BrowStEx: A tool to aggregate browser storage artifacts for forensic analysis

Web storage or browser storage, a new client-side data storage feature, was recommended as a part of the HTML5 specifications and now widely adopted by major web browser vendors. Web storage with native browser support has changed the paradigm of web application development unprecedentedly because persistent data storage with increased data size can be realized on the client. Web storage is poised to quickly become an area of particular interest for forensic investigators due to the potential to discover critical information from web browser artifacts at client side. However, the literature work on web browser forensics has traditionally focused on browsing history, browser cache, and cookie files (Oh et al., 2011). Therefore, we first discuss the prevalence of web storage implementation in widely used websites. Then, we compare and contrast the web storage technology currently implemented in the five major web browsers, Google Chrome, Internet Explorer, Mozilla Firefox, Opera, and Apple's Safari. Moreover, in order to provide more insights into web storage and enable unified forensic analysis, a proof-of-concept tool, named as BrowStEx (Browser Storage Extractor), is described with implementation details. The commonalities, differences, and the proof-of-concept tool discussed in this paper can be useful in developing advanced forensic tools that can extract browser storage artifacts.     

论中国古典文学对《万叶集》和歌的影响——以咏“云”和歌为线索

文章主要探讨了《万叶集》中咏"云"的和歌与中国文学的关系。通过对《万叶集》文本的仔细研读、与中国古典诗歌作品的精心比对,可发现众多《万叶集》和歌的构思与中国古典诗歌有相似之处。论文通过举例与分析的方法具体论证了两者的关联,同时论证了《万叶集》和歌的枕词、序词等修辞及用词对中国文学的借鉴。     

辽宁省警务信息云计算建设的运用前景及现状探究

云计算是信息技术应用模式创新和服务模式创新的集中体现。警务信息云计算作为公安信息化建设的重要组成部分未来必将在辽宁公安工作中大规模地应用。本文简要分析了辽宁省传统的警务信息平台架构,列举了传统架构的不足;分析了我国警务信息云计算发展现状,总结了辽宁省目前公安业务云计算应用现状;提出了辽宁公安警务云计算的运用前景:云计算平台建设服务于公安工作、云平台的集成完善及公安信息数据源的准确优化。云技术的运用将为辽宁公安业务的数据安全性、信息共享性提供了强大的信息基础设施和技术保障。     

基于云服务平台的公安院校图书馆特色资源建设

随着数字资源形式多样和容量增大等诸多因素影响,传统的图书馆数字资源建设模式已经不能满足公安院校图书馆特色资源建设的需要,共建和共享数字资源成为公安院校图书馆资源保障体系的建设目标。云服务平台的每一层都是基于相应的云计算服务且实现相应的数字图书馆服务,主要由大量的分布式异构虚拟计算资源构成,而且多个计算节点共用数据和资源,整个环境节点可以协同工作、互相提供信息资源服务。因此,研究云服务平台环境下的公安院校图书馆特色资源建设方法将具有重要的实际意义。     

Distributed filesystem forensics: XtreemFS as a case study

Distributed filesystems provide a cost-effective means of storing high-volume, velocity and variety information in cloud computing, big data and other contemporary systems. These technologies have the potential to be exploited for illegal purposes, which highlights the need for digital forensic investigations. However, there have been few papers published in the area of distributed filesystem forensics. In this paper, we aim to address this gap in knowledge. Using our previously published cloud forensic framework as the underlying basis, we conduct an in-depth forensic experiment on XtreemFS, a Contrail EU-funded project, as a case study for distributed filesystem forensics. We discuss the technical and process issues regarding collection of evidential data from distributed filesystems, particularly when used in cloud computing environments. A number of digital forensic artefacts are also discussed. We then propose a process for the collection of evidential data from distributed filesystems.     

Cloud Data Imager: A unified answer to remote acquisition of cloud storage areas

The pervasive availability of cheap cloud computing services for data storage, either as persistence layer to applications or as mere object store dedicated to final users, is remarkably increasing the chance that cloud platforms potentially host evidence of criminal activity. Once presented a proper court order, cloud providers would be in the best position for extracting relevant data from their platforms in the most reliable and complete way. However, this kind of services are not so widespread to date and, therefore, the need to adopt a structured and forensically sound approach calls for innovative weaponry which leverage the data harvesting capabilities offered by the low level program interfaces exposed by providers. This paper describes the concepts and internals of the Cloud Data Imager Library, a mediation layer that offers a read only access to files and metadata of selected remote folders and currently supports access to Dropbox, Google Drive and Microsoft Skydrive storage facilities. A demo application has been build on top of the library which allows directory browsing, file content view and imaging of folder trees with export to widespread forensic formats.     

问题与走向——未成年人犯罪记录封存制度探析

未成年人犯罪记录封存制度是贯彻对未成年犯罪嫌疑人"教育、感化、挽救"刑事政策的重要体现。修改后的《刑事诉讼法》使犯罪记录封存制度实现了法制化。实施以来,这一工作取得了一定实效,为未成年犯罪嫌疑人重回社会提供了方便,同时充分体现出对未成年犯罪嫌疑人合法权益的保护。但是,实践工作同时反映出该制度存在一些问题,导致犯罪记录封存工作的立法目的难以全面实现,因此,进一步完善犯罪记录封存制度具有重要的理论意义和实践意义。     

Carbon dioxide capture and storage—liability for non-permanence under the UNFCCC

Carbon capture and storage (CCS) has recently been gaining more and more attention as a climate change mitigation option. However, as CO₂ may re-enter the atmosphere after injection into geological reservoirs, the question of long-term liability has to be considered if an environmentally sound policy is desired. Apart from this aspect, additional complexities arise from the fact that CO₂ capture and storage can be carried out in two different countries. A classification of CCS cross-border activities shows that not all cases with non-Annex I participation fall under the Clean Development Mechanism. This classification is based on the assumption that according to Article 1.8 of the Framework Convention on Climate Change, CCS would be considered an emission reduction at the source. Furthermore, we elaborate on the problem that seepage of CO₂ from reservoirs located in non-Annex I countries—under current rules—would not be subtracted from the emission budget of any country. We discuss options for creating liability in these cases.     

不同保存条件对血中CN-浓度的影响

目的研究在各种温度贮存条件下血液中CN-浓度与保存时间的关系。方法用氯胺T衍生GC/ECD分析。结果在室温下存放的阳性血,在30天～50天中,CN-浓度有所增加,以后浓度下降很快,80天后则检不出。在4℃及-20℃下贮存的血液CN-浓度,在一定的时间段中,有所增加,以后则逐渐下降,至8个月仍可检出CN-。结论不同条件下存放的血液CN-其浓度的变化是不同的。     

血和肝脏检材保存条件对氰化物浓度的影响

研究了大白鼠血液和肝脏检材保存时间及保存温度对氰化物浓度的影响。研究表明，保存168h，保存温度4℃，血液和肝脏检材中的氰化物含量变化很小；保存温度25℃，血液和肝脏险材中的氰化物浓度随时间延长而上升，肝脏检材中氰化物浓度在168h为4h的1．17倍。4h染毒组大白鼠氰化物浓度血中比肝脏中高2．3倍，证实了氰化物在体内分布的差异性。