Education and Training in Forensic Intelligence: a New Challenge

From recent calls for positioning forensic scientists within the criminal justice system, but also policing and intelligence missions, this paper emphasizes the need for the development of educational and training programs in the area of forensic intelligence, It is argued that an imbalance exists between perceived and actual understanding of forensic intelligence by police and forensic science managers, and that this imbalance can only be overcome through education. The challenge for forensic intelligence education and training is therefore to devise programs that increase forensic intelligence awareness, firstly for managers to help prevent poor decisions on how to develop information processing. Two recent European courses are presented as examples of education offerings, along with lessons learned and suggested paths forward. It is concluded that the new focus on forensic intelligence could restore a pro-active approach to forensic science, better quantify its efficiency and let it get more involved in investigative and managerial decisions. A new educational challenge is opened to forensic science university programs around the world: to refocus criminal trace analysis on a more holistic security problem solving approach.

Development of a systematic computer vision-based method to analyse and compare images of false identity documents for forensic intelligence purposes-Part I: acquisition, calibration and validation issues

Following their detection and seizure by police and border guard authorities, false identity and travel documents are usually scanned, producing digital images. This research investigates the potential of these images to classify false identity documents, highlight links between documents produced by a same modus operandi or same source, and thus support forensic intelligence efforts. Inspired by previous research work about digital images of Ecstasy tablets, a systematic and complete method has been developed to acquire, collect, process and compare images of false identity documents. This first part of the article highlights the critical steps of the method and the development of a prototype that processes regions of interest extracted from images. Acquisition conditions have been fine-tuned in order to optimise reproducibility and comparability of images. Different filters and comparison metrics have been evaluated and the performance of the method has been assessed using two calibration and validation sets of documents, made up of 101 Italian driving licenses and 96 Portuguese passports seized in Switzerland, among which some were known to come from common sources. Results indicate that the use of Hue and Edge filters or their combination to extract profiles from images, and then the comparison of profiles with a Canberra distance-based metric provides the most accurate classification of documents. The method appears also to be quick, efficient and inexpensive. It can be easily operated from remote locations and shared amongst different organisations, which makes it very convenient for future operational applications. The method could serve as a first fast triage method that may help target more resource-intensive profiling methods (based on a visual, physical or chemical examination of documents for instance). Its contribution to forensic intelligence and its application to several sets of false identity documents seized by police and border guards will be developed in a forthcoming article (part II).

Image processing of false identity documents for forensic intelligence

Forensic intelligence has recently gathered increasing attention as a potential expansion of forensic science that may contribute in a wider policing and security context. Whilst the new avenue is certainly promising, relatively few attempts to incorporate models, methods and techniques into practical projects are reported. This work reports a practical application of a generalised and transversal framework for developing forensic intelligence processes referred to here as the Transversal model adapted from previous work. Visual features present in the images of four datasets of false identity documents were systematically profiled and compared using image processing for the detection of a series of modus operandi (M.O.) actions. The nature of these series and their relation to the notion of common source was evaluated with respect to alternative known information and inferences drawn regarding respective crime systems. 439 documents seized by police and border guard authorities across 10 jurisdictions in Switzerland with known and unknown source level links formed the datasets for this study. Training sets were developed based on both known source level data, and visually supported relationships. Performance was evaluated through the use of intra-variability and inter-variability scores drawn from over 48,000 comparisons. The optimised method exhibited significant sensitivity combined with strong specificity and demonstrates its ability to support forensic intelligence efforts.

Forensic intelligence framework. Part II: study of the main generic building blocks and challenges through the examples of illicit drugs and false identity documents monitoring

The development of forensic intelligence relies on the expression of suitable models that better represent the contribution of forensic intelligence in relation to the criminal justice system, policing and security. Such models assist in comparing and evaluating methods and new technologies, provide transparency and foster the development of new applications. Interestingly, strong similarities between two separate projects focusing on specific forensic science areas were recently observed. These observations have led to the induction of a general model (Part I) that could guide the use of any forensic science case data in an intelligence perspective. The present article builds upon this general approach by focusing on decisional and organisational issues. The article investigates the comparison process and evaluation system that lay at the heart of the forensic intelligence framework, advocating scientific decision criteria and a structured but flexible and dynamic architecture. These building blocks are crucial and clearly lay within the expertise of forensic scientists. However, it is only part of the problem. Forensic intelligence includes other blocks with their respective interactions, decision points and tensions (e.g. regarding how to guide detection and how to integrate forensic information with other information). Formalising these blocks identifies many questions and potential answers. Addressing these questions is essential for the progress of the discipline. Such a process requires clarifying the role and place of the forensic scientist within the whole process and their relationship to other stakeholders.

