Forensic Science and Technology Commons^™

A Comparative Analysis Of Protein And Peroxidase Blood Enhancement Reagents Following Laundering And Their Impact On Dna Recovery, Gabrielle Hartley, Claire L. Glynn

Forensic Science Publications

Blood is a commonly encountered biological fluid in criminal investigations concerning a violent incident, and visual traces of the fluid on a suspect’s clothing can be diminished through laundering. This study aims to analyze the effects of laundering and the application of commercially available blood enhancement reagents commonly used to improve visualization of dilute bloodstains and their impact on DNA recovery. Enhancement reagents Hungarian Red, Coomassie Blue, Amido Black, luminol, Bluestar® Forensic Magnum, and aqueous Leuco Crystal Violet (LCV) were used to enhance human blood on cotton, polyester, denim, and wool following laundering. DNA was extracted from these samples using …

Legislative Requirements For Cyber Peacekeeping, Nikolay Akatyev, Joshua I. James

Journal of Digital Forensics, Security and Law

Cyber Peacekeeping strives for the prevention, mitigation and cessation of cyber and physical conflicts. The creation of a Cyber Peacekeeping organization, however, has major legal and political implications. In this work we review current international legislation applicable for functions of Cyber Peacekeeping. Specifically, we analyze prominent works which contribute to definitions, law and ethics regulating cyber conflicts from the perspective of the creation of a CPK organization. Legislative and terminological foundations are analyzed and adopted from current practice. Further, this work analyzes guiding principles of global organizations such as ITU IMPACT, INTERPOL and regional organizations such as NATO and the …

Forensic State Acquisition From Internet Of Things (Fsaiot): A General Framework And Practical Approach For Iot Forensics Through Iot Device State Acquisition, Christopher S. Meffert, Devon R. Clark, Ibrahim Baggili, Frank Breitinger

Electrical & Computer Engineering and Computer Science Faculty Publications

IoT device forensics is a difficult problem given that manufactured IoT devices are not standardized, many store little to no historical data, and are always connected; making them extremely volatile. The goal of this paper was to address these challenges by presenting a primary account for a general framework and practical approach we term Forensic State Acquisition from Internet of Things (FSAIoT). We argue that by leveraging the acquisition of the state of IoT devices (e.g. if an IoT lock is open or locked), it becomes possible to paint a clear picture of events that have occurred. To this end, …

Breaking Into The Vault: Privacy, Security And Forensic Analysis Of Android Vault Applications, Xiaolu Zhang, Ibrahim Baggili, Frank Breitinger

Electrical & Computer Engineering and Computer Science Faculty Publications

In this work we share the first account for the forensic analysis, security and privacy of Android vault applications. Vaults are designed to be privacy enhancing as they allow users to hide personal data but may also be misused to hide incriminating files. Our work has already helped law enforcement in the state of Connecticut to reconstruct 66 incriminating images and 18 videos in a single criminal case. We present case studies and results from analyzing 18 Android vault applications (accounting for nearly 220 million downloads from the Google Play store) by reverse engineering them and examining the forensic artifacts …

Range Of Detection For Proteins And Dna From Fingerprints On Fired And Unfired Cartridge Casings, Stacey-Ann R. Sterling

Student Theses

Cartridges and spent cartridge casings can be probative pieces of evidence. Unfortunately due to a combination of factors such as exposure to high temperatures and initially low amounts of biological material on the surface, DNA testing so far has been mostly unsuccessful for these items. Typing other marker systems, such as protein polymorphisms, on the same biological evidence would add power of discrimination. To explore this option we developed a DNA-protein trypsin-based co-extraction method that was optimized for unfired and fired cartridges. Various sample wet and dry collection methods and multiple metal casings, such as aluminum, nickel, steel, and brass …

Optimizing A Method For Simultaneous Recovery Of Proteins And Dna From Fingerprints, Steven Kranes

Student Theses

DNA testing on touched objects is a valuable tool in forensic investigations, but DNA is usually present in low amounts, causing poor STR typing results. For touch DNA evidence, there is a clear need for additional individualization, especially for highly probative samples. This could be achieved by testing genetically variable proteins. The goal of this project was to develop a DNA/protein co-extraction method to facilitate DNA and protein testing on the same evidence item. Existing DNA extraction methods were carefully adjusted to allow for downstream mass spectrometry analysis. Initial experiments on saliva and fingerprints placed on glass suggested that trypsin …

Digital Anti-Forensics: An Implementation And Examination, Stephanie Dachs

Student Theses

The rise of computer use and technical adeptness by the general public in the last two decades are undeniable. With greater use comes a greater possibility for misuse, evidenced by today’s incredible number of crimes involving computers as well as the growth in severity from that of cyber hooliganism to cyber warfare. Although frequently utilized for privacy and security purposes, the vast range of anti-forensic techniques has contributed to the ability for hackers and criminals to obstruct computer forensic investigations.

