Advanced Framework for Digital Forensic Technologies and Procedures*

Abstract: Recent trends in global networks are leading toward service‐oriented architectures and sensor networks. On one hand of the spectrum, this means deployment of services from numerous providers to form new service composites, and on the other hand this means emergence of Internet of things. Both these kinds belong to a plethora of realms and can be deployed in many ways, which will pose serious problems in cases of abuse. Consequently, both trends increase the need for new approaches to digital forensics that would furnish admissible evidence for litigation. Because technology alone is clearly not sufficient, it has to be adequately supported by appropriate investigative procedures, which have yet become a subject of an international consensus. This paper therefore provides appropriate a holistic framework to foster an internationally agreed upon approach in digital forensics along with necessary improvements. It is based on a top‐down approach, starting with legal, continuing with organizational, and ending with technical issues. More precisely, the paper presents a new architectural technological solution that addresses the core forensic principles at its roots. It deploys so‐called leveled message authentication codes and digital signatures to provide data integrity in a way that significantly eases forensic investigations into attacked systems in their operational state. Further, using a top‐down approach a conceptual framework for forensics readiness is given, which provides levels of abstraction and procedural guides embellished with a process model that allow investigators perform routine investigations, without becoming overwhelmed by low‐level details. As low‐level details should not be left out, the framework is further evaluated to include these details to allow organizations to configure their systems for proactive collection and preservation of potential digital evidence in a structured manner. The main reason behind this approach is to stimulate efforts on an internationally agreed “template legislation,” similarly to model law in the area of electronic commerce, which would enable harmonized national implementations in the area of digital forensics.     

政府信息公开机制中危机新闻发言人制度研究

当各种突发事件和公共危机频繁触动人们的神经,成为时下社会最为敏感的话题时,人们不得不更为虔诚地相信和依赖政府。政府如何满足社会公众对信息公开、透明的需求,在危机管理中把握舆论导向、巩固和完善政府形象、保持社会稳定和谐有序地运转,危机新闻发言人制度就被特别提上政府议程,成为当下政府化危机为转机的关键。     

媒体与司法关系规则的三种模式

在处理媒体与司法关系的问题上,西方主要法治国家采用的模式是不相同的。美国采用的是不限制媒体的“司法自我约束模式”,英国采用的是“司法限制媒体模式”,而大陆法国家则采用了一种近乎“放任自流”的“司法向媒体开放模式”。中国的司法模式类似于大陆法系国家,在司法与媒体的关系规则模式上,应当采纳大陆法国家模式。     

重庆“打黑”行动中媒体与司法的关系

在重庆“打黑”行动中,公安、司法司法机关在处理媒体与司法关系的过程中,有很多值得推广的经验,也有一些存在的问题。“打黑”行动中重庆市公安、检察机关新闻发布的经验有：重庆公安、司法机关适度公开信息体现执法文明,及时回应媒体质疑符合公诉机关的职责。“打黑”行动中重庆市法院及法官新闻发布的经验是：推行“分区就座”和“声音直播”实现审判公开;宣判时召开新闻发布会进行审后答疑。公安、司法机关在处理媒体与司法关系的过程中应当改进的方面是：限制个人隐私和证据内容的公开;对民众特别关注的案件应当庭审直播。     

开放与宽容：文化全球化发展的内在诉求

伴随经济全球化的深入发展,文化全球化内在地诉求我们对异质文化持开放宽容的心态,在“全球文化场内”相互吸纳、相互交融、互利双赢、共同发展,这对我国构建走向世界的中国文化和建设社会主义文化和谐具有重要启示意义。     

Comparison of Different Swabs for Sampling Inorganic Gunshot Residue from Gunshot Wounds: Applicability and Reliability for the Determination of Firing Distance

This study concentrates on samples of bare pork skin, with and without bristles, and dried bovine ribs shot with a semi‐automatic pistol to find the best methodology and sampling surface in the search for inorganic gunshot residues (IGSR). Four quadrants of known surface areas were sampled at different distances from the bullet's hole with different swabs: tapes in graphite, Leukosilk® white tape, 3M® transparent tape, and a cotton swab to assess the technique able to collect the highest amounts of IGSR with the lowest contribution of the blank. The cotton swab wet in 10% HNO₃ gave the best results. The highest amounts of IGSR, measured by ICP‐OES and MS, were detected on a surface of 3‐cm radius from the bullet's edge. The amount of metals collected decreased with the firing distance between 20 and 60 cm. The procedure was efficient for sampling different tissues like skin and bones.     

公证债权文书执行审查程序与破产债权确认之诉的交错与区隔 ——以重庆莱卡斯贸易有限公司破产债权确认纠纷案为视角

具有强制执行效力的公证书确认的债权进入执行程序后,债务人进入破产清算的,围绕债权产生的争议,在规范层面上,存在着公证债权文书执行审查程序与破产债权确认之诉这两种不同的争议解决程序,然而这两种程序性质迥异,相互排斥、无法并行。为协调两种程序之间的关系,应当以裁定受理破产申请与裁定中止执行这两个时间节点为界,对这两种程序的适用范围进行区隔,分别确定两个程序的不同规制范围。     

我国涉诉信访终结机制的建构

多年来,涉诉信访工作由于缺乏终结处理机制,重复上访、无限申诉上访层出不穷,严重影响了司法权威,乃 至影响到社会和谐和国家权威。研究表明,涉诉信访在法律转型时期存在着悖论,虽然在目前无法废止信访制度,但是 我们可以在具体的个案涉诉信访领域有所突破,构建涉诉信访终结机制,从而规范涉诉信访秩序。     

Suggestive Eyewitness Identification Procedures and the Supreme Court’s Reliability Test in Light of Eyewitness Science: 30 Years Later

The U.S. Supreme Court’s ruling concerning suggestive eyewitness identification procedures (Manson v. Braithwaite, 1977, 432 U.S. 98) has not been revisited by the Court in the intervening 30+ years. Meanwhile, scientific studies of eyewitnesses have progressed and DNA exonerations show that mistaken identification is the primary cause of convictions of the innocent. We analyzed the two-inquiry logic in Manson in light of eyewitness science. Several problems are discussed. Ironically, we note that suggestive identification procedures (determined in the first inquiry) boost the eyewitnesses’ standing on three of the five criteria (used in the second inquiry) that are used to decide whether the suggestive procedures were a problem. The net effect undermines safeguards intended by the Court and destroys incentives to avoid suggestive procedures.

从封闭到开放:教育研究方法范式的转换

我国教育学术界主要存在两种研究方法的范式,二者存在着矛盾与竞争,尤其表现为主张实证研究的学者往往反对思辨研究.其实,将任何一种方法范式的合法性强调到极端,而拒斥其他的研究方法,都是片面的.封闭的教育研究方法范式不仅会限制研究者的学术兴趣、学术视野和学术创新能力,而且往往会导致研究目的、研究过程甚至研究结论被局限在其方法所允许的比较狭隘的范围之内.因此,教育学术界应当超越封闭的方法范式,以实现以下三个转向:从封闭到开放,从控制到解放,从霸权到民主.只有如此,教育学才可能充满活力、具有学科竞争力和影响力.