• Title/Summary/Keyword: Forensic Data

Search Result 366, Processing Time 0.025 seconds

Signal and Telegram Security Messenger Digital Forensic Analysis study in Android Environment (안드로이드 환경에서 Signal과 Telegram 보안 메신저 디지털 포렌식분석 연구)

  • Jae-Min Kwon;Won-Hyung Park;Youn-sung Choi
    • Convergence Security Journal
    • /
    • v.23 no.3
    • /
    • pp.13-20
    • /
    • 2023
  • This study conducted a digital forensic analysis of Signal and Telegram, two secure messengers widely used in the Android environment. As mobile messengers currently play an important role in daily life, data management and security within these apps have become very important issues. Signal and Telegram, among others, are secure messengers that are highly reliable among users, and they safely protect users' personal information based on encryption technology. However, much research is still needed on how to analyze these encrypted data. In order to solve these problems, in this study, an in-depth analysis was conducted on the message encryption of Signal and Telegram and the database structure and encryption method in Android devices. In the case of Signal, we were able to successfully decrypt encrypted messages that are difficult to access from the outside due to complex algorithms and confirm the contents. In addition, the database structure of the two messenger apps was analyzed in detail and the information was organized into a folder structure and file format that could be used at any time. It is expected that more accurate and detailed digital forensic analysis will be possible in the future by applying more advanced technology and methodology based on the analyzed information. It is expected that this research will help increase understanding of secure messengers such as Signal and Telegram, which will open up possibilities for use in various aspects such as personal information protection and crime prevention.

Deriving Priorities of Competences Required for Digital Forensic Experts using AHP (AHP 방법을 활용한 디지털포렌식 전문가 역량의 우선순위 도출)

  • Yun, Haejung;Lee, Seung Yong;Lee, Choong C.
    • The Journal of Society for e-Business Studies
    • /
    • v.22 no.1
    • /
    • pp.107-122
    • /
    • 2017
  • Nowadays, digital forensic experts are not only computer experts who restore and find deleted files, but also general experts who posses various capabilities including knowledge about processes/laws, communication skills, and ethics. However, there have been few studies about qualifications or competencies required for digital forensic experts comparing with their importance. Therefore, in this study, AHP questionnaires were distributed to digital forensic experts and analyzed to derive priorities of competencies; the first-tier questions which consisted of knowledge, technology, and attitude, and the second-tier ones which have 20 items. Research findings showed that the most important competency was knowledge, followed by technology and attitude but no significant difference was found. Among 20 items of the second-tier competencies, the most important competency was "digital forensics equipment/tool program utilization skill" and it was followed by "data extraction and imaging skill from storage devices." Attitude such as "judgment," "morality," "communication skill," "concentration" were subsequently followed. The least critical one was "substantial law related to actual cases." Previous studies on training/education for digital forensics experts focused on law, IT knowledge, and usage of analytic tools while attitude-related competencies have not given proper attention. We hope this study can provide helpful implications to design curriculum and qualifying exam to foster digital forensic experts.

The role of Forensic Nurse in the situation of Sexual Assault (성폭력 발생시 법의간호사의 역할)

  • Youk, Gi-Young;Kwak, Jyung-Sik
    • Journal of forensic and investigative science
    • /
    • v.1 no.1
    • /
    • pp.31-44
    • /
    • 2006
  • The importance regarding the notion of immediate medical treatment and nursing for the victims of sexual crimes is not widely recognized yet in Korea. Throughout this research is focused on the nursing systems and the system of foreign countries in reference to sexual crime victims, and the conclusion is as follows. In Korea, there are currently no educational or medical institutes for the medical handling for the victims of sexual crimes, and the role of nurses in the medical institutes is insufficient. In addition, the basis for the standard of operation regarding the initial response, evidence collection, pursuit of systematical evidence and data is not established even in the sexual assault counseling/advocacy center. Therefore, it is necessary to foster the sexual assault nurse examiner for the sexual crime victims, and to develop adequate training programs based on the present situation in Korea. Though the cooperation among government, medical institutes, and social movement groups, it is essential to initiate effective and publicly-trusted specialized training programs for forensic nurses who will be fully charged with the treatment of sexual crime victims. By introducing the sexual assault nurse examiner system, it can be possible to develop advanced treatment for the child or adolescent victims of sex crimes.