Understanding how anti-forensics may alter important and relevant data on an electronic device will prove useful for the success and …

The Effect Of Fabric Type And Laundering Conditions On The Detection Of Semen Stains, Tyler G. Schlagetter, Claire L. Glynn

Forensic Science Publications

There has been little research into the effect of fabric type and different laundering conditions on the ability to detect semen stains on washed fabrics. This study aimed to investigate three potential factors affecting semen identification on laundered clothing: fabric type, water temperature during washing, and whether the stain was dry at the time of washing. Following laundering, semen stains on four fabric types (cotton, polyester, denim, and wool) were examined and tested with three common methods used to detect semen; screening with an alternate light source, acid phosphatase press test, and histological staining of spermatazoa. It was determined that …

Species Identification Of Necrophagous Insect Eggs Based On Amino Acid Profile Differences Revealed By Direct Analysis In Real Time-High Resolution Mass Spectrometry, Justine E. Giffen, Jennifer Y. Rosati, Cameron M. Longo, Rabi A. Musah

Publications and Research

The colonization of decomposing remains by necrophagous insects such as blow flies is of forensic importance because the progression through the various stages of insect development can be correlated to time of death. The ability to infer this information hinges on accurate determination of the fly species that are associated with the entomological evidence collected. This evidence can include eggs, larvae, pupae, and puparial casings. Determination of the egg’s identity is particularly challenging because the eggs of multiple species are morphologically very similar. We report here that the species identity of fly eggs can be determined from their chemical fingerprint …

The Advanced Spectroscopic Analysis Of Organic Gunshot Residue And Explosives, Jennifer M. Leonard

Dissertations, Theses, and Capstone Projects

With the prevalence of shooting cases and terrorist attacks/or threats that plague the current state of the criminal justice system, it is of paramount importance to be able to detect, identify and interpret the presence of gunshot residue or explosives material. This concern is seen in law enforcement agencies and the media throughout the United States and abroad.

Currently, the typical method of analyzing gunshot residue in most crime laboratories serves to identify the inorganic constituents of the primer residue, namely lead, barium and antimony. However, it is possible that the organic matter from the propellant could provide different information …

Detection Of Cathinone And Mephedrone In Plasma By Lc-Ms/Ms Using Standard Addition Quantification Technique, Theron W. Ng-A-Qui

Student Theses

Designer drugs are structural analogs of Drug Enforcement Agency (DEA) Schedule I and II substances. They are synthesized to mimic the effects of illegal drugs of abuse and to bypass the provisions of drug regulations. Despite the increased availability of designer drugs, few studies have focused on specific analytical extraction techniques for their detection and quantification in biological samples. Solid phase extraction (SPE) is the most commonly used technique for sample preparation. The purpose of this study is to evaluate the extraction efficiency of the various SPE columns with different sorbent materials for two designer drugs, cathinone and mephedrone in …

Bayesian Approach To Toolmark Analysis, Antonio W. Del Valle

Student Theses

Statistical analysis of toolmarks using frequentist methods can be problematic for assorted reasons. Thus, in order to analyze toolmarks whilst avoiding these issues, a Bayesian approach is taken. Specifically for this thesis we discuss the computation of a specific Likelihood Ratio for toolmark comparisons. This Bayesian based approach involves using data already at hand in conjunction with a probability model in order to establish an estimate for its “value”, i.e. the “weight of evidence”. Making the calculations to obtain a Likelihood Ratio is very cumbersome and time consuming. Also many commercial software packages hide the process and underlying assumptions that …

Exploring Digital Evidence With Graph Theory, Imani Palmer, Boris Gelfand, Roy Campbell

Annual ADFSL Conference on Digital Forensics, Security and Law

The analysis phase of the digital forensic process is the most complex. The analysis phase remains very subjective to the views of the forensic practitioner. There are many tools dedicated to assisting the investigator during the analysis process. However, they do not address the challenges. Digital forensics is in need of a consistent approach to procure the most judicious conclusions from the digital evidence. The objective of this paper is to discuss the ability of graph theory, a study of related mathematical structures, to aid in the analysis phase of the digital forensic process. We develop a graph-based representation of …

Case Study: A New Method For Investigating Crimes Against Children, Hallstein Asheim Hansen, Stig Andersen, Stefan Axelsson, Svein Hopland

Annual ADFSL Conference on Digital Forensics, Security and Law

Investigations of crimes against children are often complex, both in terms of the varied and large amount of digital technology encountered and the offensive nature of the crimes. Such cases are numerous, large, and prioritised, requiring digital forensics competence. Earlier digital forensics was considered and treated as a typical forensic science like fingerprint analysis, performed in a laboratory isolated from the investigative team. This decoupled way of working has proved to be both inefficient and error prone.