Detection and chemical profiling of medicine counterfeits by Raman spectroscopy and chemometrics

Raman spectroscopy combined with chemometrics has recently become a widespread technique for the analysis of pharmaceutical solid forms. The application presented in this paper is the investigation of counterfeit medicines. This increasingly serious issue involves networks that are an integral part of industrialized organized crime. Efficient analytical tools are consequently required to fight against it. Quick and reliable authentication means are needed to allow the deployment of measures from the company and the authorities. For this purpose a method in two steps has been implemented here. The first step enables the identification of pharmaceutical tablets and capsules and the detection of their counterfeits. A nonlinear classification method, the Support Vector Machines (SVM), is computed together with a correlation with the database and the detection of Active Pharmaceutical Ingredient (API) peaks in the suspect product. If a counterfeit is detected, the second step allows its chemical profiling among former counterfeits in a forensic intelligence perspective. For this second step a classification based on Principal Component Analysis (PCA) and correlation distance measurements is applied to the Raman spectra of the counterfeits.

A forensic perspective of the AFL investigation into peptides: an antidoping investigation case study.

BACKGROUND: The World Anti-Doping Agency (WADA) is introducing enhancements to doping investigations in its 2015 Code, which include improved sharing of information between antidoping organisations (including sporting bodies) and enhanced accountability of athlete support staff. These additions will improve the control of links between sports doping and organised crime. In February 2013 the Australian Crime Commission released a report that linked several professional sporting codes, professional athletes with links to organised crime, performance enhancing drugs and illicit substances. Following this report the Australian Football League (AFL) partnered the Australian national antidoping organisation to investigate peptide use in Australian football. METHODS: This review compared the model proposed by Marclay, a hypothetical model for anti-doping investigations that proposed a forensic intelligence and analysis approach, to use the forensic capabilities of the AFL investigation to test the model's relevance to an actual case. RESULTS: The investigation uncovered the use of peptides used to enhance athlete performance. The AFL investigation found a high risk of doping where athlete support staff existed in teams with weak corporate governance controls. A further finding included the need for the investigation to provide a timely response in professional team sports that were sensitive to the competition timing. In the case of the AFL the team was sanctioned prior to the finals as an interim outcome for allowing the risk of use of performance-enhancing substances. Doping violation charges are still being considered. DISCUSSION: Antidoping strategies should include the investigation of corporate officers in team doping circumstances, the mandatory recording of all athlete substance use during competition and training phases, the wider sharing of forensic intelligence with non-sporting bodies particularly law enforcement and collaboration between antidoping and sporting organisations in doping investigations. CONCLUSIONS: The AFL investigation illustrated the importance of the 2015 WADA Code changes and highlighted the need for a systematic use of broad forensic intelligence activities in the investigation of doping violations.

Integrating forensic information in a crime intelligence database

Since 2008, Intelligence units of six states of the western part of Switzerland have been sharing a common database for the analysis of high volume crimes. On a daily basis, events reported to the police are analysed, filtered and classified to detect crime repetitions and interpret the crime environment. Several forensic outcomes are integrated in the system such as matches of traces with persons, and links between scenes detected by the comparison of forensic case data. Systematic procedures have been settled to integrate links assumed mainly through DNA profiles, shoemarks patterns and images. A statistical outlook on a retrospective dataset of series from 2009 to 2011 of the database informs for instance on the number of repetition detected or confirmed and increased by forensic case data. Time needed to obtain forensic intelligence in regard with the type of marks treated, is seen as a critical issue. Furthermore, the underlying integration process of forensic intelligence into the crime intelligence database raised several difficulties in regards of the acquisition of data and the models used in the forensic databases. Solutions found and adopted operational procedures are described and discussed. This process form the basis to many other researches aimed at developing forensic intelligence models.

