An Amino Acid Model for Latent Fingerprints on Porous Surfaces*

Abstract: Analytical standards are needed in latent fingerprint detection for research and development as well as for quality control in routine work because normal fingerprints are too varied for comparison studies and tests. One way is to create latent fingerprints. For the amino acid sensitive detection method this can be achieved by coating test items with an amino acid solution using a modified commercial office bubble jet printer. Besides low costs, fast and easy preparation, the main advantage of a bubble jet printer is that the amino acid loading per area on the test item can be calculated by weighing the cartridge on a balance. This opens the possibility to determine the deviation for every printing series. The reproducibility of prints in a printing series made by one cartridge has a deviation of 2–16% and of prints made by different cartridges 20–25%.     

Stress and Deception in Speech: Evaluating Layered Voice Analysis*

Abstract: This study was designed to evaluate commonly used voice stress analyzers—in this case the layered voice analysis (LVA) system. The research protocol involved the use of a speech database containing materials recorded while highly controlled deception and stress levels were systematically varied. Subjects were 24 each males/females (age range 18–63 years) drawn from a diverse population. All held strong views about some issue; they were required to make intense contradictory statements while believing that they would be heard/seen by peers. The LVA system was then evaluated by means of a double blind study using two types of examiners: a pair of scientists trained and certified by the manufacturer in the proper use of the system and two highly experienced LVA instructors provided by this same firm. The results showed that the “true positive” (or hit) rates for all examiners averaged near chance (42–56%) for all conditions, types of materials (e.g., stress vs. unstressed, truth vs. deception), and examiners (scientists vs. manufacturers). Most importantly, the false positive rate was very high, ranging from 40% to 65%. Sensitivity statistics confirmed that the LVA system operated at about chance levels in the detection of truth, deception, and the presence of high and low vocal stress states.     

Are reality monitoring differences between truthful and deceptive autobiographical accounts affected by standardisation for word-count and the presence of others?

Although a number of methods have been proposed to control for word-count differences between truthful and deceptive accounts, there is no uniformity amongst researchers using the Reality Monitoring (RM) criteria as to when, why or how to standardise for word-count differences. Another factor that also has received little attention in the literature is whether the number of others present when a person is providing an account alters the lexical profile of accounts such that RM scores are affected. To investigate these issues, 62 autobiographical statements, 31 truthful and 31 deceptive, were generated under 3 conditions, no person present, 1 and 2 persons present, and were analysed before and after standardisation for word-count and duration. Results showed that the criteria successfully discriminated between truthful and deceptive accounts when no attempt to control for word-count was made and, to a lesser extent, when accounts were standardised for duration; however, they failed to discriminate after accounts had been standardised for length. The presence of others did not affect the ability to distinguish between truthful and deceptive accounts. The results highlight the difficulties involved in developing normative standardisation criteria which could be used in the field to classify individual or small numbers of cases.     

Leveraging virtual machine introspection with memory forensics to detect and characterize unknown malware using machine learning techniques at hypervisor

The Virtual Machine Introspection (VMI) has emerged as a fine-grained, out-of-VM security solution that detects malware by introspecting and reconstructing the volatile memory state of the live guest Operating System (OS). Specifically, it functions by the Virtual Machine Monitor (VMM), or hypervisor. The reconstructed semantic details obtained by the VMI are available in a combination of benign and malicious states at the hypervisor. In order to distinguish between these two states, the existing out-of-VM security solutions require extensive manual analysis. In this paper, we propose an advanced VMM-based, guest-assisted Automated Internal-and-External (A-IntExt) introspection system by leveraging VMI, Memory Forensics Analysis (MFA), and machine learning techniques at the hypervisor. Further, we use the VMI-based technique to introspect digital artifacts of the live guest OS to obtain a semantic view of the processes details. We implemented an Intelligent Cross View Analyzer (ICVA) and implanted it into our proposed A-IntExt system, which examines the data supplied by the VMI to detect hidden, dead, and dubious processes, while also predicting early symptoms of malware execution on the introspected guest OS in a timely manner. Machine learning techniques are used to analyze the executables that are mined and extracted using MFA-based techniques and ascertain the malicious executables. The practicality of the A-IntExt system is evaluated by executing large real-world malware and benign executables onto the live guest OSs. The evaluation results achieved 99.55% accuracy and 0.004 False Positive Rate (FPR) on the 10-fold cross-validation to detect unknown malware on the generated dataset. Additionally, the proposed system was validated against other benchmarked malware datasets and the A-IntExt system outperforms the detection of real-world malware at the VMM with performance exceeding 6.3%.     

Detection and Classification of Ignitable Liquid Residues Using a Fluorescence‐Based Vapor‐Sensitive Microsphere Array*

Abstract: This paper describes the application of microsphere vapor sensing arrays to the detection of ignitable liquid (IL) vapors as both pure vapors and as residues (ILRs) on simulated fire debris samples. The temporal fluorescence response profile of the microsphere array generated a reproducible pattern unique to each analyte that could be used to classify subsequent sensor responses. This system, together with a support vector machine pattern recognition algorithm, was used to address several different IL and ILR classification scenarios. High classification accuracy (98%) was maintained over more than 200 vapor responses and the array was able to identify ILs when presented to the pattern classification algorithm within a dataset containing 11 other volatile compounds. Both burned and unburned IL treated samples were classified correctly greater than 97% of the time. These results indicate that microsphere vapor sensing arrays may be useful for the rapid identification of ILs and ILRs.     

犯罪现场生物检材的发现、提取策略

在改进现场生物检材的发现和提取技术的同时,也要进行理论创新和体系构建,才能够更好地指导实践。全局的观点、具体案件具体分析和犯罪现场重建对于现场勘查中有效地发现、提取和利用生物检材是十分重要的。     

Investigations into Enhancing Yersinia pestis Cells Viability following Environmental Sampling for Forensic Analysis

Following an intentional or accidental bio-warfare agent (BWA) release, environmental sample analysis is absolutely critical to determine the extent of contamination. When dealing with nonspore forming BWA (e.g., Yersinia pestis), retention of cell viability is central to such analyses. Even though significant advances have been achieved in DNA sequencing technologies, a positive identification of BWAs in environmental samples must be made through the ability of cells to form colony-forming units upon culturing. Inability to revive the cells between collection and analysis renders such studies inconclusive. Commercial kits designed to preserve the viability of pathogens contained within clinical samples are available, but many of them have not been examined for their ability to preserve samples containing suspected BWAs. The study was initiated to examine the applicability of commercial solutions aiding in retention of Y. pestis viability in samples stored under nonpermissive temperatures, that is, 40 and 37°C. While none of the tested solutions sustained cell viability at 40°C, the results show five out of 17 tested preservatives were capable of supporting viability of Y. pestis at 37°C.     

对赋予看守所侦查权的深层思考

赋予看守所侦查权,使其获得侦查主体的资格,实际上是公安机关内部对侦查权的再次分配和完善。这既能使看守所深挖犯罪工作有法可依,又能充分整合和利用侦查资源,提高公安机关打击刑事犯罪的整体效能。     

呼吸线长(RLL)在评图中的应用

心理生理测谎技术经历了一个从生理指标体系逐渐建立,到测试方法日趋完善的进程。而呼吸线长作为心理生理测谎技术中的一个指标是霍华德·特姆博士首次提出的,后来呼吸线长便成为用于计算呼吸反应强度的生理数据。呼吸线长就是一种测量发生在特定时间内呼吸活动的反应强度的方法,在测量呼吸线长过程中,一个更好的选择就是利用计算机进行测量。