Foundational forensic techniques for cellular and ad hoc multi-hop networks

The Internet has become an integral part of our nation’s critical socio-economic infrastructure. With its heightened use and growing complexity however, organizations are at greater risk of cyber crimes. To aid in the investigation of crimes committed on or via the Internet, a network forensics analysis tool pulls together needed digital evidence. It provides a platform for performing deep network analysis by capturing, recording and analyzing network events to find out the source of a security attack or other information security incidents. Existing network forensics work has been mostly focused on the Internet and fixed networks. But the exponential growth and use of wireless technologies, coupled with their unprecedented characteristics, necessitates the development of new network forensic analysis tools. This dissertation fostered the emergence of a new research field in cellular and ad-hoc network forensics. It was one of the first works to identify this problem and offer fundamental techniques and tools that laid the groundwork for future research. In particular, it introduced novel methods to record network incidents and report logged incidents. For recording incidents, location is considered essential to documenting network incidents. However, in network topology spaces, location cannot be measured due to absence of a ‘distance metric’. Therefore, a novel solution was proposed to label locations of nodes within network topology spaces, and then to authenticate the identity of nodes in ad hoc environments. For reporting logged incidents, a novel technique based on Distributed Hash Tables (DHT) was adopted. Although the direct use of DHTs for reporting logged incidents would result in an uncontrollably recursive traffic, a new mechanism was introduced that overcome this recursive process. These logging and reporting techniques aided forensics over cellular and ad-hoc networks, which in turn increased their ability to track and trace attacks to their source. These techniques were a starting point for further research and development that would result in equipping future ad hoc networks with forensic components to complement existing security mechanisms.

Foundational Forensic Techniques for Cellular and Ad Hoc Multi-hop Networks

The Internet has become an integral part of our nation's critical socio-economic infrastructure. With its heightened use and growing complexity however, organizations are at greater risk of cyber crimes. To aid in the investigation of crimes committed on or via the Internet, a network forensics analysis tool pulls together needed digital evidence. It provides a platform for performing deep network analysis by capturing, recording and analyzing network events to find out the source of a security attack or other information security incidents. Existing network forensics work has been mostly focused on the Internet and fixed networks. But the exponential growth and use of wireless technologies, coupled with their unprecedented characteristics, necessitates the development of new network forensic analysis tools. This dissertation fostered the emergence of a new research field in cellular and ad-hoc network forensics. It was one of the first works to identify this problem and offer fundamental techniques and tools that laid the groundwork for future research. In particular, it introduced novel methods to record network incidents and report logged incidents. For recording incidents, location is considered essential to documenting network incidents. However, in network topology spaces, location cannot be measured due to absence of a 'distance metric'. Therefore, a novel solution was proposed to label locations of nodes within network topology spaces, and then to authenticate the identity of nodes in ad hoc environments. For reporting logged incidents, a novel technique based on Distributed Hash Tables (DHT) was adopted. Although the direct use of DHTs for reporting logged incidents would result in an uncontrollably recursive traffic, a new mechanism was introduced that overcome this recursive process. These logging and reporting techniques aided forensics over cellular and ad-hoc networks, which in turn increased their ability to track and trace attacks to their source. These techniques were a starting point for further research and development that would result in equipping future ad hoc networks with forensic components to complement existing security mechanisms.

Determinants of local government pension funding: Empirical evidence from Florida

