Evidence

The collection of evidence by the investigator or crime scene technician and its submission to the laboratory is a critical part of law enforcement. Insuring the integrity of that evidence is the responsibility of the same people. Rules governing standards and procedures for insuring the evidence integrity and chain of custody of requirements are the courts, investigative agency, and now non-governmentalorganizationslike ASCLD.This paper shows how laboratory accreditation is affecting the interaction of these groups.     

Validation studies of the ParaDNA® Intelligence System with artificial evidence items

Short tandem repeat (STR) profiling is one of the mostly used systems for forensic applications. In certain circumstances, STR profiling is time-consuming and costly, which potentially leads to delays in criminal investigations. LGC (Laboratory of the Government Chemist, UK) Forensics has developed a robust STR profiling platform called the ParaDNA^® Intelligence Test System which can provide early tactical intelligence and aid investigators in making informed decisions on sample prioritization for detection. Here, we validated the ParaDNA intelligence test for its application in forensic cases using a range of mock evidence items following guidelines set by the Scientific Working Group on DNA Analysis Methods (SWGDAM). Specifically, we tested the sensitivity and accuracy of the ParaDNA intelligence test, as well as the success rates for detecting mock samples and for use in case scenarios. Our findings demonstrate that the ParaDNA intelligence test generates useful DNA profiles, especially for samples such as blood, saliva, and semen that contain ample DNA, indicating the benefits of including ParaDNA as a prior step in forensic STR profiling pipelines.     

Guidelines for the identification of unknown samples for laboratories performing forensic analyses for chemical terrorism

Since the early 1990s, the FBI Laboratory has sponsored Scientific Working Groups to improve discipline practices and build consensus among the forensic community. The Scientific Working Group on the Forensic Analysis of Chemical, Biological, Radiological and Nuclear Terrorism developed guidance, contained in this document, on issues forensic laboratories encounter when accepting and analyzing unknown samples associated with chemical terrorism, including laboratory capabilities and analytical testing plans. In the context of forensic analysis of chemical terrorism, this guidance defines an unknown sample and addresses what constitutes definitive and tentative identification. Laboratory safety, reporting issues, and postreporting considerations are also discussed. Utilization of these guidelines, as part of planning for forensic analysis related to a chemical terrorism incident, may help avoid unfortunate consequences not only to the public but also to the laboratory personnel.     

Applying a forensic approach to incident response,network investigation and system administration using Digital Evidence Bags

This paper questions the current approach to forensic incident response and network investigations. Although claiming to be ‘forensic’ in nature it shows that the basic processes and mechanisms used in traditional computer forensics are rarely applied in the live incident investigation arena. This paper demonstrates how the newly proposed Digital Evidence Bag (DEB) storage format can be applied to a dynamic environment. A DEB is a universal container for digital evidence from any source. It allows the provenance to be recorded and continuity to be maintained throughout the life of the investigation. With a small amount of forethought a forensically rigorous approach can be applied to incident response, network investigations and system administration with minimal overhead.     

Investigation Delayed Is Justice Denied: Proposals for Expediting Forensic Examinations of Digital Evidence*

Abstract: There is an urgent need to reduce the growing backlog of forensic examinations in Digital Forensics Laboratories (DFLs). Currently, DFLs routinely create forensic duplicates and perform in‐depth forensic examinations of all submitted media. This approach is rapidly becoming untenable as more cases involve increasing quantities of digital evidence. A more efficient and effective three‐tiered strategy for performing forensic examinations will enable DFLs to produce useful results in a timely manner at different phases of an investigation, and will reduce unnecessary expenditure of resources on less serious matters. The three levels of forensic examination are described along with practical examples and suitable tools. Realizing that this is not simply a technical problem, we address the need to update training and establish thresholds in DFLs. Threshold considerations include the likelihood of missing exculpatory evidence and seriousness of the offense. We conclude with the implications of scaling forensic examinations to the investigation.     

论法庭科学实验室认可的特殊要求

本文从价值观、证据资格和优质法庭科学服务3个方面分析了法庭科学实验室认可特殊性的产生根源;分析和总结了ILAC和部分国家法庭科学实验室认可的特殊要求,给此项工作在我国的开展提供了借鉴。     

Digital Forensics as a Service: A game changer

How is it that digital investigators are always busy and still never have enough time to actually dig deep into digital evidence? In this paper we will explore the current implementation of the digital forensic process and analyze factors that impact the efficiency of this process. Next we explain how in the Netherlands a Digital Forensics as a Service implementation reduced case backlogs and freed up digital investigators to help detectives better understand the digital material.     

