• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.2
• /
• pp.193-206
• /
• 2024

In tandem with the advancements in the digital era, the significance of digital data has escalated, necessitating an increased focus on digital forensics investigations. However, the process of collecting and analyzing digital evidence faces significant challenges, such as the unidentifiability of damaged files due to issues like media corruption and anti-forensic techniques. Moreover, the technological limitations of existing tools hinder the recovery of damaged files, posing difficulties in the evidence collection process. This paper aims to propose solutions for the recovery of corrupted MS Office files commonly used in digital data creation. To achieve this, we analyze the structure of MS Office files in the OOXML format and present a novel approach to overcome the limitations of current recovery tools. Through these efforts, we aim to contribute to enhancing the quality of evidence collection in the field of digital forensics by efficiently recovering and identifying damaged data.

• Journal of Environmental Science International
• /
• v.33 no.4
• /
• pp.269-277
• /
• 2024

Scientific forensic techniques are used to verify environmental impact of groundwater pollution, surface water pollution, air pollution, noise, and vibration according to residents' complaints in connection with construction and civil engineering works. In this study, we investigated the contamination of groundwater and the lowering of the groundwater level in an area surrounding a tunnel excavation site for the Andong-Yeongdeok national road, using a forensic hydrogeological technique. We reviewed the groundwater level and water quality of well GW1 in the area surrounding the tunnel excavation site as well as tunnel construction information and then we analyzed the correlations among the obtained data. Before tunnel excavation, the water level of well GW1 was lower than the tunnel elevation. Considering the relationship between the precipitation, tunnel discharge, tunnel depth, and groundwater level of well GW1, the groundwater flowed from the tunnel to well GW1. Moreover, the tunnel discharge and groundwater levels were not related to each other. The pH of well GW1 was 8.4 before tunnel excavation. During excavation, the pH declined to 8.1-8.2 at the beginning, and increased to 8.8 at the end of the excavation. The fluorine concentration in well GW1 was 2.49 mg/L, 1.91-3.22 mg/L, and 1.7-2.67 mg/L, respectively, before, during, and after the excavation. The sulfate ion concentration was very high, over 2,000 mg/L, before and during the excavation; after the excavation, it was between 200 and 323 mg/L. Turbidity was 1.47, 10.5, and 4.51 NTU before, during, and after tunnel excavation, respectively. Therefore, the excavation of this tunnel is not related to the groundwater quality of well GW1.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.1
• /
• pp.103-114
• /
• 2024

In a situation where drone-related crimes continue to rise, research in drone forensics becomes crucial for preventing and responding to incidents involving drones. Conducting forensic analysis on flight record files stored internally is essential for investigating illegal activities. However, analyzing flight record files generated through the exclusive DUML protocol requires a deep understanding of the protocol's structure and characteristics. Additionally, a forensic analysis tool capable of handling cryptographic payloads and analyzing various drone models is imperative. Therefore, this study presents the methods and characteristics of flight record files generated by drones. It also explains the structure of the flight record file and the features of the DUML packet. Ultimately, we conduct forensic analysis based on the presented structure of the DUML packet and propose an extension forensic analysis system that operates more universally than existing tools, performing expanded syntactic analysis.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.5
• /
• pp.915-925
• /
• 2024

As non-face-to-face work increases due to the COVID-19 pandemic, companies have introduced collaboration tools to perform work without spatial constraints. The rapidly growing collaboration tool market continues to show high utilization rates even after the endemic due to the increase in demand for hybrid work that combines face-to-face and non-face-to-face work. The use of collaboration tools increases work efficiency, facilitates smooth collaboration, and increases data integration, generating various data. However, at the same time, it also increases the risk of exposure of corporate confidential information due to the possibility of external access by internal users. In response to this, an analysis method is needed to collect and acquire data during digital investigations targeting collaboration tools. In this paper, we identified local artifacts targeting JANDI, a collaboration tool in a Windows environment, and explained how to collect and analyze data through API reconstruction. Finally, we presented a digital forensic utilization method through scenario and chat room reconstruction.

