Premium Essay

Forensic Evidence in It

In:

Submitted By javajunkie
Words 22743
Pages 91
U.S. Department of Justice Office of Justice Programs National Institute of Justice

APR. 04

Special

REPORT

Forensic Examination of Digital Evidence: A Guide for Law Enforcement

U.S. Department of Justice Office of Justice Programs 810 Seventh Street N.W. Washington, DC 20531

John Ashcroft Attorney General Deborah J. Daniels Assistant Attorney General Sarah V. Hart Director, National Institute of Justice

This and other publications and products of the U.S. Department of Justice, Office of Justice Programs, National Institute of Justice can be found on the World Wide Web at the following site: Office of Justice Programs National Institute of Justice http://www.ojp.usdoj.gov/nij

APR. 04

Forensic Examination of Digital Evidence: A Guide for Law Enforcement

NCJ 199408

Sarah V. Hart Director

This document is not intended to create, does not create, and may not be relied upon to create any rights, substantive or procedural, enforceable at law by any party in any matter civil or criminal. Opinions or points of view expressed in this document represent a consensus of the authors and do not represent the official position or policies of the U.S. Department of Justice. The products, manufacturers, and organizations discussed in this document are presented for informational purposes only and do not constitute product approval or endorsement by the U.S. Department of Justice. This document was prepared under Interagency Agreement #1999–IJ–R–094 between the National Institute of Justice and the National Institute of Standards and Technology, Office of Law Enforcement Standards. The National Institute of Justice is a component of the Office of Justice Programs, which also includes the Bureau of Justice Assistance, the Bureau of Justice Statistics, the Office of Juvenile Justice and Delinquency Prevention, and the Office for Victims of Crime.

Similar Documents

Free Essay

Forensic Evidence

...Forensic Science is the application of science to the law. In recent years the use of forensic science has become increasingly necessary to help with criminal and civil investigations. Although forensic evidence is admissible in court one must keep in mind how that evidence made its way to the court system. I will take you through the process. For there to be admissible evidence for a court case there must be physical evidence which would have been collected at a crime scene therefore there must have been some kind of crime committed. A crime with physical evidence doesn’t necessarily mean something violent but it can be. Theft, arson, car accident and murder are just a few examples of what a crime can be. The process begins when the crime has been committed, to the officers arriving on the scene, to surveying the scene, collecting the evidence, submitting it to the lab, submitting it as evidence and finally the acceptance of the evidence. When a call is sent out regarding a possible crime and the first officer arrives on scene it is that officer’s obligation to do a few things as precise as possible: 1. seek medical attention for those who may need it, 2. arrest or detain any perpetrators, and 3. secure the crime scene. Securing the crime scene is extremely important because you want to be able to retrieve as much evidence as possible. By securing the crime scene you are blocking off the area from unauthorized personnel. You want to keep the foot traffic to...

Words: 1263 - Pages: 6

Premium Essay

Forensic Evidence Analysis

...Forensic Evidence Analysis of The Innocence Project data shows that there were errors in the forensic science in 63% of their cases (Cole, 2012). Forensic science is solely based on subjective opinion, and with few processes being backed scientifically, are usually unreliable. Hair comparisons, fingerprint comparisons, bite-mark analysis, shoe print comparisons and voice comparisons have been pointed out as having poor accuracy. Another problem comes with expert testimony, as testifying on a technique with an unknown accuracy should hold no value. The Innocence Project data stated that 61% of 153 cases had invalid expert testimony. Phrases such as “consistent” and “similar” are often used during forensic expert testimony, and while they hold no inherent meaning, they are seen as very valuable to a jury. (Cole, 2012). Forensics in the case The cases against Jessie Miskelley and Damien Echols and Jason Baldwin seem to be circumstantial on hearsay. Not a lot of forensic...

Words: 424 - Pages: 2

Premium Essay

Cognitive Bias In Forensic Evidence

...found the defendant guilty, as a result of irrefutable forensic evidence. That person will now been convicted and held in custody until a sentence is determined, which will either be life in prison or the death penalty. Although this type of scenario is appalling, there have been all too many similar circumstances happening within the last decade. Due to these instances, the field of forensic science has been undergoing serious scrutiny and questioning, based on the reliability of forensic methods used to deliver accurate exonerations and convictions....

