based on the abstraction layers. Abstraction layers are not a new concept, but their usage in digital forensic analysis is not well documented.

Faster Dual-Key Stealth Address for Blockchain-Based Internet of Things Systems <=SEP=> Stealth address prevents public association of a blockchain transaction’s output with a recipient’s wallet address and hides the actual destination address of a transaction. While stealth address provides an effective privacy-enhancing technology for a cryptocurrency network, it requires blockchain nodes to actively monitor all the transactions and compute the purported destination addresses, which restricts its application for resource-constrained environments like Internet of Things (IoT). In this paper, we propose DKSAP-IoT, a faster dual-key stealth address protocol for blockchain-based IoT systems. DKSAP-IoT utilizes a technique similar to the TLS session resumption to improve the performance and reduce the transaction size at the same time between two communication peers. Our theoretical analysis as well as the extensive experiments on an embedded computing platform demonstrate that DKSAPIoT is able to reduce the computational overhead by at least 50% when compared to the state-of-the-art scheme, thereby paving the way for its application to blockchain-based IoT systems.

The earth is flat (p > 0.05): significance thresholds and the crisis of unreplicable research <=SEP=> The widespread use of 'statistical significance' as a license for making a claim of a scientific finding leads to considerable distortion of the scientific process (according to the American Statistical Association). We review why degrading p-values into 'significant' and 'nonsignificant' contributes to making studies irreproducible, or to making them seem irreproducible. A major problem is that we tend to take small p-values at face value, but mistrust results with larger p-values. In either case, p-values tell little about reliability of research, because they are hardly replicable even if an alternative hypothesis is true. Also significance (p ≤ 0.05) is hardly replicable: at a good statistical power of 80%, two studies will be 'conflicting', meaning that one is significant and the other is not, in one third of the cases if there is a true effect. A replication can therefore not be interpreted as having failed only because it is nonsignificant. Many apparent replication failures may thus reflect faulty judgment based on significance thresholds rather than a crisis of unreplicable research. Reliable conclusions on replicability and practical importance of a finding can only be drawn using cumulative evidence from multiple independent studies. However, applying significance thresholds makes cumulative knowledge unreliable. One reason is that with anything but ideal statistical power, significant effect sizes will be biased upwards. Interpreting inflated significant results while ignoring nonsignificant results will thus lead to wrong conclusions. But current incentives to hunt for significance lead to selective reporting and to publication bias against nonsignificant findings. Data dredging, p-hacking, and publication bias should be addressed by removing fixed significance thresholds. Consistent with the recommendations of the late Ronald Fisher, p-values should be interpreted as graded measures of the strength of evidence against the null hypothesis. Also larger p-values offer some evidence against the null hypothesis, and they cannot be interpreted as supporting the null hypothesis, falsely concluding that 'there is no effect'. Information on possible true effect sizes that are compatible with the data must be obtained from the point estimate, e.g., from a sample average, and from the interval estimate, such as a confidence interval. We review how confusion about interpretation of larger p-values can be traced back to historical disputes among the founders of modern statistics. We further discuss potential arguments against removing significance thresholds, for example that decision rules should rather be more stringent, that sample sizes could decrease, or that p-values should better be completely abandoned. We conclude that whatever method of statistical inference we use, dichotomous threshold thinking must give way to non-automated informed judgment.

Bootstrapping Fine-Grained Classifiers : ! Active Learning with a Crowd in the Loop <=SEP=> We propose an iterative crowd-enabled active learning algorithm for building high-precision visual classifiers from unlabeled images. Our method employs domain experts to identify a small number of examples of a specific visual event. These expert-labeled examples seed a classifier, which is then iteratively trained by active querying of a non-expert crowd. These non-experts actively refine the classifiers at every iteration by answering simple binary questions about the classifiers’ detections. The advantage of this approach is that experts efficiently shepherd an unsophisticated crowd into training a classifier capable of fine-grained distinctions. This obviates the need to label an entire dataset to obtain high-precision classifiers. We find these classifiers are advantageous for creating a large vocabulary of visual attributes for specialized taxonomies. We demonstrate our crowd active learning pipeline by creating classifiers for attributes related to North American birds and fashion.

Outlooks and Insights on Group Decision and Negotiation <=SEP=> Community governance needs a small group discussion among community people to identify their concerns, to share them each other and to generate better alternatives for solving problems. A planner should manage the discussion to achieve these objectives. This study analyzed the small group discussion in the community disaster risk management by using text mining. Correspondence analysis was applied to the text data of the discussion. Analytical results revealed the characteristics and effects of small group discussion.