• Journal of forensic and investigative science
• /
• v.2 no.2
• /
• pp.21-29
• /
• 2007

News from the media on sexual assaults to children committed by natural fathers doesn't attract social attention any more. The number of crimes related to Child Sexual Assault(CSA) is increasing every year in spite of the "Special Act on Prevention of Sexual Assault in Korea". The YoungNam District Sunflower Center for prevention of Child Sexual Assaults(SC-CSA) was established in Daegu, June 2005. The YoungNam District SC-CSA provides forensic evaluation of physical evidence, medical and psychological treatment for the victims less than 13 years of sexual assaults simultaneously. This study carried out 36 cases of CSA by kin reported to YoungNam District SC-CSA, among 180 cases in total until December 2006 since its opening. Most of the victims were girls (32 cases). 28 cases (78%) were indecent assaults (78%) and 8 cases (22%) were rapes. The assailants were overwhelmingly males (35 cases). The assailants of 21 cases (58.3%) were identified as the victims' natural fathers. The incident locations were victim's residence (31 cases, 86.1%) and the victims had been sexually assaulted regularly for many years (25 cases, 69.4%). Considering the above research, we can conclude that CSA committed by kin has specific characteristics. CSA is not a one-time incident, but consistently occurring crime. However, in 22 cases (61.1%), the victim's guardian didn't want to report about it or punish the assailants. As the assailants were natural fathers or relatives of the victims, the other family members probably thought it might be shameful to reveal their wrong doings and would lead to defamation of their family's reputation. The SC-CSA provides the counseling and medical treatment to the victims with the consent of the parents. Due to the guardians' misjudgment, the incident is sometimes not reported to the police. By not reporting the incident to the police, the assailant freely commits other crimes, which multiplies victims. The legal Act of supporting the management of the SC-CSA is still not regulated, so the stability of the SC-CSA is not guaranteed, yet. Even though it is obligatory to report incidents to the police, some cases are still not reported. Currently, there are three SC-CSA centers : in Seoul, in Daegu, and in Gwangju. More centers need to be established to diminish CSA cases in Korea.

• Korean Security Journal
• /
• no.44
• /
• pp.85-116
• /
• 2015

Found in 23 Dec 1953 to cope with illegal fishing of foreign ships and coastal guard duty, Korea Coast Guard was re-organized as an office under Ministry of Public Safety since the outbreak of sinking of passenger ship "Sewolho". In the course of re-organization, intelligence and investigation duty were transferred to Police Department except "Cases happened on the sea". But the definition of intelligence duty is vague and there are lots of disputes over the jurisdiction and range of activities. With this situation in consideration, the object of this study is to analyse legal and institutional characteristic of KCG Intelligence, to compare them to that of Police Department, foreign agencies like Japan Coast Guard and US Coast Guard, to expose the limit and to suggest solution. To summarize the conclusion, firstly, in the legal side, there is no legal basis on intelligence in [The Government Organization Act], no regulation for mission, weak basis in application act. Secondly, in the institutional side, stated in the minor chapter of [The Government Organization Act], 'the cases happened on sea' is a quite vague definition, while guard, safety, maritime pollution duty falls under 'on the sea' category, intelligence fell to 'Cases happened on the sea' causing coast guard duty and intelligence have different range. In addition, reduced organization and it's manpower led to ineffective intelligence activities. In the case of Police Department, there is definite lines on 'administration concerning public security' in [The Government Organization Act], specified the range of intelligence activities as 'collect, make and distribute information concerning public security' which made the range of main duty and intelligence identical. Japanese and US coast guards also have intelligence branch and performing activities appropriate for the main missions of the organizations. To have superiority in the regional sea, neighboring countries Japan and China are strengthening on maritime power, China has launched new coast guard bureau, Japan has given the coast guard officers to have police authority in the regional islands, and to support the objectives, specialized intelligence is organized and under development. To secure maritime sovereignty and enhance mission capability in maritime safety duty, it is strongly recommended that the KCG intelligence should have concrete legal basis, strengthen the organization and mission, reinforce manpower, and ensure specialized training administrative system.

• Journal of forensic and investigative science
• /
• v.1 no.1
• /
• pp.11-30
• /
• 2006

The preliminary investigative activities by the police officer play a critical role in identifying the cause of death in unnatural death investigations. The failure to secure the crime scene leads to the destruction of significant evidence, which results in the difficulty or impossibility to identify the cause of death. In order to prevent this jeopardizing crucial evidence, and to identify the level of preliminary investigation on the scene, this research is conducted and analyzed with questionnaires of 300 police first responders and 100 detectives. As a result, it was disclosed that there is a possibility for first responders to fail to ensure scene security, scene observation, and canvass interviews. Besides, when medical personnel have no choice but to contaminate the crime scene in order to save lives, it is necessary for them to take photos and to take proper actions before they enter the scene. The importance of scene-control education cannot be emphasized enough in order to prevent media from entering and destroying the evidence. Through research of actual conditions of unnatural death cases which occurred in Kyongbook Province for last five years, the statistics regarding a few different types of death were analyzed as follows. Evidence that homicide, suicide, accidental death, and disaster deaths have increased year by year. Therefore, it is deemed necessary for the government to take multilateral policies to reduce them, and for police to reinforce their investigative skills. Further, the insufficient number of autopsy facilities and forensic pathologists, only 13% of the deceased (1,237 cases) have had an autopsy conducted to identify the cause of death for last five years. The other, 87.3% (8,496 cases) of the deceased, were handled through simple postmortem examination. The significance of this percentage is that there is still the possibility not revealing the cause of unjust deaths. Therefore, it is necessary to furnish police agency with the reasonable amount of funding for autopsies and maintaining enough forensic pathologists.