Words: 1057 - Pages: 5

Premium Essay

Cis 4203 Forensics Discussion 1 - Overview of Evidence

...Discussion 1 - Overview of Evidence Due Sunday by 11:59pm Available after May 16 at 12am Learning Objectives and Outcomes * Determine the appropriate digital forensic analysis technique for a given scenario. Assignment Requirements Review the information in the text sheet entitled “Overview of Evidence and Digital Forensic Analysis Techniques,” which describes different types of digital forensic analysis techniques, such as disk forensics and e-mail forensics. Based on the information in the text sheet and in your assigned reading for this week, discuss the following scenarios and determine which type of forensic analysis technique(s) should be used, and why:   1. The Federal Trade Commission disclosed a law suit against unknown credit card fraudsters. Over 15 companies were being run by "money mules," people who transfer stolen goods or money from one country to another. The money mules were recruited via a spam e-mail message. E-mail forensics—The study of the source and content of e-mail as evidence. E-mail forensics includes the process of identifying the sender, recipient, date, time, and origination location of an e-mail message. You can use e-mail forensics to identify harassment, discrimination, or unauthorized activities. There is also a body of laws that deal with retention and storage of e-mails that are specific to certain fields, such as financial and medical. Disk forensics—The process of acquiring and analyzing information stored on physical storage...

Words: 951 - Pages: 4

Free Essay

Forensic Testimony in Court

...Examine Forensic Testimony Forensic evidence has become more and more important in the court case for proving the guilt or innocence of a criminal defendant. Due to new technology the world of forensics is becoming more and more advanced providing law enforcement with all types of new investigatory tools and ways for the court to prove or disprove guilt. It is essential for law enforcement agencies to have trained forensic personnel with the skills to properly collect the evidence first to ensure the evidence does not become lost, destroyed, or damaged and the forensic evidence is accepted in a court of law. Improper collection of evidence is only one of many potential challenges associated with forensic evidence but it is an important challenge that must be addressed. Forensic evidence is collected at the crime scene. If the evidence is not properly documented and collected it can be found to be unreliable in the court process. In order for forensic evidence to be accepted in a court of law it must be documented through sketches, photographs, and video tapings and it must be collected using accepted standard forensic collection methods. If evidence is not properly documented or collected the chain of evidence is broken and the court will exclude the evidence from the court case. The chain of evidence refers to an important aspect of forensic involving the movement of evidence. In order to show the court the evidence was located and collected at the scene...

Words: 1538 - Pages: 7

Premium Essay

Dna Analysis In Criminal Justice

...as portrayed in forensic crime dramas, an average person’s faith and trust on forensic evidence is unshakable. In particular, jurors significantly rely on DNA analysis, scientific evidence, and testimonies by forensic experts to help decide the outcome of most criminal cases. Hence, justice and freedom for an individual can depend on the proficiency, reliability and efficiency of a forensic laboratory and their forensic analysts. Investigative or methodological forensic errors either on...

Words: 758 - Pages: 4

Premium Essay

Forensic Computing Practice Case Study

...SCHOOL OF COMPUTING Bachelor of Computer Science / Bachelor of Software Engineering Forensic Computing Practice Assignment 2 Student declaration: I declare that:  I understand what is meant by plagiarism  The implication of plagiarism have been explained to me by our lecturer This assignment is my own work. Name ID 1)Nicholas Tan Tian Shen 0307878 Forensic Computing Practice Assignment 2 Due Date : Soft-copy submission on 10/11/14. Individual Assignment Question 1 a. What can a cloud provider do in terms of providing digital forensics data in the event of any legal dispute, civil or criminal case, cyber-attack, or data breach? Cloud provider need to provide the evidence by being forensically ready. To...

