Towards Automation in Digital Investigations : Seeking Efficiency in Digital Forensics in Mobile and Cloud Environments

Cybercrime and related malicious activity in our increasingly digital world has become more prevalent and sophisticated, evading traditional security mechanisms. Digital forensics has been proposed to help investigate, understand and eventually mitigate such attacks. The practice of digital forensics, however, is still fraught with various challenges. Some of the most prominent of these challenges include the increasing amounts of data and the diversity of digital evidence sources appearing in digital investigations. Mobile devices and cloud infrastructures are an interesting specimen, as they inherently exhibit these challenging circumstances and are becoming more prevalent in digital investigations today. Additionally they embody further characteristics such as large volumes of data from multiple sources, dynamic sharing of resources, limited individual device capabilities and the presence of sensitive data. These combined set of circumstances make digital investigations in mobile and cloud environments particularly challenging. This is not aided by the fact that digital forensics today still involves manual, time consuming tasks within the processes of identifying evidence, performing evidence acquisition and correlating multiple diverse sources of evidence in the analysis phase. Furthermore, industry standard tools developed are largely evidence-oriented, have limited support for evidence integration and only automate certain precursory tasks, such as indexing and text searching. In this study, efficiency, in the form of reducing the time and human labour effort expended, is sought after in digital investigations in highly networked environments through the automation of certain activities in the digital forensic process. To this end requirements are outlined and an architecture designed for an automated system that performs digital forensics in highly networked mobile and cloud environments. Part of the remote evidence acquisition activity of this architecture is built and tested on several mobile devices in terms of speed and reliability. A method for integrating multiple diverse evidence sources in an automated manner, supporting correlation and automated reasoning is developed and tested. Finally the proposed architecture is reviewed and enhancements proposed in order to further automate the architecture by introducing decentralization particularly within the storage and processing functionality. This decentralization also improves machine to machine communication supporting several digital investigation processes enabled by the architecture through harnessing the properties of various peer-to-peer overlays. Remote evidence acquisition helps to improve the efficiency (time and effort involved) in digital investigations by removing the need for proximity to the evidence. Experiments show that a single TCP connection client-server paradigm does not offer the required scalability and reliability for remote evidence acquisition and that a multi-TCP connection paradigm is required. The automated integration, correlation and reasoning on multiple diverse evidence sources demonstrated in the experiments improves speed and reduces the human effort needed in the analysis phase by removing the need for time-consuming manual correlation. Finally, informed by published scientific literature, the proposed enhancements for further decentralizing the Live Evidence Information Aggregator (LEIA) architecture offer a platform for increased machine-to-machine communication thereby enabling automation and reducing the need for manual human intervention.

Additional signalling compounds are required to orchestrate plant development

Plants are necessarily complex systems that require monitoring of multiple environmental signals and, in response to those signals, coordination of differentiation and development of an extensive array of cell types at multiple locations. This coordination must rely on integration of long-distance signals that provide a means of communication among different plant parts. We propose that the relatively well-characterized classical phytohormones must act with several other long-distance signals to achieve this level of organization with dynamic yet measured responses. This is supported by observations that classical phytohormones: (i) operate in complex yet experimentally unresolved networks involving cross-talk and feedback, (ii) are generally multifunctional and nonspecific and hence must rely on other long-distance cues or pre-set conditions to achieve specificity and (iii) are likely to mask roles of other long-distance signals in several experimental contexts. We present evidence for involvement of novel long-distance signals in three developmental processes-branching, flowering and nodulation, and discuss the possible identities of novel signalling molecules.

Alternative polyadenylation and splicing of mRNAs transcribed from the human Sin1 gene

Limited but significant sequence similarity has been observed between an uncharacterized human protein, SIN1, and the S. pombe SIN1, Dictyostelium RIP3 and S. cerevisiae AVO1 proteins. The human Sin1 gene has been automatically predicted (MAPKAP1; GenBank accession number NM_024117); however, this sequence appears to be incomplete. In this study, we have cloned and characterized the full-length human Sin1 mRNA and identified a highly conserved domain that defines the family of SIN1 orthologues, members of which are widely distributed in the fungal and metazoan kingdoms. We demonstrate that Sin1 transcripts can use alternative polyadenylation signals and describe a number of Sin1 splice variants that potentially encode functionally different isoforms. (C) 2004 Elsevier B.V. All rights reserved.