The financial community is well aware that continued underfunding of state and local government pension plans poses many public policy and fiduciary management concerns. However, a well-defined theoretical rationale has not been developed to explain why and how public sector pension plans underfund. This study uses three methods: a survey of national pension experts, an incomplete covariance panel method, and field interviews.^ A survey of national public sector pension experts was conducted to provide a conceptual framework by which underfunding could be evaluated. Experts suggest that plan design, fiscal stress, and political culture factors impact underfunding. However, experts do not agree with previous research findings that unions actively pursue underfunding to secure current wage increases.^ Within the conceptual framework and determinants identified by experts, several empirical regularities are documented for the first time. Analysis of 173 local government pension plans, observed from 1987 to 1992, was conducted. Findings indicate that underfunding occurs in plans that have lower retirement ages, increased costs due to benefit enhancements, when the sponsor faces current year operating deficits, or when a local government relies heavily on inelastic revenue sources. Results also suggest that elected officials artificially inflate interest rate assumptions to reduce current pension costs, consequently shifting these costs to future generations. In concurrence with some experts there is no data to support the assumption that highly unionized employees secure more funding than less unionized employees.^ Empirical results provide satisfactory but not overwhelming statistical power, and only minor predictive capacity. To further explore why underfunding occurs, field interviews were carried out with 62 local government officials. Practitioners indicated that perceived fiscal stress, the willingness of policymakers to advance funding, bargaining strategies used by union officials, apathy by employees and retirees, pension board composition, and the level of influence by internal pension experts has an impact on funding outcomes.^ A pension funding process model was posited by triangulating the expert survey, empirical findings, and field survey results. The funding process model should help shape and refine our theoretical knowledge of state and local government pension underfunding in the future. ^

A validation study of the construct "jealousy" in eleven- to fourteen-month-old infants: Evidence for its divergence from "fear" and "anger"

There has been increasing interest in expanding the scope of the study of the "basic" emotions and their development in infancy to include more of the so-called "complex" emotions like jealousy. This dissertation investigated evidence for the divergence of jealousy in infants from both fear and anger, two of the basic emotions said to be precursors and contributors to the emergence of jealousy in the later part of the first year of life. Participants judged how well eight emotion-denoting terms (including jealousy, anger and fear) described infants' emotionality in fear-, anger-, and jealousy-provoking situations in which the social context of the emotion episodes was either included or excluded. Differences within and between participants' judgments of the eight terms in the two context conditions were examined across the three emotion-provoking conditions. Results suggested that infants' emotional behavior denoting jealousy was not judged differently from behavior denoting anger or fear in the absence of contextual information and, that when contextual information was provided, attributions of infant jealousy, anger, and fear were made "correctly" for their respective target emotion conditions. ^

Jurors' use of social framework evidence

Monahan and Walker (1988) delineated three uses of social science evidence within the courts: social authority, social fact, and social framework. Social authority evidence is social science evidence used in making policy or law. Social fact evidence is social science evidence that describes research undertaken expressly for the case at hand. Social framework evidence involves providing conclusions from previously conducted social science research to assist jurors in evaluating the other evidence in the case. Although this type of evidence has traditionally been presented via expert testimony, Monahan and Walker (1988) have suggested that, because the social science research involved comes from the extant literature and is not the province of any particular expert, it would be more economical to have the judge present this information as part of the judicial instructions to the jury. This study tested the implicit assumption that the presentation of the social framework evidence by the judge will have the same impact on juror verdicts as presentation of this evidence by an expert. ^ Two hundred mock jurors watched a videotaped hostile work environment sexual harassment trial. The social framework evidence consisted of the discussion of factors that have been found to increase the likelihood of sex stereotyping of women by men. The trial included either no social framework evidence, social framework evidence presented by the expert, or social framework evidence presented in judicial instructions. ^ Results indicated that men who heard the social framework evidence from the judge were more likely to vote for the defendant than men who heard no social framework evidence. Men who heard the judicial instruction with the social framework evidence also rated the plaintiff as less credible than the other men and women in the study. Thus, it appears that, for men, social framework evidence presented by the judge harms the plaintiff's case by reducing ratings of her credibility, but the same evidence presented by an expert does not affect men's verdicts. For women, however, social framework evidence, irrespective of who presents it, enhances the plaintiff's case. ^

Juror need for cognition and sensitivity to methodological flaws in expert evidence