  • PDF

The P275A Polymorphism in the Macrophage Scavenger Receptor 1 Gene and Prostate Cancer Risk: a Meta-Analysis

  • Zhou, Qiao-Xia;Tang, Jian-Qiu;Zhao, Fen;Wei, Fu-Lin;Huang, Ying
    • Asian Pacific Journal of Cancer Prevention
    • /
    • v.16 no.13
    • /
    • pp.5407-5413
    • /
    • 2015
  • Background: Published data regarding associations between the P275A polymorphism in the macrophage scavenger receptor 1 (MSR1) gene and prostate cancer (PCa) risk are inconclusive. The aim of this study was to comprehensively evaluate the genetic risk of P275A polymorphism in MSR1 gene for PCa. Materials and Methods: A systematic literature search was carried out in Pubmed, Medline (Ovid), Embase, CBM, CNKI, Weipu, and Wanfang databases, covering all available publications (last search was performed on Apr 27, 2015). Statistical analysis was performed using Revman 5.2 and STATA 10.1 software. Results: A total of 5,017 cases and 4,869 controls in 12 case-control studies were included in this meta-analysis. When all groups were pooled, there was no evidence that the P275A polymorphism had a significant association with PCa under dominant (OR=0.93, 95%CI=0.81-1.06, and p=0.28), co-dominant (homogeneous OR=0.97, 95%CI=0.56-1.68, and p=0.92; heterogeneous OR=0.93, 95%CI=0.74-1.15, and p=0.49), recessive (OR=1.10, 95%CI=0.65-1.87, and p=0.73), over-dominant (OR=0.93, 95%CI=0.75-1.15, and p=0.50), and allelic (OR=0.95, 95%CI=0.77-1.16, and p=0.61) genetic models. For stratified analyses by ethnicity and study design, no significant associations were found in the white race, the yellow race, the black race and mixed ethnicity, and the population-based case-control (PCC) and hospital-based case-control (HCC) studies under all genetic models. Conclusions: Based on our meta-analysis, the P275A polymorphism in the MSR1 gene is unlikely to be a risk factor for PCa.

Association of Cadmium but not Arsenic Levels in Lung Cancer Tumor Tissue with Smoking, Histopathological Type and Stage

  • Demir, Nalan;Enon, Serkan;Turksoy, Vugar Ali;Kayaalti, Zeliha;Kaya, Seda;Cangir, Ayten Kayi;Soylemezoglu, Tulin;Savas, Ismail
    • Asian Pacific Journal of Cancer Prevention
    • /
    • v.15 no.7
    • /
    • pp.2965-2970
    • /
    • 2014
  • Background: To evaluate association of lung cancer with arsenic and cadmium levels measured in tumor tissue. Materials and Methods: Ninety-five patients with lung cancer tumor tissue obtained surgically were included in this study. Arsenic and cadmium levels were measured and levels of metals were compared among types of lung cancer and with reference to patient data. Results: The histopathologic diagnoses of the 95 cases were SCC, 49, adenocarcinoma, 28, large cell, 11 and SCLC, 1. Mean tumor arsenic and cadmium levels were $149.3{\pm}129.1{\mu}g/kg$ and $276.3{\pm}219.3{\mu}g/kg$, respectively. Cadmium levels were significantly associated with smoking (p=0.02), histopathologic type (p=0.005), and TNM staging (r=0.325; p=0.001), although arsenic was not related to any parameter (p>0.05). There was no relation between metal levels and mortality (p>0.05). Conclusions: We found a significant association between tumor cadmium levels of patients with lung cancer and smoking, histopathologic type and staging, although there was no relation with arsenic levels.

MFT-based Forensic Evidence File Search Method Using Direct Access to Physical Sector of Hard Disk Drive (하드디스크의 물리적 섹터 접근 방법을 이용한 MFT기반 증거 파일 탐색 기법)

  • Kim, Yo-Sik;Choi, Myeong-Ryeol;Chang, Tae-Joo;Ryou, Jae-Cheol
    • Convergence Security Journal
    • /
    • v.8 no.4
    • /
    • pp.65-71
    • /
    • 2008
  • According to the capacity of hard disk drive is increasing day by day, the amount of data that forensic investigators should analyze is also increasing. This trend need tremendous time and effort in determining which files are important as evidence on computers. Using the file system APIs provided by Windows system is the easy way to identify those files. This method, however, requires a large amount of time as the number of files increase and changes the access time of files. Moreover, some files cannot be accessed due to the use of operating system. To resolve these problems, forensic analysis should be conducted by using the Master File Table (MFT). In this paper, We implement the file access program which interprets the MFT information in NTFS file system. We also extensibly compare the program with the previous method. Experimental results show that the presented program reduces the file access time then others. As a result, The file access method using MFT information is forensically sound and also alleviates the investigation time.

  • PDF

On Artifact Analysis for User Behaviors in Collaboration Tools - Using differential forensics for distinct operating environments (협업 툴의 사용자 행위별 아티팩트 분석 연구 - 운영환경에 따른 differential forensic 개념을 이용하여)

  • Kim, Young-hoon;Kwon, Tae-kyoung
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.31 no.3
    • /
    • pp.353-363
    • /
    • 2021
  • As the Untact era is rapidly changing, collaboration tools are increasing their utilization and value as digital technologies for non-face-to-face work. While instant messenger-based collaboration tools support a variety of functions, crime and accident concerns are also increasing in proportion to their convenience, such as information leakage and security incidents. Meanwhile, the digital forensics perspective on collaborative tools is not enough, so forensics research is needed. This study analyzes significant artifacts in the two operating environments through Windows and Android forensics research on Microsoft Teams, the collaboration tool with the highest share in the world. Also, based on differences in artifacts and data attributes according to the operating environment, by applying 'differential forensic', we proved that the usefulness of evidence can be improved by presenting a complementary analysis method and timeline configuration through information linkage.

