Towards Automation in Digital Investigations : Seeking Efficiency in Digital Forensics in Mobile and Cloud Environments

Cybercrime and related malicious activity in our increasingly digital world has become more prevalent and sophisticated, evading traditional security mechanisms. Digital forensics has been proposed to help investigate, understand and eventually mitigate such attacks. The practice of digital forensics, however, is still fraught with various challenges. Some of the most prominent of these challenges include the increasing amounts of data and the diversity of digital evidence sources appearing in digital investigations. Mobile devices and cloud infrastructures are an interesting specimen, as they inherently exhibit these challenging circumstances and are becoming more prevalent in digital investigations today. Additionally they embody further characteristics such as large volumes of data from multiple sources, dynamic sharing of resources, limited individual device capabilities and the presence of sensitive data. These combined set of circumstances make digital investigations in mobile and cloud environments particularly challenging. This is not aided by the fact that digital forensics today still involves manual, time consuming tasks within the processes of identifying evidence, performing evidence acquisition and correlating multiple diverse sources of evidence in the analysis phase. Furthermore, industry standard tools developed are largely evidence-oriented, have limited support for evidence integration and only automate certain precursory tasks, such as indexing and text searching. In this study, efficiency, in the form of reducing the time and human labour effort expended, is sought after in digital investigations in highly networked environments through the automation of certain activities in the digital forensic process. To this end requirements are outlined and an architecture designed for an automated system that performs digital forensics in highly networked mobile and cloud environments. Part of the remote evidence acquisition activity of this architecture is built and tested on several mobile devices in terms of speed and reliability. A method for integrating multiple diverse evidence sources in an automated manner, supporting correlation and automated reasoning is developed and tested. Finally the proposed architecture is reviewed and enhancements proposed in order to further automate the architecture by introducing decentralization particularly within the storage and processing functionality. This decentralization also improves machine to machine communication supporting several digital investigation processes enabled by the architecture through harnessing the properties of various peer-to-peer overlays. Remote evidence acquisition helps to improve the efficiency (time and effort involved) in digital investigations by removing the need for proximity to the evidence. Experiments show that a single TCP connection client-server paradigm does not offer the required scalability and reliability for remote evidence acquisition and that a multi-TCP connection paradigm is required. The automated integration, correlation and reasoning on multiple diverse evidence sources demonstrated in the experiments improves speed and reduces the human effort needed in the analysis phase by removing the need for time-consuming manual correlation. Finally, informed by published scientific literature, the proposed enhancements for further decentralizing the Live Evidence Information Aggregator (LEIA) architecture offer a platform for increased machine-to-machine communication thereby enabling automation and reducing the need for manual human intervention.

A stress and coping approach to organisational change: Evidence from three field studies

In this paper, a stress and coping perspective is used to outline the processes that determine employee adaptation to organisational change. A theoretical framework that simultaneously considers the effects of event characteristics, situational appraisals, coping strategies, and coping resources is reviewed, Three empirical investigations of organisational change that have tested various components of the model are then presented. In the first study, there was evidence linking event characteristics, situational appraisals, coping strategies and coping resources to levels of employee adjustment in a sample of pilots employed in a newly merged airline company. In a more focused test of the model with a sample of employees experiencing a restructuring process in their Organisation it was found that the provision of change-related information enhanced levels of efficacy to deal with the change process which, in turn, predicted psychological wellbeing, client engagement, and job satisfaction. In a study of managers affected by a new remuneration scheme, there was evidence to suggest that managers who received change-specific information and opportunities to participate in the change process reported higher levels of change readiness. Managers who reported higher levels of readiness for change also reported higher levels of psychological wellbeing and job satisfaction. These studies highlight ways in which managers and change agents can help employees to cope during times of organisational change.

Cleaner wrasse prefer client mucus: support for partner control mechanisms in cleaning interactions

Recent studies on cleaning behaviour suggest that there are conflicts between cleaners and their clients over what cleaners eat. The diet of cleaners usually contains ectoparasites and some client tissue. It is unclear, however, whether cleaners prefer client tissue over ectoparasites or whether they include client tissue in their diet only when searching for parasites alone is not profitable. To distinguish between these two hypotheses, we trained cleaner fish Labroides dimidiatus to feed from plates and offered them client mucus from the parrotfish Chlorurus sordidus, parasitic monogenean flat-worms, parasitic gnathiid isopods and boiled flour glue as a control. We found that cleaners ate more mucus and monogeneans than gnathiids, with gnathiids eaten slightly more often than the control substance. Because gnathiids are the most abundant ectoparasites, our results suggest a potential for conflict between cleaners and clients over what the cleaner should eat, and support studies emphasizing the importance of partner control in keeping cleaning interactions mutualistic.