Words: 3104 - Pages: 13

Free Essay

Computer Forensics

...Computer Forensics Through the Years Prof. Pepin Galarga Computer Forensics Sep 11, 2010 Table of Content Introduction …………………………………………………………………………………Page 2 The Early Years……………………………………………………………….......................Page 3 Early Training Programs …………………………………………………………………....Page 4 Typical Aspects of Computer Forensic Investigations ……………………………………..Page 5 Legal Aspects of Computer Forensics …………………………………………..……...…..Page 6 Conclusion ………………………………………………………………………………….Page 7 References………………………………………………………………………………..…Page 8 Introduction If you manage or administer information systems and networks, you should understand computer forensics. Forensics is the process of using scientific knowledge for collecting, analyzing, and presenting evidence to the courts. (The word forensics means “to bring to the court.”) Forensics deals primarily with the recovery and analysis of latent evidence. Latent evidence can take many forms, from fingerprints left on a window to DNA evidence recovered from blood stains to the files on a hard drive. Because computer forensics is a new discipline, there is little standardization and consistency across the courts and industry. As a result, it is not yet recognized as a formal “scientific” discipline. Image by Flickr.com, courtesy of Steve Jurvetson Computer forensics is the study of extracting, analyzing and documenting evidence from a computer system or network. It is often used by law enforcement officials to seek...

Words: 1382 - Pages: 6

Free Essay

Forensic Science in the 21st Century

...Forensic Science in the 21st Century By: Crystal Lyle AJS/584 - FORENSIC SCIENCE AND PSYCHOLOGICAL PROFILING STEVEN HOENIG 2-29-16 This paper will examine my perception and concept of forensic science in the 21st century. It will also examine the importance of forensic science to policing criminal investigation court process, and the efforts of various levels in security. In addition to analyzing the importance of forensic science, I will give a historical approach. I will discuss the accuracy of the media representation of forensic science and how issues. Lastly, I will discuss the influence the CSI effect have on the judicial process. Forensic Science is the application of science to criminal and civil laws that are enforced by law enforcement agencies in a criminal justice system. Another definition of forensic science is principles and techniques to matters of criminal justice, especially as it relates to the collection, examination, and analysis of physical evidence. In 1929, a Los Angeles police department establish the first American forensic lab. Forensic science has been around over 300 years or more and it continues to improve and emerge today as science and technical knowledge find more improved and accurate techniques. Forensic science has come to be a critical instrument in allowing guilt or demonstrating innocence in the system of criminal justice. In the late 80’s (DNA), society was accepting of (DNA) and forensic science continues to develop and unfold...

Words: 1265 - Pages: 6

Premium Essay

Professional Standard

...assignment is Computer Forensics Investigator I picked this job because I think that is the career path I want to take. I am currently getting my degree in Information technology and want to go for a bachelor’s in information systems security. The job of a Computer Forensics Investigator is to identify and collect digital data and evidence from all sorts of media like hard drives, flash drives and even the Internet. Once the digital evidence and data our collected then the Computer Forensics Investigator must examine and analyze the evidence to find out what the data is and what it was used for. The Computer Forensics Investigator must also help with the collecting of physical evidence at crime scenes such as computers and digital media. A day in the like of a Computer Forensics Investigator would in tale of the investigator going to a crime scene and collecting of evidence and talking it back to the computer lab. Where the investigator would take the evidence say a computer and getting all the digital data off the drive where they can analyze the data and the hand any incriminating evidence over to the lead investigator to aid in the capture of the criminals. The Investigator may even need to go as far as retrieve data from the drive that has been deleted this can be a completed task in its self because it can talk days some times to retrieve this deleted data and then all the data might not be available to get a complete file. The next thing the Computer Forensics Investigator must...

Words: 570 - Pages: 3

Free Essay

Types of Forensics

...FORENSICS Forensics, by and large, is the application of science to the legal process. It is an emerging research domain in India. There are many different types of forensic sciences baring their vital presence possibly in every field of human endeavor. Of these, let us now discuss about the computational, cyber and the DNA forensics. COMPUTATIONAL FORENSICS: The development of computational methods or mathematical and software techniques to solve forensic issues is called computational forensics. These methods analyze the evidence beyond human cognitive ability. They scrutinize a large volume of data, which is at any case impossible for a human mind to figure out. In spite of this, we can’t say that these techniques alone would serve our purpose because computational forensics is a field which needs huge collaboration between recognition and reasoning abilities of humans combined with comprehension and analytic abilities of the tool or a machine, which is most of the times, a computer. Computational forensics aids us to model the uncertain. At the crime scenes, we usually get incomplete or broken evidences. These evidences are later on modeled by the computational forensic tool which gives us first clues from its largest biometric database (fingerprints, criminal histories, mug-shots, scar and tattoo, physical characteristics like height, weight, hair and eye color and aliases), which is a collection of significant information regarding the criminals, their criminal history...

