Marc Rogers

Purdue University, Computer & Information Technology, Faculty Member

Followers

Following

Co-author

Public Views

Interests

Uploads

Papers by Marc Rogers

The Psychology of Cyber-Terrorism

John Wiley & Sons, Ltd eBooks, May 27, 2008

DIGITAL FORENSIC RESEARCH CONFERENCE File Hound: A Forensics Tool for First Responders

Digital forensics

Modern-day Robin Hood or Moral Disengagement: Understanding the Justification for Criminal Computer Activity

wentieth century has become known as the &quot;Information Revolution&quot; (United Natio... more wentieth century has become known as the &quot;Information Revolution&quot; (United Nations, 1999). Information technology now touches almost every aspect of life and has become the backbone for telecommunications, finance, governments, health care, and education (Gattiker &amp; Kelly, 1997; Littman, 1997; Rapalus, 1997; United Nations, 1999). Entire infrastructures have been built to support information technology (i.e., highspeed network backbones, fiber optics, etc.) and advances in information technology such as the Internet have effectively erased economic borders and introduced the concept of the &quot;Global Community&quot; (Flohr, 1995; United Nations, 1999). The Information Revolution has also has brought with it some unique social, moral, and legal problems. As with other advances, the staggering growth of information Moral Disengagement 3 technology has outpaced society&apos;s ability to govern, and possibly understand its implications (Denning, 1998; Howard, 1997; Mizrach, 1997; Parker, 199

File Hound: A Forensics Tool for First Responders

Dfrws, 2005

Since the National Institute of Justice (NIJ) released their Electronic Crime Needs Assessment fo... more Since the National Institute of Justice (NIJ) released their Electronic Crime Needs Assessment for State and Local Law Enforcement study results in 2001, several critical strides have been made in improving the tools and training that state and local law enforcement organizations have access to. One area that has not received much attention is the computer crime first responder. File Hound, a "field analysis" software program for law enforcement first responders developed at Purdue University, is currently used internationally by over 40 law enforcement agencies. It has been successfully used in several cases ranging from child pornography to fraud.

Download

Self-reported online child pornography behavior: A psychological analysis

Limited research has been conducted on the differences between those individuals who view, downlo... more Limited research has been conducted on the differences between those individuals who view, download, or share online child pornography (CP) from those who do not. Using Bandura's theory of reciprocal determinism, the current study tested whether Internet CP-users differed from non-CP users in their personality characteristics. 307 respondents completed an online survey: 277 were classified as non-CP users, and 30 were classified as CP users. Statistical analyses revealed a relationship between higher scores on exploitive-manipulative amoral dishonesty (EMAD) traits, lower scores on internal moral choice (IV), and the viewing of child pornography. Furthermore, the study suggests women are engaging in Internet CP consumption more often than previously suggested. Implications and limitations of the findings are discussed and suggestions for future research are presented.

Download

A social learning theory and moral disengagement analysis of criminal computer behavior: An exploratory study

This study was exploratory and examined the characteristics of individuals engaged in computer cr... more This study was exploratory and examined the characteristics of individuals engaged in computer criminal activity. It was predicted that individuals who had engaged in illicit computer activity would have higher rates of differential association, differential reinforcement, and moral disengagement than non-criminals. It was also hypothesized that the combination of differential association, differential reinforcement, and moral disengagement better predict criminal computer behavior than either variable alone. In Phase 1 of the study, a comparative analysis was conducted on demographic data from 132 computer and general criminals. In phases 2 and 3, 112 Internet participants, and 36 general criminals participants completed the Computer Crime Index & Social Learning Questionnaire and the Paulhus Deception Scale (Paulhus, 1998). The hypotheses regarding differential association, differential reinforcement, and moral disengagement were supported. However, contrary to the predictions, the reduced model consisting of moral disengagement and differential association better predict criminal computer behavior. Additional exploratory analyses and the implications for future research are also discussed.

Download

Preparing IAS graduates to recognize and manage complexity

Proceedings of the 8th ACM SIGITE conference on Information technology education, 2007

Graduates entering the field of Information Assurance and Security (IAS) will be faced with many ... more Graduates entering the field of Information Assurance and Security (IAS) will be faced with many complex, ill-defined challenges. To be successful, IAS professionals will need to be able to solve complex, ill-defined problems that reflect the nature of the security risks, threats, and vulnerabilities that await them. Hence, a significant challenge facing educators is how to prepare professionals to recognize and manage complexity. Frequently, class assignments and problem activities are selected without complete understanding regarding the efficacy of the activities to increase students' understanding of the principles being taught. This paper will examine attributes of complex problems in the context of information assurance and security and proceed to analysis of how to teach complexity in IAS.

