Towards Automation in Digital Investigations : Seeking Efficiency in Digital Forensics in Mobile and Cloud Environments

Cybercrime and related malicious activity in our increasingly digital world has become more prevalent and sophisticated, evading traditional security mechanisms. Digital forensics has been proposed to help investigate, understand and eventually mitigate such attacks. The practice of digital forensics, however, is still fraught with various challenges. Some of the most prominent of these challenges include the increasing amounts of data and the diversity of digital evidence sources appearing in digital investigations. Mobile devices and cloud infrastructures are an interesting specimen, as they inherently exhibit these challenging circumstances and are becoming more prevalent in digital investigations today. Additionally they embody further characteristics such as large volumes of data from multiple sources, dynamic sharing of resources, limited individual device capabilities and the presence of sensitive data. These combined set of circumstances make digital investigations in mobile and cloud environments particularly challenging. This is not aided by the fact that digital forensics today still involves manual, time consuming tasks within the processes of identifying evidence, performing evidence acquisition and correlating multiple diverse sources of evidence in the analysis phase. Furthermore, industry standard tools developed are largely evidence-oriented, have limited support for evidence integration and only automate certain precursory tasks, such as indexing and text searching. In this study, efficiency, in the form of reducing the time and human labour effort expended, is sought after in digital investigations in highly networked environments through the automation of certain activities in the digital forensic process. To this end requirements are outlined and an architecture designed for an automated system that performs digital forensics in highly networked mobile and cloud environments. Part of the remote evidence acquisition activity of this architecture is built and tested on several mobile devices in terms of speed and reliability. A method for integrating multiple diverse evidence sources in an automated manner, supporting correlation and automated reasoning is developed and tested. Finally the proposed architecture is reviewed and enhancements proposed in order to further automate the architecture by introducing decentralization particularly within the storage and processing functionality. This decentralization also improves machine to machine communication supporting several digital investigation processes enabled by the architecture through harnessing the properties of various peer-to-peer overlays. Remote evidence acquisition helps to improve the efficiency (time and effort involved) in digital investigations by removing the need for proximity to the evidence. Experiments show that a single TCP connection client-server paradigm does not offer the required scalability and reliability for remote evidence acquisition and that a multi-TCP connection paradigm is required. The automated integration, correlation and reasoning on multiple diverse evidence sources demonstrated in the experiments improves speed and reduces the human effort needed in the analysis phase by removing the need for time-consuming manual correlation. Finally, informed by published scientific literature, the proposed enhancements for further decentralizing the Live Evidence Information Aggregator (LEIA) architecture offer a platform for increased machine-to-machine communication thereby enabling automation and reducing the need for manual human intervention.

The effect of the CaO/SiO2 ratio on the phase equilibria in the ZnO-“Fe2O3”-(PbO + CaO + SiO2) system in air: CaO/SiO2 = 0.1, PbO/(CaO + SiO2) = 6.2, and CaO/SiO2 = 0.6, PbO/(CaO + SiO2) = 4.3

Experimental studies on phase equilibria in the multi-component system PbO-ZnO-CaO-SiO2-FeO-Fe2O3 in air have been conducted to characterize the phase relations of a complex slag system used in the oxidation smelting of lead and in typical lead blast furnace sinters. The liquidus in two pseudoternary sections ZnO-Fe2O3-(PbO + CaO + SiO2) with the CaO/SiO2 weight ratio of 0.1 and the PbO/(CaO + SiO2) weight ratio of 6.2, and with CaO/SiO2 weight ratio of 0.6 and the PbO/(CaO + SiO2) weight ratio of 4.3, have been constructed.

