Foundational Forensic Techniques for Cellular and Ad Hoc Multi-hop Networks

The Internet has become an integral part of our nation's critical socio-economic infrastructure. With its heightened use and growing complexity however, organizations are at greater risk of cyber crimes. To aid in the investigation of crimes committed on or via the Internet, a network forensics analysis tool pulls together needed digital evidence. It provides a platform for performing deep network analysis by capturing, recording and analyzing network events to find out the source of a security attack or other information security incidents. Existing network forensics work has been mostly focused on the Internet and fixed networks. But the exponential growth and use of wireless technologies, coupled with their unprecedented characteristics, necessitates the development of new network forensic analysis tools. This dissertation fostered the emergence of a new research field in cellular and ad-hoc network forensics. It was one of the first works to identify this problem and offer fundamental techniques and tools that laid the groundwork for future research. In particular, it introduced novel methods to record network incidents and report logged incidents. For recording incidents, location is considered essential to documenting network incidents. However, in network topology spaces, location cannot be measured due to absence of a 'distance metric'. Therefore, a novel solution was proposed to label locations of nodes within network topology spaces, and then to authenticate the identity of nodes in ad hoc environments. For reporting logged incidents, a novel technique based on Distributed Hash Tables (DHT) was adopted. Although the direct use of DHTs for reporting logged incidents would result in an uncontrollably recursive traffic, a new mechanism was introduced that overcome this recursive process. These logging and reporting techniques aided forensics over cellular and ad-hoc networks, which in turn increased their ability to track and trace attacks to their source. These techniques were a starting point for further research and development that would result in equipping future ad hoc networks with forensic components to complement existing security mechanisms.

(Table 1) Comparisons of dynamic and static Young's moduli of basalt at DSDP Holes 69-504B, 70-504B and 83-504B

Compressional- and shear-wave velocity logs (Vp and Vs, respectively) that were run to a sub-basement depth of 1013 m (1287.5 m sub-bottom) in Hole 504B suggest the presence of Layer 2A and document the presence of layers 2B and 2C on the Costa Rica Rift. Layer 2A extends from the mudline to 225 m sub-basement and is characterized by compressional-wave velocities of 4.0 km/s or less. Layer 2B extends from 225 to 900 m and may be divided into two intervals: an upper level from 225 to 600 m in which Vp decreases slowly from 5.0 to 4.8 km/s and a lower level from 600 to about 900 m in which Vp increases slowly to 6.0 km/s. In Layer 2C, which was logged for about 100 m to a depth of 1 km, Vp and Vs appear to be constant at 6.0 and 3.2 km/s, respectively. This velocity structure is consistent with, but more detailed than the structure determined by the oblique seismic experiment in the same hole. Since laboratory measurements of the compressional- and shear-wave velocity of samples from Hole 504B at Pconfining = Pdifferential average 6.0 and 3.2 km/s respectively, and show only slight increases with depth, we conclude that the velocity structure of Layer 2 is controlled almost entirely by variations in porosity and that the crack porosity of Layer 2C approaches zero. A comparison between the compressional-wave velocities determined by logging and the formation porosities calculated from the results of the large-scale resistivity experiment using Archie's Law suggest that the velocity- porosity relation derived by Hyndman et al. (1984) for laboratory samples serves as an upper bound for Vp, and the noninteractive relation derived by Toksöz et al. (1976) for cracks with an aspect ratio a = 1/32 serves as a lower bound.

Promoção da alimentação saudável na atenção primária à saúde: contribuição para construção coletiva do saber-fazer

