Handwriting in Forensic Investigations

The process of automatic handwriting investigation in forensic science is described. The general scheme of a computer-based handwriting analysis system is used to point out at the basic problems of image enhancement and segmentation, feature extraction and decision-making. Factors that may compromise the accuracy of expert’s conclusion are underlined and directions for future investigations are marked.

Learning Strategies for Digital Tools

Learning a digital tool is often a hidden process. We tend to learn new tools in a bewildering range of ways. Formal, informal, structured, random, conscious, unconscious, individual, group strategies, may all play a part, but are often lost to us in the complex and demanding processes of learning. But when we reflect carefully on the experience, some patterns and surprising techniques emerge. This monograph presents the thinking of seven students in MDN642, Digital Pedagogies, where they have deliberately reflected on the mental processes at work as they learnt a digital technology of their choice.

Legislative and security requirements of audit material for evidentiary purpose

This research used the Queensland Police Service, Australia, as a major case study. Information on principles, techniques and processes used, and the reason for the recording, storing and release of audit information for evidentiary purposes is reported. It is shown that Law Enforcement Agencies have a two-fold interest in, and legal obligation pertaining to, audit trails. The first interest relates to the situation where audit trails are actually used by criminals in the commission of crime and the second to where audit trails are generated by the information systems used by the police themselves in support of the recording and investigation of crime. Eleven court cases involving Queensland Police Service audit trails used in evidence in Queensland courts were selected for further analysis. It is shown that, of the cases studied, none of the evidence presented was rejected or seriously challenged from a technical perspective. These results were further analysed and related to normal requirements for trusted maintenance of audit trail information in sensitive environments with discussion on the ability and/or willingness of courts to fully challenge, assess or value audit evidence presented. Managerial and technical frameworks for firstly what is considered as an environment where a computer system may be considered to be operating “properly” and, secondly, what aspects of education, training, qualifications, expertise and the like may be considered as appropriate for persons responsible within that environment, are both proposed. Analysis was undertaken to determine if audit and control of information in a high security environment, such as law enforcement, could be judged as having improved, or not, in the transition from manual to electronic processes. Information collection, control of processing and audit in manual processes used by the Queensland Police Service, Australia, in the period 1940 to 1980 was assessed against current electronic systems essentially introduced to policing in the decades of the 1980s and 1990s. Results show that electronic systems do provide for faster communications with centrally controlled and updated information readily available for use by large numbers of users who are connected across significant geographical locations. However, it is clearly evident that the price paid for this is a lack of ability and/or reluctance to provide improved audit and control processes. To compare the information systems audit and control arrangements of the Queensland Police Service with other government departments or agencies, an Australia wide survey was conducted. Results of the survey were contrasted with the particular results of a survey, conducted by the Australian Commonwealth Privacy Commission four years previous, to this survey which showed that security in relation to the recording of activity against access to information held on Australian government computer systems has been poor and a cause for concern. However, within this four year period there is evidence to suggest that government organisations are increasingly more inclined to generate audit trails. An attack on the overall security of audit trails in computer operating systems was initiated to further investigate findings reported in relation to the government systems survey. The survey showed that information systems audit trails in Microsoft Corporation's “Windows” operating system environments are relied on quite heavily. An audit of the security for audit trails generated, stored and managed in the Microsoft “Windows 2000” operating system environment was undertaken and compared and contrasted with similar such audit trail schemes in the “UNIX” and “Linux” operating systems. Strength of passwords and exploitation of any security problems in access control were targeted using software tools that are freely available in the public domain. Results showed that such security for the “Windows 2000” system is seriously flawed and the integrity of audit trails stored within these environments cannot be relied upon. An attempt to produce a framework and set of guidelines for use by expert witnesses in the information technology (IT) profession is proposed. This is achieved by examining the current rules and guidelines related to the provision of expert evidence in a court environment, by analysing the rationale for the separation of distinct disciplines and corresponding bodies of knowledge used by the Medical Profession and Forensic Science and then by analysing the bodies of knowledge within the discipline of IT itself. It is demonstrated that the accepted processes and procedures relevant to expert witnessing in a court environment are transferable to the IT sector. However, unlike some discipline areas, this analysis has clearly identified two distinct aspects of the matter which appear particularly relevant to IT. These two areas are; expertise gained through the application of IT to information needs in a particular public or private enterprise; and expertise gained through accepted and verifiable education, training and experience in fundamental IT products and system.