Third sector in transition - A question of sustainability for community service organizations and the sector?

Third sector organizations are transitioning towards entrepreneurial and managerial models as a result of quasi-market strategies. This paper reports on the research findings of a survey of nonprofit disability organizations in Queensland and Victoria impacted upon by quasi-market reform. Enterprising organizations were found to have made substantial change to organizational structures and systems, whilst more traditional organizations made few changes. All organizations demonstrated commitment to a social justice ethos. However across the organizational archetypes there were reports of an organizational 'fragility'. It is argued that the problems of sustainability of community service organizations that existed prior to quasi-market reforms remain. This implies community service organizations will experience ongoing difficulties in the post-market era without further rationalization and change. A conceptual framework for sustainability of the community service sector is presented at the policy and organizational level.

Tracking the states of a nonlinear and nonstationary system in the weight-space of artificial neural networks

We propose a novel interpretation and usage of Neural Network (NN) in modeling physiological signals, which are allowed to be nonlinear and/or nonstationary. The method consists of training a NN for the k-step prediction of a physiological signal, and then examining the connection-weight-space (CWS) of the NN to extract information about the signal generator mechanism. We de. ne a novel feature, Normalized Vector Separation (gamma(ij)), to measure the separation of two arbitrary states i and j in the CWS and use it to track the state changes of the generating system. The performance of the method is examined via synthetic signals and clinical EEG. Synthetic data indicates that gamma(ij) can track the system down to a SNR of 3.5 dB. Clinical data obtained from three patients undergoing carotid endarterectomy of the brain showed that EEG could be modeled (within a root-means-squared-error of 0.01) by the proposed method, and the blood perfusion state of the brain could be monitored via gamma(ij), with small NNs having no more than 21 connection weight altogether.

Variability in heart rate estimates from different pulse oximeters

Since its introduction, pulse oximetry has become a conventional clinical measure. Besides being arterial blood oxygen saturation (SpO2) measure, pulse oximeters can be used for other cardiovascular measurements, like heart rate (HR) estimations, derived from its photo plethysmographic (PPG) signals. The temporal coherence of the PPG signals and thereby HR estimates are heavily dependent on its minimal phase variability. A Masimo SET Rad-9TM, Novametrix Oxypleth and a custom designed PPG system were investigated for their relative phase variation. R-R intervals from electro-cardiogram (ECG) were recorded concurrently as reference. PPG signals obtained from the 3 systems were evaluated by comparing their respective beat-to-beat (B-B) intervals with the corresponding R-R estimates during a static test. For their relative B-B comparison to the ECG, Novametrix system differed 0.680.52% (p

Scalable location management for context-aware systems

Location information is commonly used in context-aware applications and pervasive systems. These applications and systems may require knowledge, of the location of users, devices and services. This paper presents a location management system able to gather, process and manage location information from a variety of physical and virtual location sensors. The system scales to the complexity of context-aware applications, to a variety of types and large number of location sensors and clients, and to geographical size of the system. The proposed location management system provides conflict resolution of location information and mechanisms to ensure privacy.