Two studies investigated the influence of juror need for cognition on the systematic and heuristic processing of expert evidence. U.S. citizens reporting for jury duty in South Florida read a 15-page summary of a hostile work environment case containing expert testimony. The expert described a study she had conducted on the effects of viewing sexualized materials on men's behavior toward women. Certain methodological features of the expert's research varied across experimental conditions. In Study 1 (N = 252), the expert's study was valid, contained a confound, or included the potential for experimenter bias (internal validity) and relied on a small or large sample (sample size) of college undergraduates or trucking employees (ecological validity). When the expert's study included trucking employees, high need for cognition jurors in Study 1 rated the expert more credible and trustworthy than did low need for cognition jurors. Jurors were insensitive to variations in the study's internal validity or sample size. Juror ratings of plaintiff credibility, plaintiff trustworthiness, and study quality were positively correlated with verdict. In Study 2 (N = 162), the expert's published or unpublished study (general acceptance) was either valid or lacked an appropriate control group (internal validity) and included a sample of college undergraduates or trucking employees (ecological validity). High need for cognition jurors in Study 2 found the defendant liable more often and evaluated the expert evidence more favorably when the expert's study was internally valid than when an appropriate control group was missing. Low need for cognition jurors did not differentiate between the internally valid and invalid study. Variations in the study's general acceptance and ecological validity did not affect juror judgments. Juror ratings of expert and plaintiff credibility, plaintiff trustworthiness, and study quality were positively correlated with verdict. The present research demonstrated that the need for cognition moderates juror sensitivity to expert evidence quality and that certain message-related heuristics influence juror judgments when ability or motivation to process systematically is low. ^

The National Institute of Justice guide for eyewitness identification evidence: Can it improve juror decision-making?

Mistaken eyewitness identifications of innocent lead to more false convictions in the United States than any other cause. In response to concerns about the reliability of eyewitness evidence, the National Institute of Justice (NIJ) in 1999 published a Guide for the gathering and preservation of eyewitness evidence by law enforcement personnel. Previous research has shown that eyewitness identifications are more accurate when obtained using procedures recommended in the NIJ Guide. This experiment assessed whether informing jurors about the Guide can improve their ability to discriminate between eyewitness identifications likely to be accurate and those likely to be inaccurate and, if so, how to most effectively provide jurors with such information. ^ Seven hundred sixteen U.S. citizens who reported for criminal jury duty participated. Half of the participant jurors read a summary of an armed robbery trial in which the police followed the NIJ Guide when obtaining an eyewitness identification of the defendant. The other half read about an identical case in which the police did not follow the Guide. Jurors received information about the Guide from a court-appointed expert witness, one of the attorneys in the case, the trial judge, the judge in combination with one of the attorneys, or from no one (in the control groups). Jurors then rendered a verdict in the case and answered questions about the evidence in the case. ^ When an expert witness or the judge (either alone or in combination with one of the attorneys) informed jurors about the Guide, the jurors voted to convict defendants likely to be guilty and to acquit defendants likely to be innocent more often than did uninformed jurors assigned to a control group. These data suggest that informing jurors about the NIJ Guide using expert testimony or instructions from a judge will improve the quality and accuracy of jurors' verdict decisions in cases involving eyewitness identification evidence. However, more research is needed to determine whether the judge will remain an effective source of information about the Guide in a longer, more detailed trial scenario and to learn more about the underlying psychological processes governing the effects observed in this experiment. ^

Jury decision making and the Story Model: How do deliberation style and evidence order influence the story that juries create?

This study investigated the utility of the Story Model for decision making at the jury level by examining the influence of evidence order and deliberation style on story consistency and guilt. Participants were shown a video-taped trial stimulus and then provided case perceptions including a guilt judgment and a narrative about what occurred during the incident. Participants then deliberated for approximately thirty minutes using either an evidence-driven or verdict-driven deliberation style before again providing case perceptions, including a guilt determination, a narrative about what happened during the incident, and an evidence recognition test. Multi-level regression analyses revealed that evidence order, deliberation style and sample interacted to influence both story consistency measures and guilt. Among students, participants in the verdict-driven deliberation condition formed more consistent pro-prosecution stories when the prosecution presented their case in story-order, while participants in the evidence-driven deliberation condition formed more consistent pro-prosecution stories when the defense's case was presented in story-order. Findings were the opposite among community members, with participants in the verdict-driven deliberation condition forming more consistent pro-prosecution stories when the defense's case was presented in story-order, and participants in the evidence-driven deliberation condition forming more consistent pro-prosecution stories when the prosecution's case was presented in story-order. Additionally several story consistency measures influenced guilt decisions. Thus there is some support for the hypothesis that story consistency mediates the influence of evidence order and deliberation style on guilt decisions.

