A survey of main memory acquisition and analysis techniques for the windows operating system

Traditional, persistent data-oriented approaches in computer forensics face some limitations regarding a number of technological developments, e.g., rapidly increasing storage capabilities of hard drives, memory-resident malicious software applications, or the growing use of encryption routines, that make an in-time investigation more and more difficult. In order to cope with these issues, security professionals have started to examine alternative data sources and emphasize the value of volatile system information in RAM more recently. In this paper, we give an overview of the prevailing techniques and methods to collect and analyze a computer's memory. We describe the characteristics, benefits, and drawbacks of the individual solutions and outline opportunities for future research in this evolving field of IT security.     

What about non-diffusion? The effect of competitiveness in policy-comparative diffusion research

Many scholars have convincingly shown that policies diffuse between national and sub-national entities for several different reasons. Although diffusion processes are empirically proven, we witness two shortcomings in the discussion: First, there is a lack of comparative research across policy areas. Second, the question of why diffusion might not occur in a certain domain is under-theorized and lacks an empirical test. By comparing the rationale behind diffusion processes in two policy domains??energy policy and locational policy??this paper shows that two aspects matter for diffusion processes: First is the observability of policy measures, that is, how easily things can be observed by others; second is the competitiveness of the policy domain. If policy measures can be hidden easily and the policy domain is highly competitive, policy diffusion is very unlikely to happen. Therefore, we seek the integration of these two aspects in prospective diffusion research.     

La double hiérarchisation des postes de direction supérieure dans la fonction publique québécoise

Sommaire: Cette étude porte sur la stratification des postes d'encadrement supérieur dans la fonction publique québécoise. Elle révèle que ces postes sont soumis à une double hiérarchisation, l'une fondée sur une logique professionnelle et l'autre sur une logique organisationnelle. Un titre de classement et une échelle de prestige sont reliés à la hiérarchie professionnelle. Un titre de fonction et une échelle de pouvoirs sont associés à la hiérarchie organisationnelle. Chaque cadre supérieur dispose ainsi d'une double identityé. Comme ces deux hiérarchies sont souvent divergentes, il est difficile de découvrir le statut véritable de certains postes de direction. Abstract: This study looks at the stratification of top executive positions in the Quebec public service. It shows that these positions are governed by a dual hierarchy: one founded on professional logic and the other on organizational logic. Classification titles and scales of prestige are connected with professional hierarchy, while function titles and scales of power are associated with organizational hierarchy. Each senior official thus has a dual identity. Because the two hierarchies are often divergent, it is difficult to discover the real status of many management positions.     

Fingerprint enhancement revisited and the effects of blood enhancement chemicals on subsequent profiler Plus fluorescent short tandem repeat DNA analysis of fresh and aged bloody fingerprints

This study was aimed at determining the effect of seven blood enhancement reagents on the subsequent Profiler Plus fluorescent STR DNA analysis of fresh or aged bloody fingerprints deposited on various porous and nonporous surfaces. Amido Black, Crowle's Double Stain. 1,8-diazafluoren-9-one (DFO), Hungarian Red, leucomalachite green, luminol and ninhydrin were tested on linoleum, glass, metal, wood (pine, painted white), clothing (85% polyester/15% cotton, 65% polyester/35% cotton, and blue denim) and paper (Scott 2-ply and Xerox-grade). Preliminary experiments were designed to determine the optimal blood dilutions to use to ensure a DNA typing result following chemical enhancement. A 1:200 blood dilution deposited on linoleum and enhanced with Crowle's Double Stain generated enough DNA for one to two rounds of Profiler Plus PCR amplification. A comparative study of the DNA yields before and after treatment indicated that the quantity of DNA recovered from bloody fingerprints following enhancement was reduced by a factor of 2 to 12. Such a reduction in the DNA yields could potentially compromise DNA typing analysis in the case of small stains. The blood enhancement chemicals selected were also evaluated for their capability to reveal bloodmarks on the various porous and nonporous surfaces chosen in this study. Luminol. Amido Black and Crowle's Double Stain showed the highest sensitivity of all seven chemicals tested and revealed highly diluted (1:200) bloody fingerprints. Both luminol and Amido Black produced excellent results on both porous and nonporous surfaces, but Crowle's Double Stain failed to produce any results on porous substrates. Hungarian Red, DFO, leucomalachite green and ninhydrin showed lower sensitivities. Enhancement of bloodmarks using any of the chemicals selected, and short-term exposure to these same chemicals (i.e., less than 54 days), had no adverse effects on the PCR amplification of the nine STR systems surveyed (D3S 1358, HumvWA, HumFGA, D8S1179, D21S11, D18S51, D5S818, D13S317, D7S820) or of the gender determination marker Amelogenin. The intensity of the fluorescent signals was very similar and the allele size measurements remained constant and identical to those of untreated bloody fingerprints. No additional background fluorescence was noted. Continuous exposure (for 54 days) to two of the seven enhancement chemicals selected (i.e., Crowle's Double Stain and Hungarian Red) slightly reduced the amplification efficiency of the longer STR loci in profiles of fresh and 7 to 14-day-old bloodprints. This suggests that long-term exposure to these chemicals possibly affects the integrity of the DNA molecules. This study indicates that significant evidence can be obtained from fresh or aged bloody fingerprints applied to a variety of absorbent and nonabsorbent surfaces which are exposed to different enhancement chemicals for short or long periods of time. It also reaffirms that PCR STR DNA typing procedures are robust and provide excellent results when used in concert with fluorescence-based detection assays after fingerprint identification has taken place.     

State disintegration and power politics in post-Suharto Indonesia

This article illustrates how discourses on ‘state fragility’ have been instrumentalised by the Indonesian military in order to consolidate its political and economic power after the fall of Suharto. In the wake of Indonesia’s transition to democracy violent conflicts escalated in East Timor, Aceh, Papua, the Moluccas and Sulawesi. Most notably East Timor’s successful secession spawned fears over the potential ‘balkanisation’ of Indonesia. In this context the Indonesian military, which had been shunned for its involvement in Suharto’s New Order, managed to re-establish itself as the ‘guardian of the nation’. Based on fieldwork in Indonesia, the article describes how post-9/11 discourses over a potential break-up of Indonesia were used by the Indonesian military to reconsolidate its power in the post-Suharto era. The research findings illustrate that, against the looming threat of state disintegration, attempts to revoke the military’s prerogatives have either failed or have been aborted during the planning stages.