Validating Formative Partial Least Squares (PLS) Models: Methodological Review and Empirical Illustration <=SEP=> The issue of formative constructs, as opposed to th e more frequently used reflective ones, has recently gained momentum among IS and Management re searchers. Most researchers maintain that formative constructs have been understudied, a n that there is paucity in methodological literature to guide researchers on how such constru cts should be developed and estimated. A survey of IS research has revealed that about 29% o f constructs were misspecified as reflective rather than formative constructs. Furthermore, guid elines about how models containing formative constructs should be indentified and estimated are fragmented and inconsistent. Thus, this paper aims to present a methodological review of formativ e model identification and evaluation. We bring a brief theoretical overview of formative con structs, and put together a guideline for estimating formative measurement and structural mod els. We then present a simplified model composed of three formative constructs and illustra te how it is assessed and estimated using

Spatial Diversity 24-GHz FMCW Radar With Ground Effect Compensation for Automotive Applications <=SEP=> In automotive radar applications, a realistic road surface can cause multipath reflection, degrade the received power, and reduce detection probability. This paper proposes a one-transmitter–two-receiver (1T2R) 24-GHz frequency-modulation continuous-wave (FMCW) radar architecture with spatial diversity and ground effect compensation for automotive applications. A ray-tracing technique was developed to evaluate the multipath effect of the road surface. In the proposed design, suitable spacing between the two receiving antennas compensated for the multipath effect of the road surface and improved the signal-to-ground clutter ratio of the receivers by a minimum of 20 dB at certain distances. The measurement and calculation results of the proposed radar are in close agreement.

API design for machine learning software: experiences from the scikit-learn project <=SEP=> scikit-learn is an increasingly popular machine learning library. Written in Python, it is designed to be simple and efficient, accessible to non-experts, and reusable in various contexts. In this paper, we present and discuss our design choices for the application programming interface (API) of the project. In particular, we describe the simple and elegant interface shared by all learning and processing units in the library and then discuss its advantages in terms of composition and reusability. The paper also comments on implementation details specific to the Python ecosystem and analyzes obstacles faced by users and developers of the library.

PLINK: a tool set for whole-genome association and population-based linkage analyses. <=SEP=> Whole-genome association studies (WGAS) bring new computational, as well as analytic, challenges to researchers. Many existing genetic-analysis tools are not designed to handle such large data sets in a convenient manner and do not necessarily exploit the new opportunities that whole-genome data bring. To address these issues, we developed PLINK, an open-source C/C++ WGAS tool set. With PLINK, large data sets comprising hundreds of thousands of markers genotyped for thousands of individuals can be rapidly manipulated and analyzed in their entirety. As well as providing tools to make the basic analytic steps computationally efficient, PLINK also supports some novel approaches to whole-genome data that take advantage of whole-genome coverage. We introduce PLINK and describe the five main domains of function: data management, summary statistics, population stratification, association analysis, and identity-by-descent estimation. In particular, we focus on the estimation and use of identity-by-state and identity-by-descent information in the context of population-based whole-genome studies. This information can be used to detect and correct for population stratification and to identify extended chromosomal segments that are shared identical by descent between very distantly related individuals. Analysis of the patterns of segmental sharing has the potential to map disease loci that contain multiple rare variants in a population-based linkage analysis.

Future Shipboard MVdc System Protection Requirements and Solid-State Protective Device Topological Tradeoffs <=SEP=> The search for the optimum architecture for shipboard medium voltage dc integrated power systems must take into account the short-circuit protection in addition to overarching goals of efficiency, survivability, reliability of power, and cost effectiveness. Presently, accepted approaches to protection are “unit-based,” which means the power converter(s) feeding the bus coordinate with no-load electromechanical switches to isolate faulted portions of the bus. However, “breaker-based” approaches, which rely upon solid-state circuit breakers for fault mitigation, can result in higher reliability of power and potentially higher survivability. The inherent speed of operation of solid-state protective devices will also play a role in fault isolation, hence reducing stress level on all system components. A comparison study is performed of protective device topologies that are suitable for shipboard distribution systems rated between 4 and 30 kVdc from the perspectives of size and number of passive components required to manage the commutation energy during sudden fault events and packaging scalability to higher current and voltage systems. The implementation assumes a multichip silicon carbide (SiC) 10-kV, 240-A MOSFET/junction barrier Schottkey (JBS) diode module.