Dealing with the problem of cybercrime

Lack of a universally accepted and comprehensive taxonomy of cybercrime seriously impedes international efforts to accurately identify, report and monitor cybercrime trends. There is, not surprisingly, a corresponding disconnect internationally on the cybercrime legislation front, a much more serious problem and one which the International Telecommunication Union (ITU) says requires „the urgent attention of all nations‟. Yet, and despite the existence of the Council of Europe Convention on Cybercrime, a proposal for a global cybercrime treaty was rejected by the United Nations (UN) as recently as April 2010. This paper presents a refined and comprehensive taxonomy of cybercrime and demonstrates its utility for widespread use. It analyses how the USA, the UK, Australia and the UAE align with the CoE Convention and finds that more needs to be done to achieve conformance. We conclude with an analysis of the approaches used in Australia, in Queensland, and in the UAE, in Abu Dhabi, to fight cybercrime and identify a number of shared problems.

Fast content-based file type identification

Digital forensic examiners often need to identify the type of a file or file fragment based only on the content of the file. Content-based file type identification schemes typically use a byte frequency distribution with statistical machine learning to classify file types. Most algorithms analyze the entire file content to obtain the byte frequency distribution, a technique that is inefficient and time consuming. This paper proposes two techniques for reducing the classification time. The first technique selects a subset of features based on the frequency of occurrence. The second speeds classification by sampling several blocks from the file. Experimental results demonstrate that up to a fifteen-fold reduction in file size analysis time can be achieved with limited impact on accuracy.

Spatially offset Raman spectroscopy (SORS) for the analysis and detection of packaged pharmaceuticals and concealed drugs

Spatially offset Raman spectroscopy (SORS) is a powerful new technique for the non-invasive detection and identification of concealed substances and drugs. Here, we demonstrate the SORS technique in several scenarios that are relevant to customs screening, postal screening, drug detection and forensics applications. The examples include analysis of a multi-layered postal package to identify a concealed substance; identification of an antibiotic capsule inside its plastic blister pack; analysis of an envelope containing a powder; and identification of a drug dissolved in a clear solvent, contained in a non-transparent plastic bottle. As well as providing practical examples of SORS, the results highlight several considerations regarding the use of SORS in the field, including the advantages of different analysis geometries and the ability to tailor instrument parameters and optics to suit different types of packages and samples. We also discuss the features and benefits of SORS in relation to existing Raman techniques, including confocal microscopy, wide area illumination and the conventional backscattered Raman spectroscopy. The results will contribute to the recognition of SORS as a promising method for the rapid, chemically-specific analysis and detection of drugs and pharmaceuticals.

A aplicabilidade do planejamento estratégico no âmbito da perícia criminal federal

A necessidade de lidar com a identificação, o desenvolvimento, a formalização e a implementação de estratégias na Criminalística da Polícia Federal leva a questionamentos quanto à presença das condições necessárias para a implantação efetiva de um processo de planejamento estratégico institucional no ambiente considerado, e cuja resposta constituiu o objetivo da presente pesquisa. Neste contexto, combinam-se elementos ligados à natureza de organização pública da Criminalística e conceitos da Administração advindos do ambiente da iniciativa privada, assim como idiossincrasias da categoria profissional formada pelos peritos criminais. E, por ser o planejamento estratégico uma atividade insólita na organização, está sujeito a uma série de riscos e ameaças sobre os quais ainda não se tem conhecimento suficiente. Este estudo valeu-se de entrevistas semiestruturadas para avaliar, a partir da percepção dos próprios peritos criminais federais, se estão presentes fatores relacionados a três perspectivas de destaque identificadas na literatura acadêmica que poderiam viabilizar a implantação do planejamento estratégico na Criminalística da Polícia Federal. A primeira perspectiva se refere ao contexto mais amplo de organização, extraída a partir de uma abordagem integradora sobre o processo de formação da estratégia, que considera a visão como elemento agregador entre a racionalidade do planejamento estratégico formalizado e a participatividade geradora das estratégias emergentes. A segunda diz respeito ao contexto mais restrito que abrange as organizações do setor público, em que as dimensões de propriedade comum, financiamento público e controle político resultam em uma série de especificidades em relação ao setor privado. Por fim, a terceira perspectiva trata da caracterização da Criminalística como organização profissional, em que a tensão entre controle gerencial e autonomia profissional assume importância de destaque. O resultado, obtido a partir de análise interpretativa fenomenológica das entrevistas, revelou que a falta de um senso comum sobre a direção a ser seguida pela organização, associada ao baixo envolvimento dos peritos, constitui um fator condicionante do sucesso do planejamento estratégico na Criminalística.

