基于蜜罐技术的计算机动态取证系统研究

提出了一种基于蜜罐的计算机动态取证方法.该方法通过蜜罐技术将入侵转移到一个虚拟的环境,不仅可以保护网络或主机不受攻击,而且还可以为证据的提取争取到更长的时间,从而获得更为真实的电子证据.实验结果表明:基于蜜罐的动态取证系统具有检测率高、误报率低、取证能力强的特性.     

Rapid separation of post‐blast explosive residues on glass electrophoresis microchips

This study describes the development of an analytical methodology based on the use of microchip electrophoresis (ME) devices integrated with capacitively coupled contactless conductivity detection (C⁴D) for the separation and detection of inorganic anions in post‐blast explosive residues. The best separation condition was achieved using a running buffer composed of 35 mmol/L lactic acid, 10 mmol/L histidine and 0.070 mmol/L cetyl(trimethyl ammonium) bromide. For C⁴D measurements, the highest sensitivity was obtained applying a 700 kHz sinusoidal wave with excitation voltage of 20 V_pp. The separation of Cl^?, NO₃^?, NO₂^?, SO₄^2?, ClO₄^? and ClO₃^? was performed within ca. 150 s with baseline resolution and efficiencies between 4.4 × 10⁴ and 1.7 × 10⁵ plates/m. The found limits of detection ranged between 2.5 and 9.5 μmol/L. Last, real samples of post‐blast explosive residues were analyzed on the ME‐C⁴D devices obtaining successfully the determination of Cl^?, NO₃^? and SO₄^2?. The achieved concentration values varied between 12.8–72.5 mg/L for Cl^?, 1.7–293.1 mg/L for NO₃^? and 1.3–201.3 mg/L for SO₄^2?. The data obtained using ME‐C⁴D devices were in good agreement with the concentrations found by ion chromatography. The approach reported herein has provided short analysis time, instrumental simplicity, good analytical performance and low cost. Furthermore, the ME‐C⁴D devices emerge as a powerful and portable analytical platform for on‐site analysis demonstrating to be a promising tool for the crime scene investigation.     

手机淫秽色情信息治理分析与应对策略

随着网络传播工具的发展加剧了淫秽色情信息的泛滥,青少年性教育阙如、网络信息资源良莠不齐以及网络法制责任意识淡薄是淫秽色情信息大量蔓延的深度原因.在强化淫秽色情信息犯罪的综合治理的同时,运营商应该尽到自身的社会责任,实现淫秽色情信息犯罪的有效惩防.     

Offense Control Taking into Account Heterogeneity of Age

This paper studies the optimal tradeoff between the benefits and costs of preventing offenses and treating offenders. Based on a flexible age-structured epidemiological framework, a two-state compartment model is analyzed to reduce the prevalence of offending such as illicit drug consumption or violence. It turns out that, even in this highly simplified model, multiple stationary states exist. In particular, three different kinds of equilibria are identified, i.e., law and order, conservative, and liberal. The optimal mix of the control instruments is calculated providing interesting insight into the structure of the paths minimizing the discounted stream of social costs and expenditures for prevention and treatment.It can happen that a Skiba point exists. This implies that, for an initially small number of offenders, saddle-point convergence to a law-and-order equilibrium (boundary solution with no offenders) or to a conservative equilibrium (with few offenders) occurs, while if the number of offenders is large, the effects of prevention and treatment are too low or too expensive so that a liberal equilibrium (with many offenders) occurs.     

连续犯罪预测的区域覆盖加权模型(AOWM)

2010年MCM(美国大学生数学建模竞赛)B题-Criminology要求建立连续犯罪的预测模型用于抓捕案犯.利用统计学、犯罪心理学相关知识,建立了区域覆盖加权模型(Area Overlap Weighted Model,简称AOWM).AOWM操作便利,在分析真实案例时的正确率能达到80%以上,因此具有较好的应用前景.     

网络对抗技术中社会工程学攻击的研究

论文从社会工程学威胁非传统信息安全的方式和危害㈦出发,讨论非传统信息安全的社会工程学攻击的概念,并从网络犯罪侦查角度对社会工程学攻击进行了深入的剖析。作为从事网络对抗技术的侦查人员,要想成功打击与遏制计算机网络犯罪,除了积极引导政府、公司和个人等采取防范措施以降低和免受社会工程学攻击所带来的安全威胁外,尚须懂得主流社会工程学攻击的方法或手段,只有充分掌握网络对抗技术中社会工程学攻击的防范措施和侦查取证策略,做到知己知彼方能有效遏制和打击计算机网络犯罪,保障计算机网络和谐健康持续发展。     

计算机取证研究综述

With the development of Internet and information technology, the digital crimes are also on the rise. Computer forensics is an emerging research area that applies computer investigation and analysis techniques to help detection of these crimes and gathering of digital evidence suitable for presentation in courts. This paper provides foundational concept of computer forensics, outlines various principles of computer forensics, discusses the model of computer forensics and presents a proposed model.     

Key Player Policies When Contextual Effects Matter

We consider a model where the criminal decision of each individual is affected by not only her own characteristics, but also by the characteristics of her friends (contextual effects). We determine who the key player is, i.e., the criminal who once removed generates the highest reduction in total crime in the network. We propose a new measure, the contextual intercentrality measure, that generalizes the one proposed by Ballester, Calvó-Armengol, and Zenou (2006 Ballester , C. , Calvó-Armengol , A. , &; Zenou , Y. ( 2006 ). Who's who in networks. Wanted: The key player . Econometrica , 74 , 1403 – 1417 .[Crossref], [Web of Science ®] , [Google Scholar]) by taking into account the change in contextual effects following the removal of the key player. We also provide an example showing that the key player can be different whether contextual effects are taken into account or not. This means that the planner may target the wrong person if it ignores the effect of the “context” when removing a criminal from a network.     

Multifarious Applications of Photoacoustic Spectrophotometer and Its Importance in Forensic Investigation

Abstract: Photoacoustic spectrophotometer (PAS) has emerged as the most promising technology with its promise to resolve unmet issues in various domains. The advantages of PAS are nonvulnerability of the sample, trace quantity sample analysis, and short response time. Though it showed distinguished features close to its emergence, it is bereft of its importance in the present scenario. Certainly, there exists a transparent gap in understanding the current situation in forensic crime scene management and the application of PAS within the same discipline. This article aims to consolidate all this information to fill an existing knowledge gap and tries to establish trajectory of research done up to now. This article will also pinpoint the reasons behind why this advanced technique could not accomplish its respectable feat inside the market and restraint of optical business toward inventing and commercializing this merchandise.