Hydrodynamics and mass transfer coefficient in three-phase air-lift reactors containing activated sludge

This study was to investigate the impacts of operating conditions and liquid properties on the hydrodynamics and volumetric mass transfer coefficient in activated sludge air-lift reactors. Experiments were conducted in internal and external air-lift reactors. The activated sludge liquid displayed a non-Newtonian rheological behavior. With an increase in the superficial gas velocity, the liquid circulation velocity, gas holdup and mass transfer coefficient increased, and the gas residence time decreased. The liquid circulation velocity, gas holdup and the mass transfer coefficient decreased as the sludge loading increased. The flow regime in the activated sludge air-lift reactors had significant effect on the liquid circulation velocity and the gas holdup, but appeared to have little impact on the mass transfer coefficient. The experimental results in this study were best described by the empirical models, in which the reactor geometry, superficial gas velocity and/or power consumption unit, and solid and fluid properties were employed. (c) 2006 Elsevier B.V. All rights reserved.

Development of the Minimum Information Specification for in situ Hybridization and Immunohistochemistry Experiments (MISFISHIE)

We describe the creation process of the Minimum Information Specification for In Situ Hybridization and Immunohistochemistry Experiments (MISFISHIE). Modeled after the existing minimum information specification for microarray data, we created a new specification for gene expression localization experiments, initially to facilitate data sharing within a consortium. After successful use within the consortium, the specification was circulated to members of the wider biomedical research community for comment and refinement. After a period of acquiring many new suggested requirements, it was necessary to enter a final phase of excluding those requirements that were deemed inappropriate as a minimum requirement for all experiments. The full specification will soon be published as a version 1.0 proposal to the community, upon which a more full discussion must take place so that the final specification may be achieved with the involvement of the whole community. This paper is part of the special issue of OMICS on data standards.

Dual-symmetric Lagrangians in quantum electrodynamics: I. Conservation laws and multi-polar coupling

By using a complex field with a symmetric combination of electric and magnetic fields, a first-order covariant Lagrangian for Maxwell's equations is obtained, similar to the Lagrangian for the Dirac equation. This leads to a dual-symmetric quantum electrodynamic theory with an infinite set of local conservation laws. The dual symmetry is shown to correspond to a helical phase, conjugate to the conserved helicity. There is also a scaling symmetry, conjugate to the conserved entanglement. The results include a novel form of the photonic wavefunction, with a well-defined helicity number operator conjugate to the chiral phase, related to the fundamental dual symmetry. Interactions with charged particles can also be included. Transformations from minimal coupling to multi-polar or more general forms of coupling are particularly straightforward using this technique. The dual-symmetric version of quantum electrodynamics derived here has potential applications to nonlinear quantum optics and cavity quantum electrodynamics.

Optimization of microcavity OLED by varying the thickness of multi-layered mirror

We optimized the emission efficiency from a microcavity OLEDs consisting of widely used organic materials, N,N'-di(naphthalene-1-yl)-N,N'-diphenylbenzidine (NPB) as a hole transport layer and tris (8-hydroxyquinoline) (Alq(3)) as emitting and electron transporting layer. LiF/Al was considered as a cathode, while metallic Ag anode was used. TiO2 and Al2O3 layers were stacked on top of the cathode to alter the properties of the top mirror. The electroluminescence emission spectra, electric field distribution inside the device, carrier density, recombination rate and exciton density were calculated as a function of the position of the emission layer. The results show that for certain TiO2 and Al2O3 layer thicknesses, light output is enhanced as a result of the increase in both the reflectance and transmittance of the top mirror. Once the optimum structure has been determined, the microcavity OLED devices can be fabricated and characterized, and comparisons between experiments and theory can be made.

Developing a scalable model of recombinant protein yield from Pichia pastoris:the influence of culture conditions, biomass and induction regime

