Automated identification of installed malicious Android applications

Increasingly, Android smartphones are becoming more pervasive within the government and industry, despite the limited ways to detect malicious applications installed to these phones' operating systems. Although enterprise security mechanisms are being developed for use on Android devices, these methods cannot detect previously unknown malicious applications. As more sensitive enterprise information becomes available and accessible on these smartphones, the risk of data loss inherently increases. A malicious application's actions could potentially leave sensitive data exposed with little recourse. Without an effective corporate monitoring solution in place for these mobile devices, organizations will continue to lack the ability to determine when a compromise has occurred. This paper presents research that applies traditional digital forensic techniques to remotely monitor and audit Android smartphones. The smartphone sends changed file system data to a remote server, allowing for expensive forensic processing and the offline application of traditional tools and techniques rarely applied to the mobile environment. The research aims at ascertaining new ways of identifying malicious Android applications and ultimately attempts to improve the state of enterprise smartphone monitoring. An on-phone client, server, database, and analysis framework was developed and tested using real mobile malware. The results are promising that the developed detection techniques identify changes to important system partitions; recognize file system changes, including file deletions; and find persistence and triggering mechanisms in newly installed applications. It is believed that these detection techniques should be performed by enterprises to identify malicious applications affecting their phone infrastructure.     

管理医疗机构公共安全视频图像信息系统的法律依据及相关问题

按照实施先后排序,对《北京市公共安全图像信息系统管理办法》等12省市地方立法、《中华人民共和国反恐怖主义法》、上海市《重点单位重要部位安全技术防范系统要求》(DB31/329.11-2009)等法律、法规、部门规章和地方技术标准进行梳理,结合案例说明医疗机构在建设、管理和使用公共安全视频图像信息系统的主要法律责任和需注意的若干问题。     

Using the Arrestee Drug Abuse Monitoring (ADAM) program to further understand the relationship between drug use and gang membership

In this paper, we examine the relationship between drug use and gang membership using data from the Arizona Arrestee Drug Abuse Monitoring (ADAM) program, which collects both self‐report and hard measures (i.e., urinalysis) of drug use. Our analyses revealed that self‐reported recent drug use (i.e., drug use in the past three days) and urinalysis outcomes were similarly associated with the gang‐membership variables. These findings suggest that self‐reported data obtained from gang members is a particularly robust method for gathering information on their recent behavior. Additionally, our results were supportive of the social facilitation model, showing that current gang members were significantly more likely to use marijuana and cocaine compared with former gang members. The implications for policy and future research are discussed.     

No derivative shareholder suits in Europe: A model of percentage limits and collusion

We address one of the cardinal puzzles of European corporate law: the lack of derivate shareholder suits. We explain this phenomenon on the basis of percentage limits which require shareholders to hold a minimum amount of shares in order to bring a lawsuit. We show that, under this legal regime, managers will collude with large shareholders by means of settlements or bribes that impose a negative externality on small shareholders. Contrary to conventional agency models, we find that large shareholders do not monitor the management; as a consequence, there is no free riding opportunity for small shareholders.     

Are reality monitoring differences between truthful and deceptive autobiographical accounts affected by standardisation for word-count and the presence of others?

Although a number of methods have been proposed to control for word-count differences between truthful and deceptive accounts, there is no uniformity amongst researchers using the Reality Monitoring (RM) criteria as to when, why or how to standardise for word-count differences. Another factor that also has received little attention in the literature is whether the number of others present when a person is providing an account alters the lexical profile of accounts such that RM scores are affected. To investigate these issues, 62 autobiographical statements, 31 truthful and 31 deceptive, were generated under 3 conditions, no person present, 1 and 2 persons present, and were analysed before and after standardisation for word-count and duration. Results showed that the criteria successfully discriminated between truthful and deceptive accounts when no attempt to control for word-count was made and, to a lesser extent, when accounts were standardised for duration; however, they failed to discriminate after accounts had been standardised for length. The presence of others did not affect the ability to distinguish between truthful and deceptive accounts. The results highlight the difficulties involved in developing normative standardisation criteria which could be used in the field to classify individual or small numbers of cases.     

正阳县医疗机构消毒监测结果分析

目的：了解正阳县医疗机构消毒工作状况,为提高消毒质量提供科学依据。方法：按卫生部（《消毒技术规范》和《医院消毒卫生标准》GB15982—1995执行。结果：2005～2007年样品合格率依次为70．65％、85．97％、92．60％。结论：正阳县医疗机构消毒效果（质量）合格率呈逐年上升趋势,但仍存在一些问题,卫生行政部门和疾控机构应加大监督和监测力度。     

70例对冲性颅底骨折分析

作者对70例头部损伤引起的对冲性颅底骨折进行了分析.认为在骨质菲薄部位,如眶板、筛板及蝶骨翼等处出现孤立性线状或粉碎性骨折,系由于头部受钝性暴力作用,于着力点的对侧被眼球或脑的加速运动撞击造成;在对冲性颅底骨折的相应部位的脑组织出现严重的对冲性脑挫伤,系由于该部脑组织加速运动撞击形成;二者是相互作用的结果.其它部位的对冲性颅底骨折主要是由于颅底部突出部分的反作用力造成.     

