A RAM triage methodology for Hadoop HDFS forensics

This paper discusses the challenges of performing a forensic investigation against a multi-node Hadoop cluster and proposes a methodology for examiners to use in such situations. The procedure's aim of minimising disruption to the data centre during the acquisition process is achieved through the use of RAM forensics. This affords initial cluster reconnaissance which in turn facilitates targeted data acquisition on the identified DataNodes. To evaluate the methodology's feasibility, a small Hadoop Distributed File System (HDFS) was configured and forensic artefacts simulated upon it by deleting data originally stored in the cluster. RAM acquisition and analysis was then performed on the NameNode in order to test the validity of the suggested methodology. The results are cautiously positive in establishing that RAM analysis of the NameNode can be used to pinpoint the data blocks affected by the attack, allowing a targeted approach to the acquisition of data from the DataNodes, provided that the physical locations can be determined. A full forensic analysis of the DataNodes was beyond the scope of this project.     

Eighteen Ways Courts Should use Technology to Better Serve Their Customers

Courts have traditionally used technology to enhance their internal operations. “Outward‐facing” technology focuses on meeting the needs of the court's customers. The article gives 18 examples of such technology and shows how better serving a court's customers provides direct benefits to the court itself.     

将"研究性学习"方法引入教学活动之中--信息技术环境下教师的作用

研究性学习强调学生学习的自主性,突出学生的主体地位,教师也由知识的传授者转变为学习的指导者.     

File fragment encoding classification—An empirical approach

Over the past decade, a substantial effort has been put into developing methods to classify file fragments. Throughout, it has been an article of faith that data fragments, such as disk blocks, can be attributed to different file types. This work is an attempt to critically examine the underlying assumptions and compare them to empirically collected data. Specifically, we focus most of our effort on surveying several common compressed data formats, and show that the simplistic conceptual framework of prior work is at odds with the realities of actual data. We introduce a new tool, zsniff, which allows us to analyze deflate-encoded data, and we use it to perform an empirical survey of deflate-coded text, images, and executables. The results offer a conceptually new type of classification capabilities that cannot be achieved by other means.     

网络安全策略与技术在校园网中的应用

从物理安全和逻辑安全角度分析了校园网应用比较明显的网络安全策略和技术,并提出了作者认为校园网中比较合理的安全分层模型。     

Indigenous floating cultivation: a sustainable agricultural practice in the wetlands of Bangladesh

Floating-bed cultivation has proved a successful means to produce agricultural crops in various wetland areas of the world. In freshwater lakes and wetlands, vegetables, flowers, and seedlings are grown in Bangladesh using this floating cultivation technique, without any additional irrigation or chemical fertiliser. No detailed study of this indigenous cultivation technique has been published to date, although the laboratory method, hydroponics, is well documented in the professional literature. Our study is focused on the nature and characteristics of the Bangladeshi system, where local farmers have demonstrated the potential for the sustainable use of such common-property local water resources. We seek to establish a reference point for further research into this technique for its possible refinement and an assessment of its suitability for replication.     

论数字时代的版权补偿金制度及其导入

版权补偿金制度是为了缓解模拟复制技术条件下版权人与使用人之间紧张关系而作的一项制度安排,并且在不同的国家、不同的历史时期其具体内容和作用也不尽相同。在数字复制时代,尽管这一制度面临着前所未有的危机,但它仍具有不可替代的制度价值。从我国版权立法和司法的实际来看,导入版权补偿金制度不仅具有必要性,而且也有可行性,应该得到进一步的研究和关注。     

The Digital Economy Act 2010: subscriber monitoring and the right to privacy under Article 8 of the ECHR

This paper critically assesses the compatibility of s3 Digital Economy Act 2010 (DEA) with Article 8 of the European Convention on Human Rights (1950) (ECHR). The analysis draws on Ofcom’s Initial Obligations and two UK cases, namely: British Telecommunications Plc & Anor, R (on the application of) v The Secretary of State for Business, Innovation and Skills,¹1 British Telecommunications Plc & Anor, R (on the application of) v The Secretary of State for Business, Innovation and Skills [2011] EWHC 1021 (Admin).View all notes and R (British Telecommunications plc and TalkTalk Telecom Group plc) v Secretary of State for Culture, Olympics, Media and Sport and others.²2 R (British Telecommunications plc and TalkTalk Telecom Group plc) v Secretary of State for Culture, Olympics, Media and Sport and others [2012] EWCA Civ 232.View all notes It argues that the implementation of this obligation allows directed surveillance of subscribers’ activities without legal authorisation under the Regulation of Investigatory Powers Act 2000 (RIPA). It also analyses compliance with the Strasbourg Court’s three-part, non-cumulative test, to determine whether s3 of the DEA is, firstly, ‘in accordance with the law’; secondly, pursues one or more legitimate aims contained within Article 8(2) of the Convention; and thirdly, is ‘necessary’ and ‘proportionate’. It concludes that unless the implementation of s3 of the DEA required the involvement of State authorities and was specifically targeted at serious, commercial scale online copyright infringement cases it could infringe part one and part three of the ECtHR’s test, thereby violating subscribers’ Article 8 ECHR rights.     

人工智能时代的专利法:问题、挑战与应对

人工智能作为当前最为尖端的科技成果,对于专利法的挑战是全方面的,既包括人工智能技术本体的专利法律保护、人工智能发明成果的专利法律规制,还涉及人工智能应用工具的专利法律影响问题。造成上述难题的原因包括人工智能的复合性技术结构、人工智能法律客体的本质属性以及人工智能的超强运算能力等人工智能基本特质。为此,应通过优化人工智能技术本身的专利保护模式、开展人工智能自主发明的专利法律规制、创设人工智能应用工具的专利实践指引等措施,实现对人工智能时代专利法律问题的有效应对。