The recognition of the food as determinant and health-disease process etching requires new explanations and interventions of the food and nutrition policy action and demand health care model based on the completeness of the actions and focused on health promotion. This study, characterized as research-action of interventionist character, sought to develop strategies to support the transverse insertion of healthy eating promotion in professionals practices a core of support for the health of the family and a family health strategy Unit in the city of Natal, capital of Rio Grande do Norte, from the analysis of perceptions and work processes of these teams. Several methodological strategies were adopted: Dialectical Hermeneutical Circle, direct observation, reflective and Thematic Meetings Workshop "Rethinking the educational practices for promoting healthy eating". For data logging, search diaries - SD were used and moments. The analysis of procedural form occurred in conjunction with research participants, in constant movement of reflection-action-reflection, based on hermeneutics-dialectic. About the results, in relation to the promotion of health, showed the following insights: health promotion and disease prevention-related harms; health promotion related to quality of life and well-being, in its various dimensions; health promotion as a responsibility of the State; health promotion related to the actions of health education; health promotion as an expression of efficaciousness and accessibility to health services. Regarding healthy nutrition, predominated the perceptions relating to nutritional aspects. With regard to food and nutritional education - FNE, it was observed a predominance of perception of FNE as information, guidance and knowledge transfer for changes of dietary practices. As regards the working process, it was observed that among the actions for health promotion, educational activities predominate, such as lectures, conversations, groups that mostly occur in fragmentary form, without joint planning teams, varying according to the professionals and the moment of work in which they are carried out. The results pointed to the need for reorganization of the work processes, in the context of intra-and intersectoral coordination and the construction of new technologies, such as: Health project of the territory – HPT, Unique Therapeutic Project- UPT, Expanded Clinic and educational practices, Shared with active teaching and learning methodologies. From the results we believe that it is necessary to "thought reform", from changes in vocational training and strengthening of the permanent education spaces, whereas the complexity that involves feeding, food and nutrition education and health promotion. The reformation of thought must be articulate and closely tied to the production of knowledge and practices that encourage intersectoral approach, the transversality, dialogue and democratic and supportive attitude, based on the collective construction of know-how. We hope that this study can contribute with reflections and initiatives that encourage building practices that promote healthy eating in primary health care, in terms of completeness of the care and the attainment of food security and nutrition.

Habitat Map for Lizard Island reef, Australia derived from a photo-transect survey field data collected in December 2011 and September/October 2012

An object based image analysis approach (OBIA) was used to create a habitat map of the Lizard Reef. Briefly, georeferenced dive and snorkel photo-transect surveys were conducted at different locations surrounding Lizard Island, Australia. For the surveys, a snorkeler or diver swam over the bottom at a depth of 1-2m in the lagoon, One Tree Beach and Research Station areas, and 7m depth in Watson's Bay, while taking photos of the benthos at a set height using a standard digital camera and towing a surface float GPS which was logging its track every five seconds. The camera lens provided a 1.0 m x 1.0 m footprint, at 0.5 m height above the benthos. Horizontal distance between photos was estimated by fin kicks, and corresponded to a surface distance of approximately 2.0 - 4.0 m. Approximation of coordinates of each benthic photo was done based on the photo timestamp and GPS coordinate time stamp, using GPS Photo Link Software (www.geospatialexperts.com). Coordinates of each photo were interpolated by finding the gps coordinates that were logged at a set time before and after the photo was captured. Dominant benthic or substrate cover type was assigned to each photo by placing 24 points random over each image using the Coral Point Count excel program (Kohler and Gill, 2006). Each point was then assigned a dominant cover type using a benthic cover type classification scheme containing nine first-level categories - seagrass high (>=70%), seagrass moderate (40-70%), seagrass low (<= 30%), coral, reef matrix, algae, rubble, rock and sand. Benthic cover composition summaries of each photo were generated automatically in CPCe. The resulting benthic cover data for each photo was linked to GPS coordinates, saved as an ArcMap point shapefile, and projected to Universal Transverse Mercator WGS84 Zone 56 South. The OBIA class assignment followed a hierarchical assignment based on membership rules with levels for "reef", "geomorphic zone" and "benthic community" (above).

Lithostratigraphy determined from downhole logs in the AND-2A borehole

During the 2007-2008 austral spring season, the ANDRILL (Antarctic Drilling project) Southern McMurdo Sound Project recovered an 1138-m-long core, representing the last 20 m.y. of glacial history. An extensive downhole logging program was successfully carried out. Due to drill hole conditions, logs were collected in several passes from the total depth at 1138.54 m below seafloor (mbsf) to 230 mbsf. After data correction, several statistical methods, such as factor analysis, cluster analysis, box-and-whisker diagrams, and cross-plots, were applied. The aim of these analyses was to use detailed interpretation of the downhole logs to obtain a description of the lithologies and their specific physical properties that is independent of the core descriptions. The sediments were grouped into the three main facies, diamictite, mudstone and/or siltstone, and sandstone, and the physical properties of each were determined. Notable findings include the high natural radioactivity values in sandstone and the high and low magnetic susceptibility values in mudstone and/or siltstone and in sandstone. A modified lithology cluster column was produced on the basis of the downhole logs and statistical analyses. It was possible to use the uranium content in the downhole logs to determine hiatuses and thus more accurately place the estimated hiatuses. Using analyses from current literature (geochemistry, clasts, and clay minerals) in combination with the downhole logs (cluster analysis), the depths 225 mbsf, 650 mbsf, 775 mbsf, and 900 mbsf were identified as boundaries of change in sediment composition, provenance, and/or environmental conditions. The main use of log interpretation is the exact definition of lithological boundaries and the modification of the paleoenvironmental interpretation.