Managing small-medium cities in a time of globalization: Experiences and evidence from Florida's public managers

This study examines how public management practitioners in small and medium-sized Florida cities perceive globalization and its impact on public management practice. Using qualitative analysis, descriptive statistics and factor analysis methods, data obtained from a survey and semi-structured interviews were studied to comprehend how public managers view the management and control of their municipalities in a time of globalization. The study shows that the public managers’ perceptions of globalization and its impact on public management in Florida’s small-medium cities are nuanced. Whereas some public managers feel that globalization has significant impacts on municipalities’ viability, others opine that globalization has no local impact. The study further finds that globalization processes are perceived as altering the public management functions of decision-making, economic development and service delivery in some small-medium cities in Florida as a result of transnational shifts, rapidly changing technologies, and municipalities’ heightened involvement in the global economy. The study concludes that the globalization discourse does not resonate among some public managers in Florida’s small-medium cities in ways implied in extant literature.

Disaster Risk Management Disparity in the Caribbean: Evidence from Barbados, Dominican Republic, Jamaica and Trinidad and Tobago

This study on risk and disaster management capacities of four Caribbean countries: Barbados, the Dominican Republic, Jamaica, and Trinidad and Tobago, examines three main dimensions: 1) the impact of natural disasters from 1900 to 2010 (number of events, number of people killed, total number affected, and damage in US$); 2) institutional assessments of disaster risk management disparity; and 3) the 2010 Inter-American Bank for Development (IADB) Disaster Risk and Risk Management indicators for the countries under study. The results show high consistency among the different sources examined, pointing out the need to extend the IADB measurements to the rest of the Caribbean countries. Indexes and indicators constitute a comparison measure vis-à-vis existing benchmarks in order to anticipate a capacity to deal with adverse events and their consequences; however, the indexes and indicators could only be tested against the occurrence of a real event. Therefore, the need exists to establish a sustainable and comprehensive evaluation system after important disasters to assess a country‘s performance, verify the indicators, and gain feedback on measurement systems and methodologies. There is diversity in emergency and preparedness for disasters in the four countries under study. The nature of the event (hurricanes, earthquakes, floods, and seismic activity), especially its frequency and the intensity of the damage experienced, is related to how each has designed its risk and disaster management policies and programs to face natural disasters. Vulnerabilities to disaster risks have been increasing, among other factors, because of uncontrolled urbanization, demographic density and poverty increase, social and economic marginalization, and lack of building code enforcement. The four countries under study have shown improvements in risk management capabilities, yet they are far from being completed prepared. Barbados‘ risk management performance is superior, in comparison, to the majority of the countries of the region. However, is still far in achieving high performance levels and sustainability in risk management, primarily when it has the highest gap between potential macroeconomic and financial losses and the ability to face them. The Dominican Republic has shown steady risk performance up to 2008, but two remaining areas for improvement are hazard monitoring and early warning systems. Jamaica has made uneven advances between 1990 and 2008, requiring significant improvements to achieve high performance levels and sustainability in risk management, as well as macroeconomic mitigation infrastructure. Trinidad and Tobago has the lowest risk management score of the 15 countries in the Latin American and Caribbean region as assessed by the IADB study in 2010, yet it has experienced an important vulnerability reduction. In sum, the results confirmed the high disaster risk management disparity in the Caribbean region.