Background The optimisation and scale-up of process conditions leading to high yields of recombinant proteins is an enduring bottleneck in the post-genomic sciences. Typical experiments rely on varying selected parameters through repeated rounds of trial-and-error optimisation. To rationalise this, several groups have recently adopted the 'design of experiments' (DoE) approach frequently used in industry. Studies have focused on parameters such as medium composition, nutrient feed rates and induction of expression in shake flasks or bioreactors, as well as oxygen transfer rates in micro-well plates. In this study we wanted to generate a predictive model that described small-scale screens and to test its scalability to bioreactors. Results Here we demonstrate how the use of a DoE approach in a multi-well mini-bioreactor permitted the rapid establishment of high yielding production phase conditions that could be transferred to a 7 L bioreactor. Using green fluorescent protein secreted from Pichia pastoris, we derived a predictive model of protein yield as a function of the three most commonly-varied process parameters: temperature, pH and the percentage of dissolved oxygen in the culture medium. Importantly, when yield was normalised to culture volume and density, the model was scalable from mL to L working volumes. By increasing pre-induction biomass accumulation, model-predicted yields were further improved. Yield improvement was most significant, however, on varying the fed-batch induction regime to minimise methanol accumulation so that the productivity of the culture increased throughout the whole induction period. These findings suggest the importance of matching the rate of protein production with the host metabolism. Conclusion We demonstrate how a rational, stepwise approach to recombinant protein production screens can reduce process development time.

Design of improved membrane protein production experiments:quantitation of the host response

Eukaryotic membrane proteins cannot be produced in a reliable manner for structural analysis. Consequently, researchers still rely on trial-and-error approaches, which most often yield insufficient amounts. This means that membrane protein production is recognized by biologists as the primary bottleneck in contemporary structural genomics programs. Here, we describe a study to examine the reasons for successes and failures in recombinant membrane protein production in yeast, at the level of the host cell, by systematically quantifying cultures in high-performance bioreactors under tightlydefined growth regimes. Our data show that the most rapid growth conditions of those chosen are not the optimal production conditions. Furthermore, the growth phase at which the cells are harvested is critical: We show that it is crucial to grow cells under tightly-controlled conditions and to harvest them prior to glucose exhaustion, just before the diauxic shift. The differences in membrane protein yields that we observe under different culture conditions are not reflected in corresponding changes in mRNA levels of FPS1, but rather can be related to the differential expression of genes involved in membrane protein secretion and yeast cellular physiology. Copyright © 2005 The Protein Society.

Blurred edges look faint, and faint edges look sharp:The effect of a gradient threshold in a multi-scale edge coding model

A multi-scale model of edge coding based on normalized Gaussian derivative filters successfully predicts perceived scale (blur) for a wide variety of edge profiles [Georgeson, M. A., May, K. A., Freeman, T. C. A., & Hesse, G. S. (in press). From filters to features: Scale-space analysis of edge and blur coding in human vision. Journal of Vision]. Our model spatially differentiates the luminance profile, half-wave rectifies the 1st derivative, and then differentiates twice more, to give the 3rd derivative of all regions with a positive gradient. This process is implemented by a set of Gaussian derivative filters with a range of scales. Peaks in the inverted normalized 3rd derivative across space and scale indicate the positions and scales of the edges. The edge contrast can be estimated from the height of the peak. The model provides a veridical estimate of the scale and contrast of edges that have a Gaussian integral profile. Therefore, since scale and contrast are independent stimulus parameters, the model predicts that the perceived value of either of these parameters should be unaffected by changes in the other. This prediction was found to be incorrect: reducing the contrast of an edge made it look sharper, and increasing its scale led to a decrease in the perceived contrast. Our model can account for these effects when the simple half-wave rectifier after the 1st derivative is replaced by a smoothed threshold function described by two parameters. For each subject, one pair of parameters provided a satisfactory fit to the data from all the experiments presented here and in the accompanying paper [May, K. A. & Georgeson, M. A. (2007). Added luminance ramp alters perceived edge blur and contrast: A critical test for derivative-based models of edge coding. Vision Research, 47, 1721-1731]. Thus, when we allow for the visual system's insensitivity to very shallow luminance gradients, our multi-scale model can be extended to edge coding over a wide range of contrasts and blurs. © 2007 Elsevier Ltd. All rights reserved.

