Lawal, Damola, Gresty, David, Gan, Diane ORCID: 0000-0002-0920-7572 and Hewitt, Louise (2021) Have you been framed and can you prove it? In: 2021 44th International Convention on Information, Communication and Electronic Technology (MIPRO), Opatija, Croatia, 2021. IEEE Xplore . Institute of Electrical and Electronics Engineers (IEEE), Piscataway, New Jersey, pp. 1236-1241. ISBN 978-1665447614; 978-9532331011; 978-9532331011 ISSN 2623-8764 (Online) (doi:https://doi.org/10.23919/MIPRO52101.2021.9596889)

Preview

PDF (Abstract of conference paper) 43046_LAWAL_Have_you_been_framed_and_can_you_prove_it.pdf - Other Download (113kB) | Preview

Abstract

This work addresses the potential for a frameup attack through the use of a programmable USB e.g., a ‘Rubber Ducky’ to plant false evidence on someone else's computer. The aim is to determine who performed these actions, the human or the Rubber Ducky. Experiments were undertaken where a human interacted with a computer and a Rubber Ducky performed the same actions using identical computers, with identical baseline configurations, to detect differences in the artifacts left behind in each case. Forensics images generated from each experiment were analysed using forensics tools. Our findings pose the question can a programmable USB device be used to masquerade as a human, and can the forensic analyst or legal counsel make informed decisions about the provenance of any artifacts identified, as the expert may not be able to differentiate between the actions of the human user or the programmable USB, which could lead to a miscarriage of justice. This work alerts investigators and experts to the potential presence of a programmable USB device, and presents some artifacts that show that a programmable USB could have carried out these actions, which might prevent an innocent individual being wrongfully convicted of a crime they did not commit.

Item Type:	Conference Proceedings
Title of Proceedings:	2021 44th International Convention on Information, Communication and Electronic Technology (MIPRO), Opatija, Croatia, 2021
Uncontrolled Keywords:	forensics tools; programmable USB device; forensic analyst; human user; frameup attack; Rubber Ducky; identical computers; identical baseline configurations; image forensics; legal counsel; human computer interaction; miscarriage of justice
Subjects:	K Law > K Law (General) Q Science > QA Mathematics > QA75 Electronic computers. Computer science Q Science > QA Mathematics > QA76 Computer software
Faculty / School / Research Centre / Research Group:	Faculty of Engineering & Science Faculty of Engineering & Science > Internet of Things and Security Research Centre (ISEC) Faculty of Engineering & Science > School of Computing & Mathematical Sciences (CMS) Faculty of Liberal Arts & Sciences Faculty of Liberal Arts & Sciences > School of Law & Criminology (LAC)
Related URLs:	Publisher
Last Modified:	26 Jun 2023 11:17
URI:	http://gala.gre.ac.uk/id/eprint/43046

Actions (login required)

View Item

Downloads