Dynamic multi-resolution spatial object derivation for mobile and WWW applications

Online geographic information systems provide the means to extract a subset of desired spatial information from a larger remote repository. Data retrieved representing real-world geographic phenomena are then manipulated to suit the specific needs of an end-user. Often this extraction requires the derivation of representations of objects specific to a particular resolution or scale from a single original stored version. Currently standard spatial data handling techniques cannot support the multi-resolution representation of such features in a database. In this paper a methodology to store and retrieve versions of spatial objects at, different resolutions with respect to scale using standard database primitives and SQL is presented. The technique involves heavy fragmentation of spatial features that allows dynamic simplification into scale-specific object representations customised to the display resolution of the end-user's device. Experimental results comparing the new approach to traditional R-Tree indexing and external object simplification reveal the former performs notably better for mobile and WWW applications where client-side resources are limited and retrieved data loads are kept relatively small.

Cleaner fish, Labroides dimidiatus, diet preferences for different types of mucus and parasitic gnathiid isopods

Cleaner fish, Labroides dimidiatus, prefer the mucus of the parrotfish, Chlorurus sordidus, to parasitic gnathiid isopods, the main items in their diet, indicating a major conflict between clients and cleaners over what the latter should eat during interactions. We tested whether the conflict varied with client species (and the quality of its mucus) and with the presence of blood in the gnathfids. First, we offered cleaners the choice between mucus of the parrotfish and that of the snapper, Lutjanus fulviflamma. When offered equal amounts of mucus on Plexiglas plates, cleaners readily developed a significant preference for the parrotfish mucus. Reducing the amount of parrotfish mucus by 75% made the preference disappear. In a second test, we offered the cleaners gnathiids that were or were not engorged with client fish blood. Cleaners showed no significant preference for either food item. Our results suggest that the degree of conflict between cleaners and clients may vary between species, depending on whether the latter have a preferred mucus. In contrast, the cleaners' lack of preference for engorged gnathiids benefits clients because it means that cleaners do not hesitate to eat unengorged gnathiids before the gnathiids harm the fish by removing blood or by transmitting blood parasites. (C) 2004 The Association for the Study of Animal Behaviour. Published by Elsevier Ltd. All rights reserved.

A longitudinal study of employee adaptation to organizational change: The role of change-related information and change-related self-efficacy

This study examined the role of information, efficacy, and 3 stressors in predicting adjustment to organizational change. Participants were 589 government employees undergoing an 18-month process of regionalization. To examine if the predictor variables had long-term effects on adjustment, the authors assessed psychological well-being, client engagement, and job satisfaction again at a 2-year follow-up. At Time 1, there was evidence to suggest that information was indirectly related to psychological well-being, client engagement, and job satisfaction, via its positive relationship to efficacy. There also was evidence to suggest that efficacy was related to reduced stress appraisals, thereby heightening client engagement. Last, there was consistent support for the stress-buffering role of Time I self-efficacy in the prediction of Time 2 job satisfaction.

Trinity, love, and pastorial mirroring

This paper focuses on the positive mirroring (admiration, acceptance, and approval) that Heinz Kohut posits as the primary healing agency in work with clients with narcissistic personality disorder. Donald Capps has demonstrated the pastoral significance of Kohut's theory. Capps' work is extended through an analysis of the role love plays in mirroring. It is suggested that mirror love has agapic, erotic, and philial elements. The loving action of the counselor is viewed as an image of the love of the triune God.

Does client size affect cleaner fish choice of client? An empirical test using client fish models

To determine whether the choice of client fishes in the cleaner fish Labroides dimidiatus was influenced by client size, cleaner fish were given a choice of equal amount of food spread on large and small client redfin butterflyfish Chaetodon trifasciatus models. All large models received bites from cleaners compared to 27% for small models. Seventy-nine per cent of cleaners took their first bite from the large fish model. The results suggest that client size may affect cleaner fish choice.

Sources of stress experienced by occupational therapists and social workers in mental health settings

This study examined the sources of stress experienced by occupational therapists and social workers employed in Australian public mental health services and identified the demographic and work-related factors related to stress using a cross-sectional survey design. Participants provided demographic and work-related information and completed the Mental Health Professionals Stress Scale. The overall response rate to the survey was 76.6%, consisting of 196 occupational therapists and 108 social workers. Results indicated that lack of resources, relationships and conflicts with other professionals, workload, and professional self-doubt were correlated with increased stress. Working in case management was associated with stress caused by client-related difficulties, lack of resources, and professional self-doubt. The results of this study suggest that Australian occupational therapists and social workers experience stress, with social workers reporting slightly more overall stress than occupational therapists. Copyright © 2005 Whurr Publishers Ltd.

Assisted reproductive technologies and equity of access issues

In Australia and other countries, certain groups of women have traditionally been denied access to assisted reproductive technologies (ARTs). These typically are single heterosexual women, lesbians, poor women, and those whose ability to rear children is questioned, particularly women with certain disabilities or who are older. The arguments used to justify selection of women for ARTs are most often based on issues such as scarcity of resources, and absence of infertility ( in lesbians and single women), or on social concerns: that it goes against nature''; particular women might not make good mothers; unconventional families are not socially acceptable; or that children of older mothers might be orphaned at an early age. The social, medical, legal, and ethical reasoning that has traditionally promoted this lack of equity in access to ARTs, and whether the criteria used for client deselection are ethically appropriate in any particular case, are explored by this review. In addition, the issues of distribution and just gatekeeping'' practices associated with these sensitive medical services are examined.