Cybercrime investigation in Finland

Nordic police cooperation concerning cybercrimes has been developed during the last few years, e.g. through the Nordic Computer Forensics Investigators (NCFI) and Nordplus training programmes. More empirical research is needed in order to enhance cybercrime investigation and address the training needs of police officers. There is a knowledge gap concerning organizational models for the police’s cybercrime investigation: How the function is organized, what the professional characteristics of the staff are and how to combine computer forensics with crime investigation? The purpose of this paper was to study the organization of cybercrime investigation in Finland. Data were collected by a questionnaire from all 11 local police districts and the National Bureau of Investigation in July–August 2014. In addition, six thematic interviews of cybercrime investigators were conducted in 2014. Three investigation models of computer integrity crimes were found: (1) Computer forensic investigators conduct the entire pre-trial examination, (2) Computer forensic investigators conduct only the computer forensics, and tactical investigation is done by an occasional investigator, (3) Computer forensic investigators conduct only the computer forensics and tactical investigation is centralized to designated investigators. The recognition of various organizational models and educational backgrounds of investigators will help to develop cybercrime investigation training.     

Implementation of a Blind Quality Control Program in a Forensic Laboratory

A blind quality control (QC) program was successfully developed and implemented in the Toxicology, Seized Drugs, Firearms, Latent Prints (Processing and Comparison), Forensic Biology, and Multimedia (Digital and Audio/Video) sections at the Houston Forensic Science Center (HFSC). The program was put into practice based on recommendations set forth in the 2009 National Academy of Sciences report and is conducted in addition to accreditation required annual proficiency tests. The blind QC program allows HFSC to test its entire quality management system and provides a real-time assessment of the laboratory’s proficiency. To ensure the blind QC cases mimicked real casework, the workflow for each forensic discipline and their evidence submission processes were assessed prior to implementation. Samples are created and submitted by the HFSC Quality Division to whom the expected answer is known. Results from 2015 to 2018 show that of the 973 blind samples submitted, 901 were completed, and only 51 were discovered by analysts as being blind QC cases. Implementation data suggests that this type of program can be employed at other forensic laboratories.     

The National Ballistics Imaging Comparison (NBIC) project

In response to the guidelines issued by the American Society of Crime Laboratory Directors/Laboratory Accreditation Board (ASCLD/LAB-International) to establish traceability and quality assurance in U.S. crime laboratories, a NIST/ATF joint project entitled National Ballistics Imaging Comparison (NBIC) was initialized in 2008. The NBIC project aims to establish a National Traceability and Quality System for ballistics identifications in crime laboratories within the National Integrated Ballistics Information Network (NIBIN) of the U.S. NIST Standard Reference Material (SRM) 2460 bullets and 2461 cartridge cases are used as reference standards. 19 ballistics examiners from 13 U.S. crime laboratories participated in this project. They each performed 24 periodic image acquisitions and correlations of the SRM bullets and cartridge cases over the course of a year, but one examiner only participated in Phase 1 tests of SRM cartridge case. The correlation scores were collected by NIST for statistical analyses, from which control charts and control limits were developed for the proposed Quality System and for promoting future assessments and accreditations for firearm evidence in U.S. forensic laboratories in accordance with the ISO 17025 Standard.     

法庭科学DNA实验室认可与质量控制

法庭科学DNA实验室认可是整个实验室认可活动的一个组成部分,是对法庭科学DNA实验室的质量管理水平和技术能力的一种国家及国际间的正式承认。本文从文件体系建立、测量溯源、方法的确认、能力验证、质量控制等5个方面,对DNA实验室在认可中存在的主要问题进行了分析,对法庭科学DNA实验室认可与质量控制进行了探讨。     

Clinical Laboratories Improvement Act program; granting and withdrawal of deeming authority to private nonprofit accreditation organizations and of CLIA exemption under state laboratory programs--HCFA. Final rule

This rule permits HCFA to approve or disapprove accreditation organizations and State laboratory programs and thereby determine that laboratories accredited by a HCFA-approved private, nonprofit accreditation organization are deemed to meet the requirements set forth in 42 CFR part 493 of the regulations, which implement section 353 of the Public Health Service Act (PHSA) or, in the case of State laboratory programs, are exempt from the requirements. Section 353 of the PHSA was enacted by the Clinical Laboratories Improvement Act of 1967 (CLIA '67) and was amended by the Clinical Laboratory Improvement Amendments of 1988 (CLIA).     

我国法庭科学实验室认可工作现状与存在的问题

本文介绍了我国法庭科学实验室认可活动的法律环境变迁和开展现状,并对当前认可工作中存在的主要问题进行了深入分析,在此基础上提出7项政策建议。     

Identifying background microbiomes in an evidence recovery laboratory: A preliminary study

16S rRNA profiling of bacterial communities may have forensic utility in the identification or association of individuals involved with criminal activities. Microbial profiling of evidence may, in the future, be performed within environments currently utilised for human DNA recovery, such as a forensic biology laboratory. It would be important to establish the background microbiome of such an environment to determine the potential presence of human or environmental microbial signatures to assist forensic scientists in the appropriate interpretation of target microbial communities. This study sampled various surfaces of an Evidence Recovery Laboratory (ERL) on three occasions including (a) before a monthly deep-clean, (b) immediately following the deep-clean, and (c) immediately after the laboratory’s use by a single participant for the purposes of routine item examinations. Microbial profiles were also generated for the involved participant and researcher for comparison purposes. Additionally, human nuclear DNA was profiled for each of the samples collected, using standard forensic profiling techniques, to provide a prospective link to the presence or absence of a background microbial signature within the ERL after its use. Taxonomic distributions across ERL samples revealed no consistent signature of any of the items sampled over time, however, major phyla noted within all ERL samples across the three timepoints were consistent with those found in human skin microbiomes. PCoA plots based on the Unweighted Unifrac metric revealed some clustering between participant microbial reference samples and surfaces of the ERL after use, suggesting that despite a lack of direct contact, and adherence to standard operating procedures (SOPs) suitable for human DNA recovery, microbiomes may be deposited into a forensic setting over time. The reference samples collected from the involved participant and researcher generated full STR profiles. Human DNA was observed to varying degrees in samples taken from the ERL across each of the sampling timepoints. There was no correlation observed between samples that contained or did not contain detectable quantities of human nuclear DNA and microbial profile outputs.     