A interiorização da Perícia Criminal Federal

A presente pesquisa versa sobre a interiorização da Perícia Criminal da Polícia Federal, que consiste num projeto de implantação de Unidades Técnico-Científicas para a execução de exames periciais em algumas cidades do interior do Brasil onde existem delegacias da Polícia Federal. Após a abertura das primeiras unidades no interior do país surgiram alguns resultados positivos. Entretanto, também surgiram situações indesejáveis e aspectos negativos que não foram previstos. O objetivo do estudo foi avaliar as vantagens e as desvantagens da instalação de Unidades Técnico-Científicas no interior do país para a administração da Perícia Criminal Federal. A pesquisa foi realizada com 59 chefes das unidades de perícia criminal das capitais dos estados e das unidades do interior. O estudo demonstrou que alguns resultados positivos foram alcançados, como a maior rapidez no atendimento e a melhor interação com o usuário do serviço de perícia criminal. Mas foi constatado também que existem problemas relacionados à infraestrutura, recursos humanos e materiais nas unidades do interior. Com o estudo foi possível concluir que a continuidade do programa de interiorização da perícia criminal federal depende preliminarmente da realização dos investimentos necessários em recursos humanos e materiais para que as unidades atualmente existentes possam ter as condições adequadas para seu funcionamento.

Desconcentração da polícia técnica e científica do Estado de Rondônia: uma política de administração pública

Este estudo apresenta como questão central: Por que desconcentrar o Departamento de Polícia Técnica e Científica com a criação e implantação de coordenadorias nas sub-regiões da Secretaria de Segurança Pública, Defesa e Cidadania do Estado de Rondônia? Para responder tal questão que norteia o presente estudo volta-se o enfoque para a gestão dos serviços praticados pelos órgãos de perícia técnica nas diversas regiões do Estado visando o princípio da eficiência e da produtividade, bem como do aspecto social dos órgãos de segurança pública, pois, em última análise, são estes os que deveriam agir em conjunto com a sociedade visando a garantia da aplicação da lei e da justiça a todos, com o objetivo de contribuir na gestão dos órgãos regionais, além de atender ao controle social pelo cidadão, com a criação de coordenadorias regionais naquela instituição. Como instrumento para coleta de dados optou-se pelo questionário com perguntas selecionadas sobre os conceitos dos temas abordados, e sobre as perspectivas de mudanças de formatação diferenciada da perícia no interior do estado aplicado através do fórum dos Peritos Criminais do Estado de Rondônia, via internet. Também foram realizadas pesquisas bibliográficas, documentais e a análise de dados populacionais, geográficos, de ocorrências policiais e de número de peritos. Os dados mostram que entre os profissionais da área existe um desconhecimento da distinção entre os conceitos de desconcentração e de descentralização. Apesar desse fato, as respostas apontam para a unanimidade com relação à necessidade de haver uma desconcentração do setor, que visa o reconhecimento das unidades regionais e a melhoria do trabalho produzido para a sociedade. Ao confrontar os dados referentes à área de atuação de cada uma das sub-regiões do Instituto de Criminalística, dentre as quais as unidades existentes e as desarticuladas (com área geográfica de atuação, população atingida e número de ocorrências realizadas por período de tempo escolhido), com os dados obtidos simultaneamente na sede fixada à capital do estado, ficou ainda mais clara a necessidade de desconcentração da perícia criminal no interior do estado, constatando-se a urgente e necessária criação de polos gestores em sintonia com o órgão central, desde que tal seja realizado como política pública.

A gestão de mudanças na perícia criminal federal: a implementação dos indicadores de complexidade

Este pesquisa, inserida no campo de estudo sobre mudanças organizacionais, buscou investigar como é realizada a gestão de mudanças na Criminalística da Polícia Federal. Para isso, partiu-se de um referencial teórico para a estruturação de categorias de análise essenciais para o estudo do tema, agrupadas em três dimensões: conteúdo da mudança, processo de implementação da mudança e contexto em que ocorreu a mudança. Dessa forma, essa pesquisa de caráter qualitativo avaliou o processo de gestão de mudança ocorrido por meio da implementação de indicadores de complexidade na Criminalística da Polícia Federal, à luz do modelo proposto por John P. Kotter para a implementação eficaz de mudanças nas organizações, considerando sua interação com as circunstâncias contextais prevalecentes. Para a coleta de dados foram utilizadas entrevistas semiestruturadas com os componentes do corpo gerencial e diretor da Criminalística, responsáveis pela condução do processo de implementação da mudança. A análise de documentos institucionais e a observação direta complementaram a coleta dos dados. Os resultados apontaram para uma significante concorrência dos fatores relacionados às três dimensões estudadas que impediu o alcance dos objetivos esperados com a mudança, destacando-se: a) aspecto negativo relacionado à própria natureza da mudança, que se enquadra no campo de avaliação de desempenho, questão polêmica que levanta muitas discussões; b) contexto organizacional desfavorável, por estar inserida em uma organização policial, com forte cultura disciplinar e punitiva; c) processo de gestão de mudança mal conduzido, de acordo com modelo teórico para a implementação eficaz de mudanças nas organizações proposto por Kotter (1995, 1997).