Informing the Design of Spoken Conversational Search: Perspective Paper <=SEP=> We conducted a laboratory-based observational study where pairs of people performed search tasks communicating verbally. Examination of the discourse allowed commonly used interactions to be identified for Spoken Conversational Search (SCS). We compared the interactions to existing models of search behaviour. We find that SCS is more complex and interactive than traditional search. This work enhances our understanding of different search behaviours and proposes research opportunities for an audio-only search system. Future work will focus on creating models of search behaviour for SCS and evaluating these against actual SCS systems.

Interference cancellation for cellular systems: a contemporary overview <=SEP=> Cellular networks today are interference-limited and only becomes increasingly so in the future due to the many users that need to share the spectrum to achieve high-rate multimedia communication. Despite the enormous amount of academic and industrial research in the past 20 years on interference-aware receivers and the large performance improvements promised by these multi-user techniques, today's receivers still generally treat interference as background noise. In this article, we enumerate the reasons for this widespread scepticism, and discuss how current and future trends increases the need for and viability of multi-user receivers for both the uplink, where many asynchronous users are simultaneously detected, and the downlink, where users are scheduled and largely orthogonalized; but the mobile handset still needs to cope with a few dominant interfering base stations. New results for interference cancelling receivers that use conventional front-ends are shown to alleviate many of the shortcomings of prior techniques, particularly for the challenging uplink. This article gives an overview of key recent research breakthroughs on interference cancellation and highlights system-level considerations for future multi-user receivers.

Active learning for online bayesian matrix factorization <=SEP=> The problem of large-scale online matrix completion is addressed via a Bayesian approach. The proposed method learns a factor analysis (FA) model for large matrices, based on a small number of observed matrix elements, and leverages the statistical model to actively select which new matrix entries/observations would be most informative if they could be acquired, to improve the model; the model inference and active learning are performed in an online setting. In the context of online learning, a greedy, fast and provably near-optimal algorithm is employed to sequentially maximize the mutual information between past and future observations, taking advantage of submodularity properties. Additionally, a simpler procedure, which directly uses the posterior parameters learned by the Bayesian approach, is shown to achieve slightly lower estimation quality, with far less computational effort. Inference is performed using a computationally efficient online variational Bayes (VB) procedure. Competitive results are obtained in a very large collaborative filtering problem, namely the Yahoo! Music ratings dataset.

Related Key Chosen IV Attack on Grain-128a Stream Cipher <=SEP=> The well-known stream cipher Grain-128 is a variant version of Grain v1 with 128-bit secret key. Grain v1 is a stream cipher which has successfully been chosen as one of seven finalists by European eSTREAM project. Yet Grain-128 is vulnerable against some recently introduced attacks. A new version of Grain-128 with authentication, named Grain-128a, is proposed by Ågren, Hell, Johansson, and Meier. The designers claimed that Grain-128a is strengthened against all known attacks and observations on the original Grain-128. So far there exists no attack on Grain-128a except a differential fault attack by Banik, Maitra, and Sarkar. In this paper, we give some observations on Grain-128a, and then propose a related key chosen IV attack on Grain-128a based on these observations. Our attack can recover the 128-bit secret key of Grain-128a with a computational complexity of <formula formulatype="inline"> <tex Notation="TeX">$2^{96.322} $</tex></formula>, requiring <formula formulatype="inline"> <tex Notation="TeX">$2^{96} $</tex></formula> chosen IVs and <formula formulatype="inline"><tex Notation="TeX">$2^{103.613} $</tex> </formula> keystream bits. The success probability of our attack is 0.632. This related key attack is “minimal” in the sense that it only requires two related keys. The result shows that our attack is much better than an exhaustive key search in the related key setting.

16-Way Radial Divider/Combiner for Solid State Power Amplifiers in the K Band <=SEP=> This paper presents the design and measurement results of a 16-way radial power divider/combiner for solid state power amplifiers in the K band using an original assembly technique of the combined ways. The design is based on a radial non-resonant cavity connected to 8 peripheral rectangular waveguides with two waveguide-to-microstrip transitions inserted in each peripheral rectangular waveguide. Each combined way includes on the same tray the input and output waveguide-to-microstrip transitions and the MMIC amplifier location. The trays can be individually tested before mounting in the 16-way divider/combiner. The low insertion loss of the 16-way power divider/combiner leads to an estimated combining efficiency better than 86.5% from 16.5 GHz to 21 GHz with a maximum value about 88% from 17.2 to 19.2 GHz.