• Journal of forensic and investigative science
• /
• v.2 no.1
• /
• pp.5-22
• /
• 2007

From the numerous social problems generated by the unbalanced social development and the social trend of belittling life overall, we found the causes of suicide getting worse in its seriousness day by day. In reality, the problem has been approached in a collateral level in contrast with other social problems. There have been an active involvement in studying the definition, causes and ways of prevention of suicide theoretically until now. However, different from other social problems, it is almost impossible to treat or fix the problem of suicide. Only ways to treat or fix the problem is when the suicide has ended in failure. Thus, this study intends to examine the suicide rate among the total accidents during the year 2005, perform the analyses on the actual causes according to the relations such as the means of suicide, occupation, age group, educational background, etc. In order to present a solution to the issue of suicide becoming serious each day. Among the total accidents in 2005, the suicide rate came out to be approximately 52.4%. Among the result, 52.4%, male with 69% resulted higher than female with 31%, which appears to be related to the social functions. While men tends to take more active(80%) means of suicide like jumping off, poison, hanging, etc., women tends to take more passive(60%) means of suicide like sleeping pills, slitting wrist, etc. In terms of the cause, pessimism, illness, denial, mental disorder, etc resulted more than 75%, and there were many cases of suicide after exhibiting the signs of depression. Also there were higher suicide rate of the unemployed engaged in direct labor with educational background lower than college level related to the pessimism regarding the family living cost. We were able to determine the recent increase in the suicidal tendency of the educated people higher than the college level and the retired people with depression caused by the sudden change in social status. Overall there are several reasons for suicide, however, in most cases the signs of depression were exhibited until the final suicide, which tells us the serious psychological problem of suicide. Assuming that the current development of suicide will continue in future, the result of this study will guide the corresponding social policies, be utilized in preparing the insurance or management at the national level dealing with the real social problems that are not just a conflict of an individual, but could spread like a fad and become much bigger than the present by the continuous support at the environmental, social and political levels, and be utilized as the basic data to establish the research plan.

• Journal of The Korean Association For Science Education
• /
• v.35 no.2
• /
• pp.313-323
• /
• 2015

The purpose of this study is to investigate the cognitive process of student's modeling on a modeling-emphasized argument-based general chemistry experiment. The participants were twenty-one freshman students. Six topics were carried out during the first semester and semi-structured interview was implemented at the end of the semester. Semi-structured interview questions were used to elicit elements of effective model, modeling strategies, difficulties that students have experienced during modeling, and resolving the difficulties that students have experienced during modeling. All student interview data were collected and transcribed. The results of this study are summarized as follows: (1) Elements of effective model were considered to be visual expression, persuasive explanation, and rhetorical structure. (2) Modeling strategies included arranging important keywords or writing the outline, and during the modeling process, students used various data, suggested data after reconstructing, suggested definitions and explanations of core concepts, used meta-cognition, and considering rhetorical structure. (3) Difficulties students have experienced during modeling could be categorized as lack of modeling strategy and understanding. (4) Resolving difficulties students have experienced during modeling could be categorized as modeling strategy and understanding. Students learn the strategy by feedback, modeling experience, evaluation of experimental report, models which they constructed previously and references, and the understanding of contents were achieved through arguments which occurred during classes and during the process of writing the experimental reports. These results suggest that when using modeling in teaching and learning, the argument-based learning strategy can be effective in enhancing students' modeling by helping them to understand meta-modeling with scientific concepts.

• Korean journal of communication and information
• /
• v.36
• /
• pp.399-422
• /
• 2006

Whether to reduce the current 'screen quota' for domestic films in conjunction with the FTA discussions between Korea and the United States is one of the hotly debated issues in Korea. Using Toulmin's Argumentation Model, this study attempts to trace the use of data and warrants for each pro and con claims as portrayed in newspaper editorial columns and to find its rhetorical significance. A total of 67 editorial columns were collected from 9 nationwide news dailies in Korea for the purpose. The rhetorical analysis of those articles showed that the major warrants used in each pro and con opinion were absent of the potential issues of the opponents, which inherently fails to invite rebuttals from the opposite sides. This conceptual wall in each argumentation models implies an inactive conversation and subsequent absence of clash between the pro and con argumentation fields. It is thus suggested for opinion writers to find more adequate evidences to support the data and warrants to hold persuasive power of their respective claims, ultimately to enhance the public discourse among citizens.