Estimating density of a rare and cryptic high-mountain Galliform species, the Buff-throated Partridge Tetraophasis szechenyii

Estimates of abundance or density are essential for wildlife management and conservation. There are few effective density estimates for the Buff-throated Partridge Tetraophasis szechenyii, a rare and elusive high-mountain Galliform species endemic to western China. In this study, we used the temporary emigration N-mixture model to estimate density of this species, with data acquired from playback point count surveys around a sacred area based on indigenous Tibetan culture of protection of wildlife, in Yajiang County, Sichuan, China, during April–June 2009. Within 84 125-m radius points, we recorded 53 partridge groups during three repeats. The best model indicated that detection probability was described by covariates of vegetation cover type, week of visit, time of day, and weather with weak effects, and a partridge group was present during a sampling period with a constant probability. The abundance component was accounted for by vegetation association. Abundance was substantially higher in rhododendron shrubs, fir-larch forests, mixed spruce-larch-birch forests, and especially oak thickets than in pine forests. The model predicted a density of 5.14 groups/km², which is similar to an estimate of 4.7 – 5.3 groups/km² quantified via an intensive spot-mapping effort. The post-hoc estimate of individual density was 14.44 individuals/km², based on the estimated mean group size of 2.81. We suggest that the method we employed is applicable to estimate densities of Buff-throated Partridges in large areas. Given importance of a mosaic habitat for this species, local logging should be regulated. Despite no effect of the conservation area (sacred) on the abundance of Buff-throated Partridges, we suggest regulations linking the sacred mountain conservation area with the official conservation system because of strong local participation facilitated by sacred mountains in land conservation.

Efficient Computation of Electromagnetic Waves in Hydrocarbon Exploration Using the Improved Numerical Mode Matching (NMM) Method

In this study, we developed and improved the numerical mode matching (NMM) method which has previously been shown to be a fast and robust semi-analytical solver to investigate the propagation of electromagnetic (EM) waves in an isotropic layered medium. The applicable models, such as cylindrical waveguide, optical fiber, and borehole with earth geological formation, are generally modeled as an axisymmetric structure which is an orthogonal-plano-cylindrically layered (OPCL) medium consisting of materials stratified planarly and layered concentrically in the orthogonal directions.

In this report, several important improvements have been made to extend applications of this efficient solver to the anisotropic OCPL medium. The formulas for anisotropic media with three different diagonal elements in the cylindrical coordinate system are deduced to expand its application to more general materials. The perfectly matched layer (PML) is incorporated along the radial direction as an absorbing boundary condition (ABC) to make the NMM method more accurate and efficient for wave diffusion problems in unbounded media and applicable to scattering problems with lossless media. We manipulate the weak form of Maxwell's equations and impose the correct boundary conditions at the cylindrical axis to solve the singularity problem which is ignored by all previous researchers. The spectral element method (SEM) is introduced to more efficiently compute the eigenmodes of higher accuracy with less unknowns, achieving a faster mode matching procedure between different horizontal layers. We also prove the relationship of the field between opposite mode indices for different types of excitations, which can reduce the computational time by half. The formulas for computing EM fields excited by an electric or magnetic dipole located at any position with an arbitrary orientation are deduced. And the excitation are generalized to line and surface current sources which can extend the application of NMM to the simulations of controlled source electromagnetic techniques. Numerical simulations have demonstrated the efficiency and accuracy of this method.

Finally, the improved numerical mode matching (NMM) method is introduced to efficiently compute the electromagnetic response of the induction tool from orthogonal transverse hydraulic fractures in open or cased boreholes in hydrocarbon exploration. The hydraulic fracture is modeled as a slim circular disk which is symmetric with respect to the borehole axis and filled with electrically conductive or magnetic proppant. The NMM solver is first validated by comparing the normalized secondary field with experimental measurements and a commercial software. Then we analyze quantitatively the induction response sensitivity of the fracture with different parameters, such as length, conductivity and permeability of the filled proppant, to evaluate the effectiveness of the induction logging tool for fracture detection and mapping. Casings with different thicknesses, conductivities and permeabilities are modeled together with the fractures in boreholes to investigate their effects for fracture detection. It reveals that the normalized secondary field will not be weakened at low frequencies, ensuring the induction tool is still applicable for fracture detection, though the attenuation of electromagnetic field through the casing is significant. A hybrid approach combining the NMM method and BCGS-FFT solver based integral equation has been proposed to efficiently simulate the open or cased borehole with tilted fractures which is a non-axisymmetric model.

