Thesis (Ph. D.)--Virginia Polytechnic Institute and State University, 1990. / Vita. Abstract. Includes bibliographical references (leaves 93-107). Also available via the Internet.

No description available.

Memory forensics (or memory analysis) is a relatively new approach to digital forensics that deals exclusively with the acquisition and analysis of volatile system memory. Because each function performed by an operating system must utilize system memory, analysis of this memory can often lead to a treasure trove of useful information for forensic analysts and incident responders. Today’s forensic investigators are often subject to large case backlogs, and incident responders must be able to quickly identify the source and cause of security breaches. In both these cases time is a critical factor. Unfortunately, today’s memory analysis tools can take many minutes or even hours to perform even simple analysis tasks. This problem will only become more prevalent as RAM prices continue to drop and systems with very large amounts of RAM become more common. Due to the volatile nature of data resident in system RAM it is also desirable for investigators to be able to access non-volatile copies of system RAM that may exist on a device’s hard drive. Such copies are often created by operating systems when a system is being suspended and placed into a power safe mode. This dissertation presents work on improving the speed of memory analysis and the access to non-volatile copies of system RAM. Specifically, we propose a novel memory analysis framework that can provide access to valuable artifacts orders of magnitude faster than existing tools. We also propose two new analysis techniques that can provide faster and more resilient access to important forensic artifacts. Further, we present the first analysis of the hibernation file format used in modern versions of Windows. This work allows access to evidence in non-volatile copies of system RAM that were not previously able to be analyzed. Finally, we propose future enhancements to our memory analysis framework that should address limitations with the current design. Taken together, this dissertation represents substantial work towards advancing the field of memory forensics.

FundaÃÃo de Amparo à Pesquisa do Estado do Cearà / Esta pesquisa empreende uma anÃlise das prÃticas que atualizam o culto a Santa Marciana, no distrito de Planalto, municÃpio de Arneiroz, CearÃ. Marciana à um caso caracterÃstico de canonizaÃÃo espontÃnea, conceito de Paul Zumthor para definir o fenÃmeno pelo qual certos indivÃduos sÃo considerados santos e se tornam alvo de devoÃÃo sem o aval da Igreja CatÃlica. A partir do pressuposto de que a performance à um lugar privilegiado de articulaÃÃo da memÃria social, a pesquisa investiga as prÃticas corporais e cerimoniais articuladas pela populaÃÃo de Planalto no sentido de atualizar e perpetuar esse culto. Entendendo que as imagens evocadas do passado servem para legitimar a ordem social presente, busca explicitar os sentidos imbricados no esforÃo da comunidade de Planalto para manter viva a fà em Marciana. / This study presents and analyses the performances related to the cult of Saint Marciana in Planalto, Arneiroz, CearÃ. Marciana is a typical case of spontaneous canonization as Paul Zumthor defines the phenomenon by which certain individuals are considered saints and receive worship without the official recognition of the Catholic Church. Assuming that performance is a privileged place to articulate social memory, the research investigates the ceremonial and bodily practices through which people at Planalto update this cult. Understanding that evoked images of the past can legitimize the present social order, the research speculates on the meanings implied in the communityÂs effort to keep the cult of Marciana alive.

Indelible is a performance and dance research project. It has three outcomes or pathways, presented on DVD-ROM, via which the user-reader can experience multi-modal perspectives on remembering, memory, and representing performative ideas, events and actions. These pathways are video, writing and interactive and together they form a series of hypermedia framings by which the corporeal and philosophical underpinnings of the project are witnessed. The research is considered to be practice-led, in which my practice consists of choreographic strategies, physical actions, media-based processes, and writing. Within these core representations I have sought to confront the methodological and theoretical paradox affecting performance makers electing to recontextualise their work beyond live processes. How might the absence or disappearance of a so-called live work contribute to the overall design and representational practices underlying the outcomes? In this sense the three pathways that comprise Indelible generate a complex network of artistic, scholarly, poetic, and methodological layerings or enfoldings in which the user-reader is presented with possibilities for experiencing the vital subjectivity and inherent fallibility of memory and remembering. (For complete abstract open dopcument)