THE SUPREME COURT OF JUSTICE OF THE REPUBLIC OF AUSTRIA

The aim of this article is to give an overview of the tasks and the function of the Supreme Court of Justice in interaction with the other two “Highest Courts” of the Republic of Austria on the one hand, and the European Court of Human Rights as well as the Court of Justice of the European Union on the other hand. For this purpose introductory remarks will examine the Austrian understanding of the judiciary as a state power and judicial independence. The closing part of the article will particularly look into the role of the Supreme Court as highest instance in criminal matters.     

140例海洛因毒品案鉴定结果分析

１４０例海洛因毒品案鉴定结果分析张润生（上海市刑事科学技术研究所;上海２０００８３）ＡＮＡＬＹＳＩＳＯＦ１４０ＣＡＳＥＳＯＦＨＥＲＯＩＮ￥ＺｈａｎｇＲｕｎｓｈｅｎｇ（ＳｈａｎｇｈａｉＩｎｓｔｉｔｕｔｅｏｆＦｏｒｅｎｓｉｃＳｃｉｅｎｃｅｓ;Ｓｈａｎｇｈ...     

2633例机械性窒息法医尸检资料回顾性研究

本文根据湖北省部分地区1957～1986年间尸检记录,收集并分析了2633例机械性窒息死的出现率、案情性质、城市与乡村的差别等问题,为法医学实践提供了可供参考的资料。     

中国汉族男女股骨性别差异

经测量235副（男158副，女77副）已知生前确切性别的成年股骨的21项指标，对单一测量项目判定股骨性别的效果进行了检验。结果表明，21项测量指标中有11项单一指标的判别效果达80％以上。采用Fisher两类判别分析法对测量数据进行统计处理，得到根据单侧股骨测量值判别性别的函数方程14个；对南方和北方人群组的测量数据，分别用Fisher两类判别法进行统计，建立了根据单侧股骨测量值判断性别的函数34个，判别率最高达98．23％。与盲测判别准确率相近。该法可用于法医人类学的个体识别。     

关于指纹特征价值研究

对2000人的20000枚指纹各指位不同纹型组合,各指位不同区域细节特征分布进行观察统计分析,发现其出现率明显不同.以此为据,计算出现概率,是全面判定指纹特征价值的依据.     

过敏性休克死亡机体内白三烯变化的研究

本研究采用反相洗脱高效液相色谱(HPLC)法检测青霉素和血清过敏休克致死机体中自三烯(Leukotrienes,LTs)。(1)过敏休克前血中未检出LTs的任一组分,休克死亡后检出LTB_4和LTD_4。青霉素过敏血中LTB_4含量是10.10±4.76(ng/ml),LTD_4是26.75±6.55(ng/ml),未检出LTC_4和LTF_4。(2)正常动物肺,脾和肾中均未检出LTs。过敏休克的肺,脾和肾中不仅检出LTB_4和LTD_4,而且在不同脏器中呈规律分布。青霉素过敏肺中LTs_4是23.75±3.80(ng/g),LTD4是58.58±11.39(ng/g))未检出LTC_4和LTE_4。脾中仅有LTB_424.36±3.62(ng/g)。肾中仅有LTD_12.17±2.55(ng/g)。(3)过敏休克致死机体置室温6或12h,或置冰箱48h再测LTs,未见明显变化。(4)青霉素和血清诱发的过敏休克中,LTs的增加和分布是一致的。本研究提示:LTs含量和分布的变化是过敏性休克所共有,可为过敏性休克急死的法医学死因检定提供有价值的证据。     

断线钳剪切痕迹特征的实验研究

探讨断线钳剪切金属客体所形成的痕迹特征及其检验方法.     

论推定规则适用中的证明责任和证明标准

<正>推定是由法律规定并由司法人员作出的具有推断性质的事实认定。由于"推定"一般都是以法律规定为依据的,所以在司法活动中运用推定方法认定案件事实或争议事实就表现为对"推定规则"的适用。推定规则的表现形式可以是立法机关制定并颁布的法律,也可以是司法机关依法制定的证据规则或者作出的司法解释和具有约束力的判例。在本文中,笔者将主     

ANALYSIS OF MEDIATION AGREEMENTS OF FAMILIES REPORTING SPECIFIC TYPES OF INTIMATE PARTNER ABUSE

The purpose of this study was to carefully measure Intimate Partner Abuse (IPA) behaviors among a large ( n  = 864 couples) sample of pairs of husbands and wives who were mandated to attend divorce mediation and then to: categorize the behaviors into theoretically-driven types of IPA, determine the number of cases screened out of mediation for any reason, and investigate whether measured outcomes of mediation (primary physical and legal custody) were related to IPA. Results indicated that rarely was IPA not reported—the most frequently reported IPA behavior was psychological abuse (98% of wives; 97% of husbands), followed by physical abuse (58% of wives; 54% of husbands), escalated physical abuse (62% of wives; 50% of husbands), and sexual intimidation, coercion and rape (56% of wives; 29% of husbands). Rarely were couples reporting IPA screened out of mediation (5%), and rarely were supervised parenting time or restrictions on contact between parents included in mediated agreements made by couples reporting IPA (6.5%). The overall level of IPA was unrelated to the specific terms of mediated agreements; however, by far the most frequent type of mediated agreement the couples' negotiated in mediation was for primary physical custody to go to the wife and for the husband and wife to have joint legal custody (59% of cases). Analysis of the implications of these findings and policy recommendations are included.