Effect of Occupational Exposure to Herbicides on Oxidative Stress in Sprayers

  • Intayoung, Unchisa;Wunnapuk, Klintean;Kohsuwan, Kanyapak;Sapbamrer, Ratana;Khacha-ananda, Supakit
    • Safety and Health at Work
    • /
    • v.12 no.1
    • /
    • pp.127-132
    • /
    • 2021
  • Background: Herbicides such as glyphosate, paraquat, and 2,4-dichlorophenoxyacetic acid have been reported to cause adverse side effects through production of reactive oxygen species. However, there were no data representing the adverse effects of a mixture herbicide usage in farmers, especially the changes in oxidative marker and antioxidant defense. This study aimed to determine the urinary malondialdehyde (MDA) and glutathione (GSH) level in farmers using mixed herbicides. Methods: Ninety-three farmers were recruited, and two spot urine samples (before and after work) were collected. The urinary MDA level was evaluated by thiobarbituric acid reactive substance assay, and the urinary GSH level was determined using the enzymatic recycling method. Results: Sixty-two percent of the participants were men, and 59% of the participants worked in a farm for 20-40 years. The common combinations of herbicide usage were glyphosate with 2,4-dichlorophenoxyacetic acid (36.5%). There was no significant difference between pre- and post-work urinary MDA and GSH levels among the 3 groups of herbicides. However, the urinary MDA levels in farmers using the combination of glyphosate and paraquat were significantly higher than those found in farmers using glyphosate alone. The associated factors with changes in MDA levels found that the exposure intensity index (B = 0.154), the cumulative exposure intensity index (B = 0.023), and wearing gloves while working (B = -2.347) were found to be significantly associated with MDA level. Conclusion: The results suggest that the combined use of glyphosate and paraquat caused a significant increase in urinary MDA levels. Moreover, intensity of exposure to herbicide and wearing gloves were associated with the level of MDA.

Forensic study of autonomous vehicle using blockchain (블록체인을 이용한 자율주행 차량의 포렌식 연구)

  • Jang-Mook, Kang
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.23 no.1
    • /
    • pp.209-214
    • /
    • 2023
  • In the future, as autonomous vehicles become popular at home and abroad, the frequency of accidents involving autonomous vehicles is also expected to increase. In particular, when a fully autonomous vehicle is operated, various criminal/civil problems such as sexual violence, assault, and fraud between passengers may occur as well as the vehicle accident itself. In this case, forensics for accidents involving autonomous vehicles and accidents involving passengers in the vehicles are also about to change. This paper reviewed the types of security threats of autonomous vehicles, methods for maintaining the integrity of evidence data using blockchain technology, and research on digital forensics. Through this, it was possible to describe threats that would occur in autonomous vehicles using blockchain technology and forensic techniques for each type of accident in a scenario-type manner. Through this study, a block that helps forensics of self-driving vehicles before and after accidents by investigating forensic security technology of domestic and foreign websites to respond to vulnerabilities and attacks of autonomous vehicles, and research on block chain security of research institutes and information security companies. A chain method was proposed.

Attitude Toward Mental Health Recovery, Meaning, Barriers and Facilitating Factors Among Nurses of National Forensic Psychiatric Hospital (국립법무병원 간호사의 정신건강 회복에 대한 태도와 지각된 회복의 의미, 장애요인 및 촉진 요인)

  • Moonhee Gang;Donghyeon Gwak
    • Journal of Industrial Convergence
    • /
    • v.20 no.12
    • /
    • pp.97-106
    • /
    • 2022
  • The aim of this study was identify national forensic psychiatric hospital nurses' attitudes, perceived meaning, facilitators and barriers to the recovery of mental health. A descriptive study design was used. The participants were 100 nurses working in a national forensic psychiatric hospital. The collected data was analyzed by descriptive statistics, independent t-test, ANOVA, scheffe-test using SPSS 26.0 WIN program. Also, content analysis was used for the responses described by the participants. The participants attitude toward recovery from mental health was positive(3.90±0.41), attitude showed significant differences in certification of psychiatric mental health nurse practitioner(t=-2.06, p= 042), certification of addiction nurses(t=-2.36, p= 020). The meaning of recovery that participants perceived were symptom mitigation(42.0%), barriers were family indifference and prejudice(31.0%), facilitators were medication, psychiatric rehabilitation program and therapeutic interviews(33.0%). It is necessary to provide education to improve nurses' understand to mental health recovery, organizational efforts are needed to establish a family support system and therapeutic environments for the recovery of mentally disordered offenders.