Molecular phase space transport in water:non-stationary random walk model

Molecular transport in phase space is crucial for chemical reactions because it defines how pre-reactive molecular configurations are found during the time evolution of the system. Using Molecular Dynamics (MD) simulated atomistic trajectories we test the assumption of the normal diffusion in the phase space for bulk water at ambient conditions by checking the equivalence of the transport to the random walk model. Contrary to common expectations we have found that some statistical features of the transport in the phase space differ from those of the normal diffusion models. This implies a non-random character of the path search process by the reacting complexes in water solutions. Our further numerical experiments show that a significant long period of non-stationarity in the transition probabilities of the segments of molecular trajectories can account for the observed non-uniform filling of the phase space. Surprisingly, the characteristic periods in the model non-stationarity constitute hundreds of nanoseconds, that is much longer time scales compared to typical lifetime of known liquid water molecular structures (several picoseconds).

Fiber Bragg grating structures inscribed using 800nm femtosecond laser in single- and multi-core mid-IR glass fibers with their spectral, thermal and strain properties

Single- and multi-core passive and active germanate and tellurite glass fibers represent a new class of fiber host for in-fiber photonics devices and applications in mid-IR wavelength range, which are in increasing demand. Fiber Bragg grating (FBG) structures have been proven as one of the most functional in-fiber devices and have been mass-produced in silicate fibers by UV-inscription for almost countless laser and sensor applications. However, because of the strong UV absorption in germanate and tellurite fibers, FBG structures cannot be produced by UVinscription. In recent years femtosecond (fs) lasers have been developed for laser machining and microstructuring in a variety of glass fibers and planar substrates. A number of papers have been reported on fabrication of FBGs and long-period gratings in optical fibers and also on the photosensitivity mechanism using 800nm fs lasers. In this paper, we demonstrate for the first time the fabrication of FBG structures created in passive and active single- and three-core germanate and tellurite glass fibers by using 800nm fs-inscription and phase mask technique. With a fs peak power intensity in the order of 1011W/cm2, the FBG spectra with 2nd and 3rd order resonances at 1540nm and 1033nm in a single-core germanate glass fiber and 2nd order resonances between ~1694nm and ~1677nm with strengths up to 14dB in all three cores of three-core passive and active tellurite fibers were observed. Thermal and strain properties of the FBGs made in these mid-IR glass fibers were characterized, showing an average temperature responsivity of ~20pm/°C and a strain sensitivity of 1.219±0.003pm/µe.

Multi-topic information filtering with a single user profile

In Information Filtering (IF) a user may be interested in several topics in parallel. But IF systems have been built on representational models derived from Information Retrieval and Text Categorization, which assume independence between terms. The linearity of these models results in user profiles that can only represent one topic of interest. We present a methodology that takes into account term dependencies to construct a single profile representation for multiple topics, in the form of a hierarchical term network. We also introduce a series of non-linear functions for evaluating documents against the profile. Initial experiments produced positive results.

Mass transfer characteristics of two-aqueous-phase liquid-liquid mixtures

Mass transfer rates were studied using the falling drop method. Cibacron Blue 3 GA dye was the transferring solute from the salt phase to the PEG phase. Measurements were undertaken for several concentrations of the dye and the phase-forming solutes and with a range of different drop sizes, e.g. 2.8, 3.0 and 3.7 mm. The dye was observed to be present in the salt phase as finely dispersed solids but a model confirmed that the mass transfer process could still be described by an equation based upon the Whitman two-film model. The overall mass transfer coefficient increased with increasing concentration of the dye. The apparent mass transfer coefficient ranged from 1 x 10-5 to 2 x 10 -4 m/s. Further experiments suggested that mass transfer was enhanced at high concentration by several mechanisms. The dye was found to change the equilibrium composition of the two phases, leading to transfer of salt between the drop and continuous phases. It also lowered the interfacial tension (i.e. from 1.43 x 10-4 N/m for 0.01% w/w dye concentration to 1.07 x 10-4 N/m for 0.2% w/w dye concentration) between the two phases, which could have caused interfacial instabilities (Marangoni effects). The largest drops were deformable, which resulted in a significant increase in the mass transfer rate. Drop size distribution and Sauter mean drop diameter were studied on-line in a 1 litre agitated vessel using a laser diffraction technique. The effects of phase concentration, dispersed phase hold-up and impeller speed were investigated for the salt-PEG system. An increase in agitation speed in the range 300 rpm to 1000 rpm caused a decrease in mean drop diameter, e.g. from 50 m to 15 m. A characteristic bimodal drop size distribution was established within a very short time. An increase in agitation rate caused a shift of the larger drop size peak to a smaller size.