Source inference of exogenous gamma-hydroxybutyric acid (GHB) administered to humans by means of carbon isotopic ratio analysis: novel perspectives regarding forensic investigation and intelligence issues.

γ-Hydroxybutyric acid (GHB) is an endogenous short-chain fatty acid popular as a recreational drug due to sedative and euphoric effects, but also often implicated in drug-facilitated sexual assaults owing to disinhibition and amnesic properties. Whilst discrimination between endogenous and exogenous GHB as required in intoxication cases may be achieved by the determination of the carbon isotope content, such information has not yet been exploited to answer source inference questions of forensic investigation and intelligence interests. However, potential isotopic fractionation effects occurring through the whole metabolism of GHB may be a major concern in this regard. Thus, urine specimens from six healthy male volunteers who ingested prescription GHB sodium salt, marketed as Xyrem(®), were analysed by means of gas chromatography/combustion/isotope ratio mass spectrometry to assess this particular topic. A very narrow range of δ(13)C values, spreading from -24.810/00 to -25.060/00, was observed, whilst mean δ(13)C value of Xyrem(®) corresponded to -24.990/00. Since urine samples and prescription drug could not be distinguished by means of statistical analysis, carbon isotopic effects and subsequent influence on δ(13)C values through GHB metabolism as a whole could be ruled out. Thus, a link between GHB as a raw matrix and found in a biological fluid may be established, bringing relevant information regarding source inference evaluation. Therefore, this study supports a diversified scope of exploitation for stable isotopes characterized in biological matrices from investigations on intoxication cases to drug intelligence programmes.

Investigation of Postmortem Gases: A Forensic Imaging and Analytical Chemistry Approach

Background: Distinguishing postmortem gas accumulations in the body due to natural decomposition and other phenomena such as gas embolism can prove a difficult task using purely Multi-Detector Computed Tomography (MDCT). The Radiological Alteration Index (RAI) was created with the intention to be able to identify bodies undergoing the putrefaction process based on the quantity of gas detected within the body. The flaw in this approach is the inability to absolutely determine putrefaction as the origin of gas volumes in cases of moderate alteration. The aim of the current study is to identify percentage compositions of O2, N2, CO2 and the presence of gases such as H2 and H2S within these sampling sites in order to resolve this complication. Materials and methods: All cases investigated in our University Center of Legal Medicine are undergoing a Post-Mortem Computed Tomography (PMCT)-scan before external examination or autopsy as a routine investigation. In the obtained images, areas of gas were characterized as 0, I, II or III based on the amount of gas present according to the RAI (1). The criteria for these characterizations were dependent of the site of gas, for example thoracic and abdominal cavities were graded as I (1 - 3cm gas), II (3 - 5cm gas) and III (>5cm gas). Cases showing gaseous sites with grade II or III were selected for this study. The sampling was performed under CT-guidance to target the regions to be punctured. Luer-lock PTFE syringes equipped with a three-way valve and needles were used to sample the gas directly (2). Gaseous samples were then analysed using gas chromatography coupled to a thermal conductivity detector (GC-TCD). The components present in the samples were expressed as a percentage of the overall gas present. Results: Up to now, we have investigated more than 40 cases using our standardized procedure for sampling and analysis of gas. O2, N2 and CO2 were present in most samples. The following distributions were found to correlate to gas origins of gas embolism/scuba diving accidents, trauma and putrefaction: ? Putrefaction → O2 = 1 - 5%; CO2 > 15%; N2 = 10 - 70%; H2 / H2S / CH4 variable presence ? Gas embolism/Scuba diving accidents → O2 and N2= varying percentages; CO2 > 20% ? Trauma → O2 = small percentage; CO2 < 15%; N2 > 65% H2 and H2S indicated levels of putrefaction along with methane which can also gauge environmental conditions or conditions of body storage/burial. Many cases showing large RAI values (advanced alteration) did reveal a radiological diagnosis which was in concordance with the interpretation of the gas composition. However, in certain cases (gas embolism, scuba divers) radiological interpretation was not possible and only chemical gas analysis was found to lead to the correct diagnosis, meaning that it provided complementary information to the radiological diagnosis. Conclusion: Investigation of postmortem gases is a useful tool to determine origin of gas generation which can aid the diagnosis of the cause of death. Levels of gas can provide information on stage of putrefaction and help to perform essential medico-legal diagnosis such as vital gas embolism.