Accelerating and Compressing LSTM Based Model for Online Handwritten Chinese Character Recognition <=SEP=> With the development of deep learning tools, the online handwritten Chinese character recognition (HCCR) performance has been greatly improved by using deep neural networks (DNNs) especially for long short-term memory (LSTM). However, DNNs suffer from large consumption of computation and storage resources, which may cause problems for service providers, such as server pressure, longer service latency and higher energy consumption. To solve these problems, we propose a framework that combines singular value decomposition (SVD) and adaptive drop weight (ADW) to accelerate and compress LSTM based models. We first build an LSTM based model that achieves an accuracy of 97.83% on the ICDAR2013 online HCCR competition dataset. After restructuring the model with SVD and ADW, it can reduce the FLOPs (floating point operations per second) of the forward process by approximately 10 times and compress the model with 1/30 of the original size with only a 0.5% decrease in accuracy. Finally, integrated with our efficient forward implementation, the recognition of an online character requires only 2.7 ms in average on a CPU with a single thread, while requiring only 0.45 MB for model storage.

ASSESSMENT AND COLLABORATION IN ONLINE LEARNING <=SEP=> Assessment can be seen as the engine that drives student course activity, online or off. It is particularly important in encouraging and shaping collaborative activity online. This paper discusses three sorts of online collaborative activity—collaborative discussion, small group collaboration, and collaborative exams. In each of these areas, it provides both theoretical grounding and practical advice for assessing, and so encouraging, collaboration in online courses.

Statistical Parsing for harmonic Analysis of Jazz Chord Sequences <=SEP=> Analysing music resembles natural language parsing in requiring the derivation of structure from an unstructured and highly ambiguous sequence of elements, whether they are notes or words. Such analysis is fundamental to many music processing tasks, such as key identification and score transcription. The focus of the present paper is on harmonic analysis. We use the three-dimensional tonal harmonic space developed by [4, 13, 14] to define a theory of tonal harmonic progression, which plays a role analogous to semantics in language. Our parser applies techniques from natural language processing (NLP) to the problem of analysing harmonic progression. It uses a formal grammar of jazz chord sequences of a kind that is widely used for NLP, together with the statistically based modelling techniques standardly used in wide-coverage parsing, to map music onto underlying harmonic progressions in the tonal space. Using supervised learning over a small corpus of jazz chord sequences annotated with harmonic analyses, we show that grammar-based musical parsing using simple statistical parsing models is more accurate than a baseline Markovian model trained on the same corpus.

Smart-cap for pedestrian safety <=SEP=> In the last few decades, the use of mobile phones have increased rapidly. Safety experts have considered dependency on mobile phones as a threat to the pedestrian safety. In this paper, a wearable smart-cap has been proposed to detect an obstacle in the path of a pedestrian mobile user. The vision of the proposed system is to provide a user-friendly, cost effective and a quick way to avoid pedestrian accidents due to mobile phones. The volunteers' feedback and testing results have been outstanding. The volunteers have reported that the proposed system is user-friendly and accurate.

Towards a design generation methodology <=SEP=> Inspired by the recent advances of deep learning and computer graphics techniques in generating sophisticated artistic styles and architectural designs, we envision a general design generation methodology that uses various specification and generative methods and tools in an integral design cycle.

How data science can advance mental health research <=SEP=> Accessibility of powerful computers and availability of so-called big data from a variety of sources means that data science approaches are becoming pervasive. However, their application in mental health research is often considered to be at an earlier stage than in other areas despite the complexity of mental health and illness making such a sophisticated approach particularly suitable. In this Perspective, we discuss current and potential applications of data science in mental health research using the UK Clinical Research Collaboration classification: underpinning research; aetiology; detection and diagnosis; treatment development; treatment evaluation; disease management; and health services research. We demonstrate that data science is already being widely applied in mental health research, but there is much more to be done now and in the future. The possibilities for data science in mental health research are substantial. Russ et al. discuss the broad applications of data science to mental health research and consider future ways that big data can improve detection, diagnosis, treatment, healthcare provision and disease management.

Joint Embedding Models for Textual and Social Analysis <=SEP=> In online social networks, users openly interact, share content, and endorse each other. Although the data is interconnected, previous research has primarily focused on modeling the social network behavior separately from the textual content. Here we model the data in a holistic way, taking into account connections between social behavior and content. Specifically, we define multiple decision tasks over the relationships between users and the content generated by them. We show, on a real world dataset, that a learning a joint embedding (over user characteristics and language) and using joint prediction (based on intraand inter-task constraints) produces consistent gains over (1) learning specialized embeddings, and (2) predicting locally w.r.t. a single task, with or without constraints.