Computer forensic timeline visualization tool

Computer Forensics is mainly about investigating crime where computers have been involved. There are many tools available to aid the investigator with this task. We have created a prototype of a new type of tool called CyberForensic TimeLab where all evidence is indexed by their time variables and plotted on a timeline. We believed that this way of visualizing the evidence allows the investigators to find coherent evidence faster and more intuitively. We have performed a user test where a group of people has evaluated our prototype tool against a modern commercial computer forensic tool and the results of this preliminary test are very promising. The results show that users completed the task in shorter time, with greater accuracy and with less errors using CyberForensic TimeLab. The subjects also experienced that the prototype were more intuitive to use and that it allowed them to easier locate evidence that was coherent in time.     

The current status of forensic science laboratory accreditation in Europe

Forensic science is gaining some solid ground in the area of effective crime prevention, especially in the areas where more sophisticated use of available technology is prevalent. All it takes is high-level cooperation among nations that can help them deal with criminality that adopts a cross-border nature more and more. It is apparent that cooperation will not be enough on its own and this development will require a network of qualified forensic laboratories spread over Europe. It is argued in this paper that forensic science laboratories play an important role in the fight against crime. Another, complimentary argument is that forensic science laboratories need to be better involved in the fight against crime. For this to be achieved, a good level of cooperation should be established and maintained. It is also noted that harmonization is required for such cooperation and seeking accreditation according to an internationally acceptable standard, such as ISO/IEC 17025, will eventually bring harmonization as an end result. Because, ISO/IEC 17025 as an international standard, has been a tool that helps forensic science laboratories in the current trend towards accreditation that can be observed not only in Europe, but also in the rest of the world of forensic science. In the introduction part, ISO/IEC 17025 states that "the acceptance of testing and calibration results between countries should be facilitated if laboratories comply with this international standard and if they obtain accreditation from bodies which have entered into mutual recognition agreements with equivalent bodies in other countries using this international standard." Furthermore, it is emphasized that the use of this international standard will assist in the harmonization of standards and procedures. The background of forensic science cooperation in Europe will be explained by using an existing European forensic science network, i.e. ENFSI, in order to understand the current status of forensic science in Europe better. The Council of Europe and the European Union approaches to forensic science will also be discussed by looking at the legal instruments and documents published by these two European organizations. Data collected from 52 European forensic science laboratories will be examined and findings will be evaluated from a quality assurance and accreditation point of view. The need for harmonization and accreditation in forensic science will be emphasized. The steps that should be taken at the European level for increasing and strengthening the role of European forensic science laboratories in the fight against crime will be given as recommendations in the conclusion.     

X—WaysForensics在电子数据司法鉴定中的应用

通过介绍几种常用的电子数据司法鉴定工具的发展概况和特点，并对X—WaysForensics的磁盘快照等功能，在电子数据司法鉴定工作中的应用进行了阐述。     

数字图像复原技术的原理及在刑事技术中的应用

目的介绍数字图像处理技术在刑事案件复原的应用,促进该技术的发展。方法利用数字算法、滤波、几何运算等计算机图像处理技术进行复原处理。结果对案件的隐含、残缺、微弱信息,模糊图像、变形物证复原及特征显现。结论刑事数字图像复原技术在刑事技术领域有了广阔的应用前景。     

Clinical Laboratory Improvement Act program fee collection--HCFA. Final rule with comment

This rule implements provisions of section 353 of Public Health Service Act (as amended by the Clinical Laboratory Improvement Amendments of 1988). Those provisions require laboratories to pay fees for issuance of registration certificates, certificates of waiver, certificates of accreditation, or certificates and to fund activities to determine compliance with the requirements established by the Department of Health and Human Services for laboratory testing. It also establishes the policy that laboratories licensed by and located in States with licensure programs approved by HHS may be exempt from the requirements of the Clinical Laboratory Improvement Amendments of 1988 (CLIA). This rule also establishes the methodology used to determine the amount of the fees charged for certificates of waiver, registration certificates, certificates of accreditation, or certificates and activities to establish application procedures and determine compliance with applicable certification requirements.     

计算机数字图像处理系统在刑侦领域中的应用

本文详细阐述图像处理系统的概况,包括图像处理应用软件、系统的图像采集和图像处理系统处理后的图像输出,并介绍了其在刑侦领域内的应用.