False identity documents forensic profiling: study of known-sources and cross-border seizures

A forensic intelligence process was conducted over cross-border seizures of false identity documents whose sources were partly known to be the same. Visual features of 300 counterfeit Portuguese and French identity cards seized in France and Switzerland were observed and integrated in a structured database developed to detect and analyze forensic links. Based on a few batches of documents known to come from common sources, the forensic profiling method could be validated and its performance evaluated. The method also proved efficient and complementary to conventional means of detecting connections between cases. Cross-border links were detected, highlighting the need for more collaboration. Forensic intelligence could be produced, uncovering the structure of counterfeits' illegal trade, the concentration of their sources and the evolution of their quality over time. In addition, two case examples illustrated how forensic profiling may support specific investigations. The forensic intelligence process and its results will underline the need to develop such approaches to support the fight against fraudulent documents and organized crime.

Profiling of counterfeit medicines by vibrational spectroscopy

Counterfeit pharmaceutical products have become a widespread problem in the last decade. Various analytical techniques have been applied to discriminate between genuine and counterfeit products. Among these, Near-infrared (NIR) and Raman spectroscopy provided promising results.The present study offers a methodology allowing to provide more valuable information fororganisations engaged in the fight against counterfeiting of medicines.A database was established by analyzing counterfeits of a particular pharmaceutical product using Near-infrared (NIR) and Raman spectroscopy. Unsupervised chemometric techniques (i.e. principal component analysis - PCA and hierarchical cluster analysis - HCA) were implemented to identify the classes within the datasets. Gas Chromatography coupled to Mass Spectrometry (GC-MS) and Fourier Transform Infrared Spectroscopy (FT-IR) were used to determine the number of different chemical profiles within the counterfeits. A comparison with the classes established by NIR and Raman spectroscopy allowed to evaluate the discriminating power provided by these techniques. Supervised classifiers (i.e. k-Nearest Neighbors, Partial Least Squares Discriminant Analysis, Probabilistic Neural Networks and Counterpropagation Artificial Neural Networks) were applied on the acquired NIR and Raman spectra and the results were compared to the ones provided by the unsupervised classifiers.The retained strategy for routine applications, founded on the classes identified by NIR and Raman spectroscopy, uses a classification algorithm based on distance measures and Receiver Operating Characteristics (ROC) curves. The model is able to compare the spectrum of a new counterfeit with that of previously analyzed products and to determine if a new specimen belongs to one of the existing classes, consequently allowing to establish a link with other counterfeits of the database.

Forensic science and the paradigm of quality

Due to various contexts and processes, forensic science communities may have different approaches, largely influenced by their criminal justice systems. However, forensic science practices share some common characteristics. One is the assurance of a high (scientific) quality within processes and practices. For most crime laboratory directors and forensic science associations, this issue is conditioned by the triangle of quality, which represents the current paradigm of quality assurance in the field. It consists of the implementation of standardization, certification, accreditation, and an evaluation process. It constitutes a clear and sound way to exchange data between laboratories and enables databasing due to standardized methods ensuring reliable and valid results; but it is also a means of defining minimum requirements for practitioners' skills for specific forensic science activities. The control of each of these aspects offers non-forensic science partners the assurance that the entire process has been mastered and is trustworthy. Most of the standards focus on the analysis stage and do not consider pre- and post-laboratory stages, namely, the work achieved at the investigation scene and the evaluation and interpretation of the results, intended for intelligence beneficiaries or for court. Such localized consideration prevents forensic practitioners from identifying where the problems really lie with regard to criminal justice systems. According to a performance-management approach, scientific quality should not be restricted to standardized procedures and controls in forensic science practice. Ensuring high quality also strongly depends on the way a forensic science culture is assimilated (into specific education training and workplaces) and in the way practitioners understand forensic science as a whole.