Exploring the role of large predators in marsh food webs: evidence for a behaviorally-mediated trophic cascade

The influence of large predators on lower trophic levels in oligotrophic, structurally complex, and frequently disturbed aquatic environments is generally thought to be limited. We looked for effects of large predators in two semi-permanent, spikerush-dominated marshes by excluding large fish (>12 mm body depth) and similarly sized herpetofauna from 1 m2 cages (exclosures) for 2 weeks. The exclosures allowed for colonization by intermediate (in size and trophic position) consumers, such as small fish, shrimp, and crayfish. Exclosures were compared to control cages that allowed large fish to move freely in and out. At the end of the experiment, intermediate-consumer densities were higher in exclosures than in controls at both sites. Decapod crustaceans, especially the riverine grass shrimp (Palaemonetes paludosus), accounted for the majority of the response. Effects of large fish on shrimp were generally consistent across sites, but per capita effects were sensitive to estimates of predator density. Densities of intermediate consumers in our exclosures were similar to marsh densities, while the open controls had lower densities. This suggests that these animals avoided our experimental controls because they were risky relative to the surrounding environment, while the exclosures were neither avoided nor preferred. Although illuminating about the dynamics of open-cage experiments, this finding does not influence the main results of the study. Small primary consumers (mostly small snails, amphipods, and midges) living on floating periphyton mats and in flocculent detritus (“floc”) were less abundant in the exclosures, indicative of a trophic cascade. Periphyton mat characteristics (i.e., biomass, chlorophyll a, TP) were not clearly or consistently affected by the exclosure, but TP in the floc was lower in exclosures. The collective cascading effects of large predators were consistent at both sites despite differences in drought frequency, stem density, and productivity.

Heterogeneity in Residential Yard Care: Evidence from Boston, Miami, and Phoenix

The management of residential landscapes occurs within a complex socio-ecological system linking household decision-making with ecological properties, multi-scalar human drivers, and the legacy effects of past management. Conventional wisdom suggests that resource-intensive turf grass yards are the most common landscaping outcome, resulting in a presumed homogeneous set of residential landscaping practices throughout North America. We examine this homogenization thesis through an interview-based, cross-site study of residential landscape management in Boston, Phoenix, and Miami. Counter to the homogeneity thesis, we find that yard management practices often exhibit heterogeneity, for example, in groundcover choice or use of chemical inputs. The degree of heterogeneity in management practices varies according to the scale of analysis, and is the outcome of a range of constraints and opportunities to which households respond differently depending on their existing yard and landscaping preferences. This study highlights the importance of multi-scalar and cross-site analyses of decision-making in socio-ecological systems, and presents opportunities for longitudinal and cross-site research to examine the extent to which homogeneity is actually present in the management of residential landscapes over time and in diverse places.

Evidence for the removal of CFC-11, CFC-12, and CFC-113 at the groundwater–surface water interface in the Everglades

Poor agreement between 3H/3He ages and CFC-11 and CFC-12 ages suggests that CFCs may not be conservative tracers in the Everglades National Park. 3H/3He ages were used to calculate the expected concentration of CFC-11 and CFC-12 in groundwater from wells 2 to 73 m deep. The expected concentrations of CFCs were compared to the measured concentrations and plots of the % CFC-12 and CFC-11 remaining offered no evidence that significant CFC removal was occurring in the groundwater at depths ≥2 m, suggesting that CFC removal occurs at shallower depths. Except where CFC contamination was suspected, CFC-11, CFC-12 and CFC-113 concentrations in fresh surface water were nearly always below solubility equilibrium with the atmosphere. Measurements of CFC-11, CFC-12 and CFC-113 in pore water indicate a 50–90% decrease in concentration 5 cm below the groundwater–surface water (GW–SW) interface. In the same 5 cm interval CH4 concentrations increased by 300–1000%. This suggested that CFCs were removed at the GW–SW interface, possibly by methane-producing bacteria. CFC derived recharge ages should therefore be viewed with caution when recharging water percolates through anoxic methanogenic sediments.

Conflict and Consonance: Implementing an Evidence-Based Middle School Science Curriculum

This study is to investigate the middle school teachers’ concerns and perspectives during the implementation of an evidence-based curriculum that supports the development of both content knowledge and scientific practices. Two themes emerge from data analysis: consonance and conflict.