Tests of one Brazilian facial reconstruction method using three soft tissue depth sets and familiar assessors

Coordenação de Aperfeiçoamento de Pessoal de Nível Superior (CAPES)

Results of the GEP-ISFG collaborative study on an X-STR Decaplex

A collaborative work was carried out by the Spanish and Portuguese ISFG Working Group with a PCR multiplex for X chromosome STRs. Markers were selected among those described as polymorphic in humans and that have been used by some laboratories in forensics. Primers and various technical methods were investigated with the aim of optimizing a multiplex for the 10 selected X-STRs. Primer mix stock solutions were sent to the laboratories that were asked to analyse two female bloodstains, taking as reference the genetic profiles from 9947A, 9948 and NA3657 samples. In this work, we report the results obtained by 30 GEP-ISFG laboratories, using this Decaplex, as well as alternative technical conditions that also produced good results. © 2008 Elsevier B.V. All rights reserved.

Tests of one Brazilian facial reconstruction method using three soft tissue depth sets and familiar assessors

Facial reconstruction is a method that seeks to recreate a person's facial appearance from his/her skull. This technique can be the last resource used in a forensic investigation, when identification techniques such as DNA analysis, dental records, fingerprints and radiographic comparison cannot be used to identify a body or skeletal remains. To perform facial reconstruction, the data of facial soft tissue thickness are necessary. Scientific literature has described differences in the thickness of facial soft tissue between ethnic groups. There are different databases of soft tissue thickness published in the scientific literature. There are no literature records of facial reconstruction works carried out with data of soft tissues obtained from samples of Brazilian subjects. There are also no reports of digital forensic facial reconstruction performed in Brazil. There are two databases of soft tissue thickness published for the Brazilian population: one obtained from measurements performed in fresh cadavers (fresh cadavers' pattern), and another from measurements using magnetic resonance imaging (Magnetic Resonance pattern). This study aims to perform three different characterized digital forensic facial reconstructions (with hair, eyelashes and eyebrows) of a Brazilian subject (based on an international pattern and two Brazilian patterns for soft facial tissue thickness), and evaluate the digital forensic facial reconstructions comparing them to photos of the individual and other nine subjects. The DICOM data of the Computed Tomography (CT) donated by a volunteer were converted into stereolitography (STL) files and used for the creation of the digital facial reconstructions. Once the three reconstructions were performed, they were compared to photographs of the subject who had the face reconstructed and nine other subjects. Thirty examiners participated in this recognition process. The target subject was recognized by 26.67% of the examiners in the reconstruction performed with the Brazilian Magnetic Resonance Pattern, 23.33% in the reconstruction performed with the Brazilian Fresh Cadavers Pattern and 20.00% in the reconstruction performed with the International Pattern, in which the target-subject was the most recognized subject in the first two patterns. The rate of correct recognitions of the target subject indicate that the digital forensic facial reconstruction, conducted with parameters used in this study, may be a useful tool. (C) 2011 Elsevier Ireland Ltd. All rights reserved.

3D bloodstain pattern analysis: ballistic reconstruction of the trajectories of blood drops and determination of the centres of origin of the bloodstains

For crime scene investigation in cases of homicide, the pattern of bloodstains at the incident site is of critical importance. The morphology of the bloodstain pattern serves to determine the approximate blood source locations, the minimum number of blows and the positioning of the victim. In the present work, the benefits of the three-dimensional bloodstain pattern analysis, including the ballistic approximation of the trajectories of the blood drops, will be demonstrated using two illustrative cases. The crime scenes were documented in 3D, using the non-contact methods digital photogrammetry, tachymetry and laser scanning. Accurate, true-to-scale 3D models of the crime scenes, including the bloodstain pattern and the traces, were created. For the determination of the areas of origin of the bloodstain pattern, the trajectories of up to 200 well-defined bloodstains were analysed in CAD and photogrammetry software. The ballistic determination of the trajectories was performed using ballistics software. The advantages of this method are the short preparation time on site, the non-contact measurement of the bloodstains and the high accuracy of the bloodstain analysis. It should be expected that this method delivers accurate results regarding the number and position of the areas of origin of bloodstains, in particular the vertical component is determined more precisely than using conventional methods. In both cases relevant forensic conclusions regarding the course of events were enabled by the ballistic bloodstain pattern analysis.