Interocular suppression and contrast gain control in human vision

The human visual system combines contrast information from the two eyes to produce a single cyclopean representation of the external world. This task requires both summation of congruent images and inhibition of incongruent images across the eyes. These processes were explored psychophysically using narrowband sinusoidal grating stimuli. Initial experiments focussed on binocular interactions within a single detecting mechanism, using contrast discrimination and contrast matching tasks. Consistent with previous findings, dichoptic presentation produced greater masking than monocular or binocular presentation. Four computational models were compared, two of which performed well on all data sets. Suppression between mechanisms was then investigated, using orthogonal and oblique stimuli. Two distinct suppressive pathways were identified, corresponding to monocular and dichoptic presentation. Both pathways impact prior to binocular summation of signals, and differ in their strengths, tuning, and response to adaptation, consistent with recent single-cell findings in cat. Strikingly, the magnitude of dichoptic masking was found to be spatiotemporally scale invariant, whereas monocular masking was dependent on stimulus speed. Interocular suppression was further explored using a novel manipulation, whereby stimuli were presented in dichoptic antiphase. Consistent with the predictions of a computational model, this produced weaker masking than in-phase presentation. This allowed the bandwidths of suppression to be measured without the complicating factor of additive combination of mask and test. Finally, contrast vision in strabismic amblyopia was investigated. Although amblyopes are generally believed to have impaired binocular vision, binocular summation was shown to be intact when stimuli were normalized for interocular sensitivity differences. An alternative account of amblyopia was developed, in which signals in the affected eye are subject to attenuation and additive noise prior to binocular combination.

Subtractive and divisive adaptation in visual motion computations

Models of visual motion processing that introduce priors for low speed through Bayesian computations are sometimes treated with scepticism by empirical researchers because of the convenient way in which parameters of the Bayesian priors have been chosen. Using the effects of motion adaptation on motion perception to illustrate, we show that the Bayesian prior, far from being convenient, may be estimated on-line and therefore represents a useful tool by which visual motion processes may be optimized in order to extract the motion signals commonly encountered in every day experience. The prescription for optimization, when combined with system constraints on the transmission of visual information, may lead to an exaggeration of perceptual bias through the process of adaptation. Our approach extends the Bayesian model of visual motion proposed byWeiss et al. [Weiss Y., Simoncelli, E., & Adelson, E. (2002). Motion illusions as optimal perception Nature Neuroscience, 5:598-604.], in suggesting that perceptual bias reflects a compromise taken by a rational system in the face of uncertain signals and system constraints. © 2007.

The dynamics of HRM systems in Indian BPO firms

This paper highlights the context within which business process outsourcing (BPO) has rapidly grown in India and the critical need to investigate the dynamics of human resource management (HRM) practices and systems in this sector. Using a mixed-method approach involving both in-depth interviews and self-completing questionnaires, we analyze the nature of HRM systems in BPO organizations operating in India. The analysis is based on a sample of 51 BPO companies, a majority of which are located near the capital of New Delhi. The results focus on the nature and structure of work and organization of Indian BPOs, as well as the strategic role played by HRM in such organizations. Furthermore, the findings highlight the way specific HRM practices such as recruitment, performance appraisal, training and development, and compensations are implemented. Our study suggests the existence of formal, structured, and rationalized HRM systems in Indian BPOs. A number of insights related to HRM policies and practices are shared by the HR managers interviewed shedding more light on the inner workings of the Indian BPO companies and their challenges. The analysis provides original and useful information to both academics and practitioners and opens avenues for future research on the nature of HRM systems and practices in the Indian BPO industry.