Download

Ultrablock Forensic Card Reader

Journal of Digital Forensic Practice, 2006

Download

Does Profiling Make Us More Secure?

IEEE Security & Privacy Magazine, 2012

P rofiling means making predic- tions about likely user behavior based on collected characteristi... more P rofiling means making predic- tions about likely user behavior based on collected characteristics and activities. Shari Lawrence Pfleeger and Marc Rogers brought together a group of researchers from a variety of disciplines to discuss whether profiling and prediction actually make us secure. Michael Losavio: "Profiling" is a loaded term and something we should clarify as we go through this discussion. Sal Stolfo: That's why I like to call it "behavior-based security" or "human user behavior analysis. " Shari Lawrence Pfleeger: There are clear examples of where this kind of profiling-user behavior analysisis very helpful, examples of where it's sort of creepy, examples of where it might be illegal or unethical, and everything in between. This roundtable addresses what we're doing, what are or should be its limits-legal, ethical, mathematical-and when it's most useful. With all of this in mind, what's the scientific basis for profiling? Masooda Bashir: It is based on the assumption that we all have stable personality traits. Profiling also assumes that once we hit a certain age, we have a stable personality and characteristics that can be used to predict our later behaviors and therefore past behavior is used to predict future behavior. Marc Rogers: There are two types of profiling: clinical, which is based on personal observations and anecdotal evidence, and statistical, which is based on large datasets. So we have to consider the art versus the science. Losavio: It becomes controversial when profilers use characteristics like race and ethnicity.

Download

Self-reported computer criminal behavior: A psychological analysis

Digital Investigation, 2006

The current research study replicated a study by Rogers et al. (Rogers M, Smoak ND, Liu J. Self-r... more The current research study replicated a study by Rogers et al. (Rogers M, Smoak ND, Liu J. Self-reported criminal computer behavior: a big-5, moral choice and manipulative exploitive behavior analysis. Deviant Behavior 2006;27:1-24) and examined the psychological characteristics, moral choice, and exploitive manipulative behaviors of self-reported computer criminals and non-computer criminals. Seventy-seven students enrolled in an information technology program participated in the web-based study. The results of the study indicated that the only significant variable for predicting criminal/deviant computer behavior was extraversion. Those individuals self-reporting criminal computer behavior were significantly more introverted than those reporting no criminal/deviant computer behavior. This finding is contrary to the findings of the previous study. The current study confirmed that the four psychometric instruments were reliable for conducting research in the field of criminal/deviant computer behavior. The impact of the findings on the field of digital forensic investigations is discussed as well as possible reasons for the apparent contradiction between the two studies.

Download

Self-reported Deviant Computer Behavior: A Big-5, Moral Choice, and Manipulative Exploitive Behavior Analysis

Deviant Behavior, 2006

The current study examined differences between individuals self-reporting computer-related devian... more

Does deviant pornography use follow a Guttman-like progression?

Computers in Human Behavior, 2013

Abstract This study investigated whether deviant pornography use followed a Guttman-like progress... more Abstract This study investigated whether deviant pornography use followed a Guttman-like progression in that a person transitions from being a nondeviant to deviant pornography user. In order to observe this progression, 630 respondents from Survey Sampling International’s (SSI) panel Internet sample completed an online survey assessing adult-only, bestiality, and child pornography consumption. Respondents’ “age of onset” for adult pornography use was measured to determine if desensitization occurred in that individuals who engaged in adult pornography at a younger age were more likely to transition into deviant pornography use. Two hundred and 54 respondents reported the use of nondeviant adult pornography, 54 reported using animal pornography, and 33 reported using child pornography. The child pornography users were more likely to consume both adult and animal pornography, rather than just solely consuming child pornography. Results suggested deviant pornography use followed a Guttman-like progression in that individuals with a younger “age of onset” for adult pornography use were more likely to engage in deviant pornography (bestiality or child) compared to those with a later “age of onset”. Limitations and future research suggestions are discussed.