Studies in three phase gas-liquid-solid fluidised systems

The work is a logical continuation of research started at Aston some years ago when studies were conducted on fermentations in bubble columns. The present work highlights typical design and operating problems that could arise in such systems as waste water, chemical, biochemical and petroleum operations involving three-phase, gas-liquid-solid fluidisation; such systems are in increasing use. It is believed that this is one of few studies concerned with `true' three-phase, gas-liquid-solid fluidised systems, and that this work will contribute significantly to closing some of the gaps in knowledge in this area. The research work was mainly experimentally based and involved studies of the hydrodynamic parameters, phase holdups (gas and solid), particle mixing and segregation, and phase flow dynamics (flow regime and circulation patterns). The studies have focused particularly on the solid behaviour and the influence of properties of solids present on the above parameters in three-phase, gas-liquid-solid fluidised systems containing single particle components and those containing binary and ternary mixtures of particles. All particles were near spherical in shape and two particle sizes and total concentration levels were used. Experiments were carried out in two- and three-dimensional bubble columns. Quantitative results are presented in graphical form and are supported by qualitative results from visual studies which are also shown as schematic diagrams and in photographic form. Gas and solid holdup results are compared for air-water containing single, binary and ternary component particle mixtures. It should be noted that the criteria for selection of the materials used are very important if true three-phase fluidisation is to be achieved: this is very evident when comparing the results with those in the literature. The fluid flow and circulation patterns observed were assessed for validation of the generally accepted patterns, and the author believes that the present work provides more accurate insight into the modelling of liquid circulation in bubble columns. The characteristic bubbly flow at low gas velocity in a two-phase system is suppressed in the three-phase system. The degree of mixing within the system is found to be dependent on flow regime, liquid circulation and the ratio of solid phase physical properties. Evidence of strong `trade-off' of properties is shown; the overall solid holdup is believed to be a major parameter influencing the gas holdup structure.

Combinatorial approach to multi-substituted 1,4-Benzodiazepines as novel non-peptide CCK-antagonists

For the drug discovery process, a library of 168 multisubstituted 1,4-benzodiazepines were prepared by a 5-step solid phase combinatorial approach. Substituents were varied in the 3,5, 7 and 8-position on the benzodiazepine scaffold. The combinatorial library was evaluated in a CCK radiolabelled binding assay and CCKA (alimentary) and CCKB (brain) selective lead structures were discovered. The template of CCKA selective 1,4-benzodiazepin-2-ones bearing the tryptophan moiety was chemically modified by selective alkylation and acylation reactions. These studies provided a series of Asperlicin naturally analogues. The fully optimised Asperlicin related compound possessed a similar CCKA activity as the natural occuring compound. 3-Alkylated 1,4-benzodiazepines with selectivity towards the CCKB receptor subtype were optimised on A) the lipophilic side chain and B) the 2-aminophenyl-ketone moiety, together with some stereochemical changes. A C3 unit in the 3-position of 1,4-benzodiazepines possessed a CCKB activity within the nanomolar range. Further SAR optimisation on the N1-position by selective alkylation resulted in an improved CCKB binding with potentially decreased activity on the GABAA/benzodiazepine receptor complex. The in vivo studies revealed two N1-alkylated compounds containing unsaturated alkyl groups with anxiolytic properties. Alternative chemical approaches have been developed, including a route that is suitable for scale up of the desired target molecule in order to provide sufficient quantities for further in vivo evaluation.