Organisational learning - a critical systems thinking discipline

Original Paper European Journal of Information Systems (2001) 10, 135–146; doi:10.1057/palgrave.ejis.3000394 Organisational learning—a critical systems thinking discipline P Panagiotidis1,3 and J S Edwards2,4 1Deloitte and Touche, Athens, Greece 2Aston Business School, Aston University, Aston Triangle, Birmingham, B4 7ET, UK Correspondence: Dr J S Edwards, Aston Business School, Aston University, Aston Triangle, Birmingham, B4 7ET, UK. E-mail: j.s.edwards@aston.ac.uk 3Petros Panagiotidis is Manager responsible for the Process and Systems Integrity Services of Deloitte and Touche in Athens, Greece. He has a BSc in Business Administration and an MSc in Management Information Systems from Western International University, Phoenix, Arizona, USA; an MSc in Business Systems Analysis and Design from City University, London, UK; and a PhD degree from Aston University, Birmingham, UK. His doctorate was in Business Systems Analysis and Design. His principal interests now are in the ERP/DSS field, where he serves as project leader and project risk managment leader in the implementation of SAP and JD Edwards/Cognos in various major clients in the telecommunications and manufacturing sectors. In addition, he is responsible for the development and application of knowledge management systems and activity-based costing systems. 4John S Edwards is Senior Lecturer in Operational Research and Systems at Aston Business School, Birmingham, UK. He holds MA and PhD degrees (in mathematics and operational research respectively) from Cambridge University. His principal research interests are in knowledge management and decision support, especially methods and processes for system development. He has written more than 30 research papers on these topics, and two books, Building Knowledge-based Systems and Decision Making with Computers, both published by Pitman. Current research work includes the effect of scale of operations on knowledge management, interfacing expert systems with simulation models, process modelling in law and legal services, and a study of the use of artifical intelligence techniques in management accounting. Top of pageAbstract This paper deals with the application of critical systems thinking in the domain of organisational learning and knowledge management. Its viewpoint is that deep organisational learning only takes place when the business systems' stakeholders reflect on their actions and thus inquire about their purpose(s) in relation to the business system and the other stakeholders they perceive to exist. This is done by reflecting both on the sources of motivation and/or deception that are contained in their purpose, and also on the sources of collective motivation and/or deception that are contained in the business system's purpose. The development of an organisational information system that captures, manages and institutionalises meaningful information—a knowledge management system—cannot be separated from organisational learning practices, since it should be the result of these very practices. Although Senge's five disciplines provide a useful starting-point in looking at organisational learning, we argue for a critical systems approach, instead of an uncritical Systems Dynamics one that concentrates only on the organisational learning practices. We proceed to outline a methodology called Business Systems Purpose Analysis (BSPA) that offers a participatory structure for team and organisational learning, upon which the stakeholders can take legitimate action that is based on the force of the better argument. In addition, the organisational learning process in BSPA leads to the development of an intrinsically motivated information organisational system that allows for the institutionalisation of the learning process itself in the form of an organisational knowledge management system. This could be a specific application, or something as wide-ranging as an Enterprise Resource Planning (ERP) implementation. Examples of the use of BSPA in two ERP implementations are presented.

The missing link:Analogous human and primate cortical gamma oscillations

Recent animal studies highlighting the relationship between functional imaging signals and the underlying neuronal activity have revealed the potential capabilities of non-invasive methods. However, the valuable exchange of information between animal and human studies remains restricted by the limited evidence of direct physiological links between species. In this study we used magnetoencephalography (MEG) to investigate the occurrence of 30-70 Hz (gamma) oscillations in human visual cortex, induced by the presentation of visual stimuli of varying contrast. These oscillations, well described in the animal literature, were observed in retinotopically concordant locations of visual cortex and show striking similarity to those found in primate visual cortex using surgically implanted electrodes. The amplitude of the gamma oscillations increases linearly with stimulus contrast in strong correlation with the gamma oscillations found in the local field potential (LFP) of the macaque. We demonstrate that non-invasive magnetic field measurements of gamma oscillations in human visual cortex concur with invasive measures of activation in primate visual cortex, suggesting both a direct representation of underlying neuronal activity and a concurrence between human and primate cortical activity. © 2005 Elsevier Inc. All rights reserved.

Managing careers and managing fairness : an organisational justice theory perspective on employee evaluations of, and reactions to, organisational career management practices

This thesis presents the results of a multi-method investigation of employee perceptions of fairness in relation to their career management experiences. Organisational justice theory (OJT) was developed as a theoretical framework and data were gathered via 325 quantitative questionnaires, 20 semi-structured interviews and the analysis of a variety of company documents and materials. The results of the questionnaire survey provided strong support for the salience of employee perceptions of justice in regard to their evaluations of organisational career management (OCM) practices, with statistical support emerging for both an agent-systems and interaction model of organisational justice. The qualitative semi-structured interviews provided more detailed analysis of how fairness was experienced in practice, and confirmed the importance of the OJT constructs of fairness within this career management context. Fairness themes to emerge from this analysis included, equity, needs, voice, bias suppression, consistency, ethicality, respect and feedback drawing on many of the central tenants of distributive, procedural, interpersonal and information justice. For the career management literature there is empirical confirmation of a new theoretical framework for understanding employee evaluations of, and reactions to, OCM practices. For the justice literatures a new contextual domain is explored and confirmed, thus extending further the influence and applicability of the theory. For practitioners a new framework for developing, delivering and evaluating their own OCM policies and systems is presented.