Words: 1917 - Pages: 8

Free Essay

Forensicscience

...1)Introduction; Crime today is at an extreme high. However, forensic science has been there to help solve every crime committed Forensic science is the scientific method of gathering and examining information about the past. The word forensic comes from the Latin forēnsis, meaning "of or before the forum. The word forensic basically means the key to solve a crime.This is the technology used to help forensic teams to analyze and solve crimes.- This is especially important in law enforcement where forensics is done in relation to criminal or civil law,[1] but forensics are also carried out in other fields, such as astronomy, archaeology, biology and geology to investigate ancient times. Forensic Science is used to Identify Criminals Rape, murder, theft, and other crimes almost always leave a devastating mark on the victim. . In modern forensic science, the crime laboratories include photography section, Evidence storage section, identification section, chemistry section, General examination section, Fire arms section, instrument section and crime scene search section. 2)Origins of forensic science: In 16th-century Europe, medical practitioners in army and university settings began to gather information on the cause and manner of death. Ambroise Paré, a French army surgeon, systematically studied the effects of violent death on internal organs.[9][10] Two Italian surgeons, Fortunato Fidelis and Paolo Zacchia, laid the foundation...

Words: 3403 - Pages: 14

Free Essay

Weight Loss

...Forensic Accounting 1 Assignment 3: Forensic Accounting in Practice BUS 508 Professor: Edwin Quinn Jr. Carmesha Eldridge May 19, 2013 Forensic Accounting 2 1. Determine the most important five (5) skills that a forensic accountant needs to possess and evaluate the need for each skill. Be sure to include discussion regarding the relationship between the skill and its application to business operations. One of the most essential skills is being analytical. Forensic accountants must make sure that they are in a position to uncover financial deceptions by critically analyzing them with an understanding of fraud schemes. A forensic accountant is deductive analysis or the ability to take a shot at the financial contradictions that are not a normal pattern of the company to uncover potential financial fraud. Being analytical is essential to remaining an effective forensic accountant. They need to be able to analyze the validity of each transaction the company recorded to make sure that the transactions were reported accurately and fairly. They must possess the knowledge and expertise to interpret financial statements or work under situations where information has been either destroyed or tampered with and be analytical and put the pieces of the puzzle back together again. Forensic accountants should be detailed orientated. Being a forensic accountant means that you will be looking at large quantities of numbers from supporting documents and various financial reports...

Words: 1792 - Pages: 8

Premium Essay

A Career In Jenny O Connell's Forensic Nurse

...puddle of blood has seeped from his head. The TV volume is low. The room is undisturbed except for the coffee table, which is askew, its contents on the floor. A remote control is clutched in the man’s right hand. A women wearing a night gown is sitting in the next room quietly crying. She has blood on her hands. What happened here? What or who killed this man? These are the questions nurse O’Connell has to answer. This is the job of a forensic nurse death investigator,” Connie Romano, MSN, BSN, CRNP, CEN Lippincott’s 2011 Nursing Career Directory....

Words: 1566 - Pages: 7

Free Essay

Mobile Forensics in Healthcare

...2009 Eighth International Conference on Mobile Business Mobile Forensics in Healthcare Connie Justice, Huanmei Wu Computer & Information Technology Purdue School of Engineering and Technology Indiana University Purdue University Indianapolis 799 W. Michigan St., ET 301 Indianapolis, IN 46202 {cjustice, hw9}@iupui.edu Abstract -- Mobile communication has been heavily applied in the current healthcare system for health information exchange. Patient information security has become a major concern, especially with the wide adoption of electronic medical records. Mobile Forensics has been utilized by law enforcement to systematically procure and preserve mobile evidence. However, the adoption of mobile forensics in the healthcare lags behind. The goal of our project is to examine the options and to provide recommendations for adoption and customization of mobile forensics in the healthcare field. An open-ended survey of local healthcare and related facilities around Indianapolis has been explored to examine the current status of Mobile Forensics in the healthcare field. The results have been evaluated using statistical analysis. A methodology is being proposed that would use mobile forensics procedures taking into account the regulatory measures that have to be instituted due to the Health Insurance Portability and Accountability Act (HIPAA) of 1996. Keywords-mobile forensics, healthcare. Evelyn Walton Informatics Indiana University Purdue University Indianapolis 799 W. Michigan...

Words: 4340 - Pages: 18