Integrated versus non-integrated management and care for clients with co-occurring mental health and substance use disorders: a qualitative systematic review of randomised controlled trials

The purpose of this paper is to conduct a qualitative review of randomised controlled trials in relation to the treatment of adults with co-occurring mental health and substance use disorder (MH/SUD). In particular, integrated approaches are compared with non-integrated approaches to treatment. Ten articles were identified for inclusion in the review. The findings are equivocal with regard to the superior efficacy of integrated approaches to treatment, although the many limitations of the studies need to be considered in our understanding of this finding. Clearly, this is an extremely challenging client group to engage and maintain in intervention research, and the complexity and variability of the problems render control particularly difficult. The lack of available evidence to support the superiority of integration is discussed in relation to these challenges. Much remains to be investigated with regard to integrated management and care for people with co-occurring and MH/SUD, particularly for specific combinations of dual diagnosis and giving consideration to the level of inter-relatedness between the disorders. (C) 2004 Elsevier Ltd. All rights reserved.

Costs of managing urinary and faecal incontinence in a sub-acute care facility: A "bottom-up" approach

Aims: To measure accurately the direct costs of managing urinary and faecal incontinence in the sub-acute care setting. Materials and Methods: Prospective observational study was undertaken in two sub-acute care units in a metropolitan hospital. A consecutive series of 29 consecutive patients with urinary and/or faecal incontinence, who were in-patients in a geriatric rehabilitation or subacute neurologic unit underwent routine timed voiding protocol, as per usual care. Face-to-face bedside recordings of all incontinence care, with detailed cost analysis, were undertaken. Results: A total of 3,621 occasions of continence care were costed. The median time per 24 hr spent caring for incontinence per patient was 109 min (interquartile range 88-140). Isolated urinary incontinence episodes occurred in 28 patients (96.5%), mixed urinary/faecal incontinence episodes observed in 79.3%, and episodes of pure faecal incontinence were seen in 62%. The median costs of incontinence care in the sub-acute setting was $49AU per 24 hr, the major share ($41) spent on staff wages. The incontinence tasks of toileting assistance, pad changes, bed changes and catheter care were spread evenly across the three 8 hr shifts of duty. Conclusions: As our population demographics include an increasingly greater portion of the elderly, for whom long term institutional care is becoming relatively more scarce, provision of care in the sub-acute unit that may allow rehabilitation and return to home warrants scrutiny. This is the first study that delineates the costs of managing urinary and faecal incontinence in the sub-acute care setting. Such costs are substantial and place a heavy burden upon night-time carets. (C) 2004 Wiley-Liss, Inc.

The use of email in a child and adolescent mental health service: are staff ready?

All staff members of a child and adolescent mental health service were invited to participate in a survey about the use of email. Sixty-two of the 105 staff members responded to the survey, a participation rate of 59%. Of the respondents, 32 were allied health staff, 10 were nurses, seven were administrative staff, six were medical staff, three were operational staff and four were acting in a combination of these roles. The respondents reported extensive work-related email usage and considered that they were confident in using email despite low levels of training. However, they did not feel that they understood the legal and ethical issues involved. Furthermore, there was limited incorporation of email into standard record keeping. The majority of respondents thought that increased use of email would lead to a greater workload, a consequence they considered would probably increase over time. Many commented on the quick and practical use of this medium, but were wary about using email with individuals outside the service organization, especially if it were to contain clinical material. There was low use of email directly with clients, and clinicians were ambivalent about incorporating email into therapy. The results suggest that it is timely to consider the utility and appropriateness of email communication with clients and external service providers, and to formulate guidelines and procedures to ensure the confidentiality of client information and the safety of clients and staff.

Working with involuntary clients: Perceptions and experiences of outreach social workers in Hong Kong

The outreach social work service is one of the dominant youth work approaches in dealing with delinquents and youths 'at-risk' in Hong Kong. Yet this approach presents particular challenges. Outreach social workers usually play an active role in initiating and establishing contacts with young people, yet young people are reluctant to engage with the outreach social workers and are resistant towards therapeutic change. To date, little is known about what strategies and techniques are most effective in dealing with client resistance in this context. The aims of this paper are to gain a better understanding of the common resistant behaviours that outreach social workers usually encounter in their day-to-day practice, and to investigate how the outreach social workers respond to their clients' resistance with reference to case examples given in the in-depth interviews. The findings of this study provide evidence that whilst client resistance is common in the outreach social work setting, social workers' patience as well as sensitivity are essential in resolving resistance and building up a rapport with clients.