Study of management decision making by ward sisters in a hospital and the effects on decision making after the implementation of a decision support sytem

This thesis considers management decision making at the ward level in hospitals especially by ward sisters, and the effectiveness of the intervention of a decision support system. Nursing practice theories were related to organisation and management theories in order to conceptualise a decision making framework for nurse manpower planning and deployment at the ward level. Decision and systems theories were explored to understand the concepts of decision making and the realities of power in an organisation. In essence, the hypothesis was concerned with changes in patterns of decision making that could occur with the intervention of a decision support system and that the degree of change would be governed by a set of `difficulty' factors within wards in a hospital. During the course of the study, a classification of ward management decision making was created, together with the development and validation of measuring instruments to test the research hypothesis. The decision support system used was rigorously evaluated to test whether benefits did accrue from its implementation. Quantitative results from sample wards together with qualitative information collected, were used to test this hypothesis and the outcomes postulated were supported by these findings. The main conclusion from this research is that a more rational approach to management decision making is feasible, using information from a decision support system. However, wards and ward sisters that need the most assistance, where the `difficulty' factors in the organisation are highest, benefit the least from this type of system. Organisational reviews are needed on these identified wards, involving managers and doctors, to reduce the levels of un-coordinated activities and disruption.

Nations and organizations:a comparative study of English and Indian work-related attitudes and values in matched manufacturing firms

This thesis reports a cross-national study carried out in England and India in an attempt to clarify the association of certain cultural and non-cultural characteristics with people's work-related attitudes and values, and with the structure of their work organizations. Three perspectives are considered to be relevant to the objectives of the study. The contingency perspective suggests that a 'fit' between an organization's context and its structural arrangements will be fundamentally necessary for achieving success and survival. The political economy perspective argues for the determining role of the social and economic structures within which the organization operates. The culturalist perspective looks to cultural attitudes and values of organizational members for an explanation for their organization's structure. The empirical investigation was carried out in three stages in each of the two countries involved by means of surveys of cultural attitudes, work-related attitudes and organizational structures and systems. The cultural surveys suggested that Indian and English people were different from one another with regard to fear of, and respect and obedience to, their seniors, ability to cope with ambiguity, honesty, independence, expression of emotions, fatalism, reserve, and care for others; they were similar with regard to tolerance, friendliness, attitude to change, attitude to law, self-control and self-confidence, and attitude to social differentiation. The second stage of the study, involving the employees of fourteen organizations, found that the English ones perceived themselves to have more power at work, expressed more tolerance for ambiguity, and had different expectations from their job than did the Indian equivalents. The two samples were similar with respect to commitment to their company and trust in their colleagues. The findings also suggested that employees' occupations, education and age had some influences on their work-related attitudes. The final stage of the research was a study of structures, control systems, and reward and punishment policies of the same fourteen organizations which were matched almost completely on their contextual factors across the two countries. English and Indian organizations were found to be similar in terms of centralization, specialization, chief executive's span of control, height and management control strategies. English organizations, however, were far more formalized, spent more time on consultation and their managers delegated authority lower down the hierarchy than Indian organizations. The major finding of the study was the multiple association that cultural, national and contingency factors had with the structural characteristics of the organizations and with the work-related attitudes of their members. On the basis of this finding, a multi-perspective model for understanding organizational structures and systems is proposed in which the contributions made by contingency, political economy and cultural perspectives are recognized and incorporated.