计算机犯罪现场中的取证技术及应用

科学有效地应用计算机取证技术是侦办计算机犯罪案件的关键。计算机取证也称为计算机法医学,是把计算机运行环境看作是犯罪现场,运用相关的辨析技术,对计算机犯罪行为进行法医式的解剖,从而搜寻确认罪犯及犯罪证据,并据此提起诉讼。从理论上讲,计算机取证人员能否找到犯罪证据取决于有关犯罪证据是否被覆盖。但从海量的数据里面寻找蛛丝马迹是一件非常费时费力的工作,侦查人员必须具备相应的专业技能,并按照科学合理的步骤来实施计算机犯罪现场中的取证工作。     

Impacts of increasing volume of digital forensic data: A survey and future research challenges

A major challenge to digital forensic analysis is the ongoing growth in the volume of data seized and presented for analysis. This is a result of the continuing development of storage technology, including increased storage capacity in consumer devices and cloud storage services, and an increase in the number of devices seized per case. Consequently, this has led to increasing backlogs of evidence awaiting analysis, often many months to years, affecting even the largest digital forensic laboratories. Over the preceding years, there has been a variety of research undertaken in relation to the volume challenge. Solutions posed range from data mining, data reduction, increased processing power, distributed processing, artificial intelligence, and other innovative methods. This paper surveys the published research and the proposed solutions. It is concluded that there remains a need for further research with a focus on real world applicability of a method or methods to address the digital forensic data volume challenge.     

The impact of force,time, and rotation on the transfer of ammonium nitrate: A reductionist approach to understanding evidence dynamics

Empirical studies evaluating the conditions under which the transfer of forensic materials occurs can provide contextual information and offer insight into how that material may have been transferred in a given scenario. Here, a reductionist approach was taken to assess the impact of force, time, and rotation on the transfer of an explosive compound. An Instron ElectroPuls E3000 material testing instrument was used to bring porous and non-porous surfaces adulterated with an ammonium nitrate into direct contact with a human skin analogue, controlling for the force of contact, duration of contact, and rotation applied during contact. Quantifiable amounts of ammonium nitrate were recovered from all of the recipient surfaces demonstrating that ammonium nitrate is readily transferred from one surface to another, even when contact occurs for a short duration with a relatively low force. More particulates were transferred from non-porous surfaces onto the human skin analogue, but the amount of ammonium nitrate transferred did not depend upon the force of contact, duration of contact, or the amount of rotation applied. However, when contact occurred and involved rotation, a greater transfer of ammonium nitrate was observed, compared to those contacts occurring without rotation being applied. This approach complements more commonly-used holistic experiments that test multiple interacting variables in a realistic setting by isolating these variables, allowing them to be examined individually. This can be utilised to better understand the individual impact that specific variables have on the transfer of trace evidence in relevant crime reconstruction contexts.     

规范语境下口供补强规则的解释图景

补强规则中的口供是指证明案件主要事实的被告人供述,补强证据是口供外的其他法定证据,与口供没有同源性。借鉴域外的“罪体标准”和“可信性标准”,根据补强对象的不同可将口供补强模式划分为罪体印证补强模式、隐蔽性证据(细节)补强模式和口供事实补强模式。我国不宜采口供事实补强模式,但可结合罪体印证补强模式与隐蔽性证据补强模式,将补强对象范围限定在“结果、犯罪行为和主体同一”三个客观面。三个客观面的补强意味着案件事实认定上的两大效果:一是可判断“犯罪已发生,该人有参与”,以降低假案冤案出现的风险;二是口供的可信性得到补强,所涵盖的主要犯罪事实可推断为真。然而“部分为真则全部为真”的推断逻辑仍不免产生质疑,但口供补强规则是定罪规则,并不排斥仅有口供仍可认定案件的部分事实或情节。当然,为确保口供补强规则适用的可靠性,可从口供合法性以及供述动机等外部保障机制再行审查。     

The Direct and Cross-Examination of Complainants and Defendants in Rape Trials: A Quantitative Analysis of Question Type

This paper is a post-hoc examination of the questioning used in six rape trials. Questions asked in the evidence-in-chief and cross-examination of six complainants and five defendants were coded into different categories. The categories comprised "open", "closed", "leading", "heavily-leading" and "yes/no" questions; questions that are known to increasingly constrain witness responses. Additionally, the frequency of "multiple questions", and questions with "negatives" and "double negatives" were recorded; questions that witnesses have difficulty understanding. Broadly speaking, results showed that questions in both evidence-in-chief and cross-examination were of a constraining nature and allowed witnesses little opportunity to provide complete accounts of alleged events, particularly during cross-examination. Multiple questions were frequent although negatives were comparatively rare, and double negatives did not occur. Similar forms of questioning were used for complainants as for defendants, although more questions were asked of complainants than defendants in cross-examination. The results are discussed in terms of the adverse influence of these questioning strategies on the completeness and accuracy of witnesses' responses, and the similarity in "combativeness" of lawyers in their examination of complainants and defendants.     

析视频监控在刑事诉讼中的作用

新的刑讼法颁布实施后对刑事技术提出了更高的要求,案件如何能破得了、诉得上、判得了、取证成了关键的环节。以往单一的现场痕迹物证显得相当无力,如何将现场痕迹物证与其他证据形成一个完整的证据链、在零口供的情况下将犯罪分子绳之以法是当前刑事技术发挥更大作用的突破口。视频资料是刑诉法规定的证据之一,其中视频监控资料与现场物证相结合就能为证实犯罪,案件审理提供完整的证据链。     

刑事证据视野中的盘查记录

盘查记录有《当场盘问、检查笔录》和《挡获经过（说明）》两种形式,它们在制作主体、形成时间空间、证明内容等方面具有不同特点,之所以如此,源于不同的警务机制。盘查记录的诉讼证据资格不应有任何疑问,这是因为在＂违法—犯罪二元追诉机制＂下,刑事立案前的查缉活动由负责日常警务的警察依法进行,由此获得的证据必然具有合法性。在证明作用方面,盘查记录因其证明内容的综合性、直接性和不可替代性,从而具备了很强的诉讼推进能力。从立法完善角度,应当统一盘查记录的形式,规范其制作方式和记载内容,明确盘查记录的诉讼证据地位。     

单位证明的误区——论刑事诉讼中的单位作证中如何避免滥用证人权利

单位作证是司法实践中的一种普遍现象,其中尤以单位证明的使用最为广泛和富有争议。本文阐述单位证明作为诉讼证据使用的现状,并对单位证明作合法性分析,解读因单位证明的使用导致单位滥用证人权利现象的产生及成因,提出如何规范和引导单位作证行为,限制和约束单位滥用证人权利,以解决单位作证中遇到的理论和实际问题。     

证据科学的走向：国际视野与中国语境——对证据问题研究领域的初步分析

我国证据科学的出现既是英美证据法学知识传统发展演变的结果,也是回应国内司法证明领域转型的一个重要发展。证据科学的本质是司法证明领域诸多学科之间在应对新的时代问题所作出的一系列变动和整合,而变动和整合的方向则取决于社会需求和司法证明领域多学科之间的竞争。我国司法证明领域的转型所提出的一系列问题为司法证明领域诸多学科的互动提供了最基本的动力。中国证据科学应该以这些问题为核心,在解决问题的过程中形成中国证据科学的基本格局。