Computer Forensics: Meeting the Challenges of Scientific Evidence

Research Advances in Digital Forensics, 2005

This paper explores the three main criteria for admissibility of scientific evidence in the U.S. ... more This paper explores the three main criteria for admissibility of scientific evidence in the U.S. Court Systems (Federal and State): reliability, peer review, and acceptability. 1 The current tools used in the field of computer forensics are compared against these criteria. If the tools do not meet the requirements, the expert may be restricted from presenting materials from those tools and casting doubt on the scientific credibility of computer forensics. The ability to determine the reliability and validity of the tools derived from scientific theory are posited as possible first steps to increase the likelihood of digital evidence being admissible in the U.S. Court System. A trusted third party certification model is discussed as one possible approach to addressing some of the issues raised regarding the current state of computer forensic tools.

Download

The Psychology of Cyber-Terrorism

Terrorists, Victims and Society

... for the attacks and the choice of victims shifts to technology, networks and computer systems... more ... for the attacks and the choice of victims shifts to technology, networks and computer systems. Unfortunately, the popular media are guilty of misusing the term &amp;#x27;cyber-terrorism&amp;#x27;. Cyber-terrorism is not merely the act of attacking some mili-tary or government information system. ...

Detecting Social Engineering

IFIP — The International Federation for Information Processing

This paper focuses on detecting social engineering attacks perpetrated over phone Unes. Current m... more This paper focuses on detecting social engineering attacks perpetrated over phone Unes. Current methods for deaUng with social engineering attacks rely on security policies and employee training, which fail because the root of the problem, people, are still involved. Our solution relies on computer systems to analyze phone conversations in real time and determine if the caller is deceiving the receiver. The technologies employed in the proposed Social Engineering Defense Architecture (SEDA) are in the proof-of-concept phase but are, nevertheless, tractable. An important byproduct of this work is the generation of real-time signatures, which can be used in forensic investigations.

Download

Gap Analysis: Judicial Experience and Perception of Electronic Evidence

Journal of Digital Forensic Practice, 2006

ABSTRACT A gap exists where digital forensics bridges computer science and judicial process. What... more ABSTRACT A gap exists where digital forensics bridges computer science and judicial process. Whatever the results of digital forensics analysis, the analyst must be prepared to present and defend that analysis in court. A survey of state general jurisdiction judges found that most had little or no electronic evidence tendered in their cases, those that did saw few challenges to that electronic evidence and most expected to see the use of such evidence increase in the coming years. But most judges had little or minimal training in handling ...

The role of criminal profiling in the computer forensics process

Computers & Security, 2003

... He argues that, in the case of dealing with unique or specific crimes such as ... Computer fo... more

Computer forensics: the need for standardization and certification

International Journal of Digital Evidence, 2004

This paper is a call for standardization and certification for the computer forensics field. It p... more This paper is a call for standardization and certification for the computer forensics field. It presents an overview of some of the more serious issues in the maturing discipline of computer forensics and explores three areas within the legal system where computer forensics is most likely to be questioned: search and seizure, expert qualifications, and analysis and preservation. One problem area identified that needs to be addressed sooner, as opposed to later, is the lack of standards and certification. The paper examines the need for standardization and certification by analyzing federal and state court cases (criminal and civil) and concludes with suggestions for dealing with some of the issues raised. 1 Computer forensics is defined throughout the paper as: the use of an expert to preserve, analyze, and produce data from volatile and non-volatile media storage. This is used to encompass computer and related media that may be used in conjunction with a computer.

Download

Forensically Sound Retrieval and Recovery of Images from GPU Memory

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, 2015

This paper adopts a method to retrieve graphic data stored in the global memory of an NVIDIA GPU.... more This paper adopts a method to retrieve graphic data stored in the global memory of an NVIDIA GPU. Experimentation shows that a 24-bit TIFF formatted graphic can be retrieved from the GPU in a forensically sound manner. However, like other types of Random Access Memory, acquired data cannot be verified due to the volatile nature of the GPU memory. In this work a Color Pattern Map Test is proposed to reveal the relationship between a graphic and its GPU memory organization. The mapping arrays derived from such testing can be used to visually restore graphics stored in the GPU memory. Described ‘photo tests’ and ‘redo tests’ demonstrate that it is possible to visually restore a graphic from the data stored in GPU memory. While initial results are promising, more work is still needed to determine if such methods of data acquisition within GPU memory can be considered forensically sound.

Marc Rogers

Uploads

Papers by Marc Rogers

Log In