At the Digital Forensic Unit of Oslo Police District we have developed a new way of working that addresses many of the problems …

Downstream Competence Challenges And Legal/Ethical Risks In Digital Forensics, Michael M. Losavio, Antonio Losavio

Annual ADFSL Conference on Digital Forensics, Security and Law

Forensic practice is an inherently human-mediated system, from processing and collection of evidence to presentation and judgment. This requires attention to human factors and risks which can lead to incorrect judgments and unjust punishments.

For digital forensics, such challenges are magnified by the relative newness of the discipline and the use of electronic evidence in forensic proceedings. Traditional legal protections, rules of procedure and ethics rules mitigate these challenges. Application of those traditions better ensures forensic findings are reliable. This has significant consequences where findings may impact a person's liberty or property, a person's life or even the political direction …

Digital Forensics Tool Selection With Multi-Armed Bandit Problem, Umit Karabiyik, Tugba Karabiyik

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital forensics investigation is a long and tedious process for an investigator in general. There are many tools that investigators must consider, both proprietary and open source. Forensics investigators must choose the best tool available on the market for their cases to make sure they do not overlook any evidence resides in suspect device within a reasonable time frame. This is however hard decision to make, since learning and testing all available tools make their job only harder. In this project, we define the digital forensics tool selection for a specific investigative task as a multi-armed bandit problem assuming that …

Detecting Deception In Asynchronous Text, Fletcher Glancy

Annual ADFSL Conference on Digital Forensics, Security and Law

Glancy and Yadav (2010) developed a computational fraud detection model (CFDM) that successfully detected financial reporting fraud in the text of the management’s discussion and analysis (MDA) portion of annual filings with the United States Securities and Exchange Commission (SEC). This work extends the use of the CFDM to additional genres, demonstrates the generalizability of the CFDM and the use of text mining for quantitatively detecting deception in asynchronous text. It also demonstrates that writers committing fraud use words differently from truth tellers.

Understanding Deleted File Decay On Removable Media Using Differential Analysis, James H. Jones Jr, Anurag Srivastava, Josh Mosier, Connor Anderson, Seth Buenafe

Annual ADFSL Conference on Digital Forensics, Security and Law

Digital content created by picture recording devices is often stored internally on the source device, on either embedded or removable media. Such storage media is typically limited in capacity and meant primarily for interim storage of the most recent image files, and these devices are frequently configured to delete older files as necessary to make room for new files. When investigations involve such devices and media, it is sometimes these older deleted files that would be of interest. It is an established fact that deleted file content may persist in part or in its entirety after deletion, and identifying the …

Development Of A Professional Code Of Ethics In Digital Forensics, Kathryn C. Seigfried-Spellar, Marcus Rogers, Danielle M. Crimmins 2184089

Annual ADFSL Conference on Digital Forensics, Security and Law

Academics, government officials, and practitioners suggest the field of digital forensics is in need of a professional code of ethics. In response to this need, the authors developed and proposed a professional code of ethics in digital forensics. The current paper will discuss the process of developing the professional code of ethics, which included four sets of revisions based on feedback and suggestions provided by members of the digital forensic community. The final version of the Professional Code of Ethics in Digital Forensics includes eight statements, and we hope this is a step toward unifying the field of digital forensics …

Fast Filtering Of Known Png Files Using Early File Features, Sean Mckeown, Gordon Russell, Petra Leimich

Annual ADFSL Conference on Digital Forensics, Security and Law

A common task in digital forensics investigations is to identify known contraband images. This is typically achieved by calculating a cryptographic digest, using hashing algorithms such as SHA256, for each image on a given media, comparing individual digests with a database of known contraband. However, the large capacities of modern storage media, and increased time pressure on forensics examiners, necessitates that more efficient processing mechanisms be developed. This work describes a technique for creating signatures for images of the PNG format which only requires a tiny fraction of the file to effectively distinguish between a large number of images. Highly …