(Tables 1-3) Geochemical composition of seepage water in soils obtained in Schleswig-Holstein, Germany

Under defined laboratory and field conditions, the investigation of percolating water through soil columns (podsol, lessive and peat) down to groundwater table shows that the main factors which control the chemical characteristics of the percolates are: precipitation, evaporation, infiltration rate, soil type, depth and dissolved organic substances. Evaporation and percolation velocity influences the Na+, SO4**2- and Cl- concentrations. Low percolation velocity leads also to longer percolation times and water logging in less permeable strata, which results in lower Eh-values and higher CO2-concentrations due to low gas exchange with the atmosphere. Ca2+ and Mg2+ carbonate concentration depends on soil type and depth. Metamorphism and decomposition of organic substances involve NO3 reduction and K+, Mg2+, SO4**2-, CO2, Fe2+,3+ transport. The analytical data were evaluated with multi variate statistical methods.

Magnetostratigraphy of ODP Leg 178 holes

We present revised magnetostratigraphic interpretations for Ocean Drilling Program Sites 1095, 1096, and 1101, cored in sediment drifts located off the Pacific margin of the Antarctic Peninsula. The revised interpretations incorporate a variety of observations and results obtained since the end of Leg 178, of which the most significant are new paleomagnetic measurements from U-channel samples, composite depth scales that allow stratigraphic correlation between multiple holes cored at a site, and revised biostratigraphic interpretations. The U-channel data, which include more than 102,000 paleomagnetic observations from more than 13,400 intervals along U-channel samples, are included as electronic files. The magnetostratigraphic records at all three sites are consistent with sedimentation being continuous over the intervals cored, although the data resolution does not preclude short hiatuses less than a few hundred thousand years in duration. The magnetostratigraphic records start at the termination of Subchron C4Ar.2n (9.580 Ma) at ~515 meters composite depth (mcd) for Site 1095, at the onset of Subchron C3n.2n (4.620 Ma) at ~489.68 mcd for Site 1096, and at the onset of Subchron C2An.1n (3.040 Ma) at 209.38 meters below seafloor for Site 1101. All three sites provide paleomagnetic records that extend upward through the Brunhes Chron.

(Table T4) Final depth vs. velocity and two-way traveltime data, ODP Site 178-1103

Site 1103 was one of a transect of three sites drilled across the Antarctic Peninsula continental shelf during Leg 178. The aim of drilling on the shelf was to determine the age of the sedimentary sequences and to ground truth previous interpretations of the depositional environment (i.e., topsets and foresets) of progradational seismostratigraphic sequences S1, S2, S3, and S4. The ultimate objective was to obtain a better understanding of the history of glacial advances and retreats in this west Antarctic margin. Drilling the topsets of the progradational wedge (0-247 m below seafloor [mbsf]), which consist of unsorted and unconsolidated materials of seismic Unit S1, was very unfavorable, resulting in very low (2.3%) core recovery. Recovery improved (34%) below 247 mbsf, corresponding to sediments of seismic Unit S3, which have a consolidated matrix. Logs were only obtained from the interval between 75 and 244 mbsf, and inconsistencies on the automatic analog picking of the signals received from the sonic log at the array and at the two other receivers prevented accurate shipboard time-depth conversions. This, in turn, limited the capacity for making seismic stratigraphic interpretations at this site and regionally. This study is an attempt to compile all available data sources, perform quality checks, and introduce nonstandard processing techniques for the logging data obtained to arrive at a reliable and continuous depth vs. velocity profile. We defined 13 data categories using differential traveltime information. Polynomial exclusion techniques with various orders and low-pass filtering reduced the noise of the initial data pool and produced a definite velocity depth profile that is synchronous with the resistivity logging data. A comparison of the velocity profile produced with various other logs of Site 1103 further validates the presented data. All major logging units are expressed within the new velocity data. A depth-migrated section with the new velocity data is presented together with the original time section and initial depth estimates published within the Leg 178 Initial Reports volume. The presented data confirms the location of the shelf unconformity at 222 ms two-way traveltime (TWT), or 243 mbsf, and allows its seismic identification as a strong negative and subsequent positive reflection.