Differentially Private Online Learning <=SEP=> In this paper, we consider the problem of preserving privacy in the context of online learning. Online learning involves learning from data in real-time, due to which the learned model as well as its predictions are continuously changing. This makes preserving privacy of each data point significantly more challenging as its effect on the learned model can be easily tracked by observing changes in the subsequent predictions. Furthermore, with more and more online systems (e.g. search engines like Bing, Google etc.) trying to learn their customers’ behavior by leveraging their access to sensitive customer data (through cookies etc.), the problem of privacy preserving online learning has become critical. We study the problem in the framework of online convex programming (OCP)—a popular online learning setting with several theoretical and practical implications—while using differential privacy as the formal measure of privacy. For this problem, we provide a generic framework that can be used to convert any given OCP algorithm into a private OCP algorithm with provable privacy as well as regret guarantees (utility), provided that the given OCP algorithm satisfies the following two criteria: 1) linearly decreasing sensitivity, i.e., the effect of the new data points on the learned model decreases linearly, 2) sub-linear regret. We then illustrate our approach by converting two popular OCP algorithms into corresponding differentially private algorithms while guaranteeing Õ( √ T ) regret for strongly convex functions. Next, we consider the practically important class of online linear regression problems, for which we generalize the approach by Dwork et al. (2010a) to provide a differentially private algorithm with just poly-log regret. Finally, we show that our online learning framework can be used to provide differentially private algorithms for the offline learning problem as well. For the offline learning problem, our approach guarantees better error bounds and is more practical than the existing state-of-the-art methods (Chaudhuri et al., 2011; Rubinstein et al., 2009).

The humble Bayesian: model checking from a fully Bayesian perspective. <=SEP=> Gelman and Shalizi (2012) criticize what they call the 'usual story' in Bayesian statistics: that the distribution over hypotheses or models is the sole means of statistical inference, thus excluding model checking and revision, and that inference is inductivist rather than deductivist. They present an alternative hypothetico-deductive approach to remedy both shortcomings. We agree with Gelman and Shalizi's criticism of the usual story, but disagree on whether Bayesian confirmation theory should be abandoned. We advocate a humble Bayesian approach, in which Bayesian confirmation theory is the central inferential method. A humble Bayesian checks her models and critically assesses whether the Bayesian statistical inferences can reasonably be called upon to support real-world inferences.

NANOPARTICLES – AN OVERVIEW <=SEP=> Recently particulate systems like nanoparticles have been used as a physical approach to alter and improve the pharmacokinetic and pharmacodynamic properties of various types of drug molecules. They have been used in vivo to protect the drug entity in the systemic circulation, restrict access of the drug to the chosen sites and to deliver the drug at a controlled and sustained rate to the site of action.Drug delivery research is clearly moving from the microto the nanosize scale. Nanotechnology is therefore emerging as a field in medicine that is expected to elicit significant therapeutic benefits. The development of effective nanodelivery systems capable of carrying a drug specifically and safely to a desired site of action is one of the most challenging tasks of pharmaceutical formulation investigators. They are attempting to reformulate and add new indications to the existing blockbuster drugs to maintain positive scientific outcomes and therapeutic breakthroughs. The nanodelivery systems mainly include nanoemulsions, lipid or polymeric Nanoparticles and liposomes.For the past few years, there has been a considerable research on the basis of Novel drug delivery system, using particulate vesicle systems as such drug carriers for small and large molecules. Nanoparticles have been improving the therapeutic effect of drugs and minimize the side effects. Basically, Nanoparticles have been prepared by using various techniques as such dispersion of preformed polymers, polymerization of monomers and ionic gelation or co-acervation of hydrophilic polymer.

Clique percolation in random networks. <=SEP=> The notion of k-clique percolation in random graphs is introduced, where k is the size of the complete subgraphs whose large scale organizations are analytically and numerically investigated. For the Erdos-Rényi graph of N vertices we obtain that the percolation transition of k-cliques takes place when the probability of two vertices being connected by an edge reaches the threshold p(c) (k) = [(k - 1)N](-1/(k - 1)). At the transition point the scaling of the giant component with N is highly nontrivial and depends on k. We discuss why clique percolation is a novel and efficient approach to the identification of overlapping communities in large real networks.