Unit-1 Digital Forensics Science

Unit-1 Digital Forensics Science. Forensic science involves the application of the natural, physical, and social sciences to matters of law. Bloodstains human remains hard drives ledgers and files medical records.

HISTORY OF FORENSIC. 44 BC - Death of an emperor Julius Caesar is assassinated. Following this event, a physician performed an autopsy, and determined that of the 23 wounds found on the body, only one was fatal. 400 - Who determines cause of death(400s) Germanic and Slavic societies made law that medical experts must be the ones to determine cause of death in crimes. 600 - Use of fingerprints for the first time (600s) Fingerprints first used to determine identity. Arabic merchants would take a debtor's fingerprint and attach it to the bill..

HISTORY OF FORENSIC. 1248 - First forensic science book First forensic science manual published by the Chinese. This was the first known record of medical knowledge being used to solve criminal cases. 1600 - Reporting cases (1600s) First pathology reports published. 1784 - Physical evidence used in criminal case First recorded instance of physical matching of evidence leading to a murder conviction (John Toms, England). Evidence was a torn edge of newspaper in a pistol that matched newspaper in his pocket..

HISTORY OF FORENSIC. 1806 - Investigating poisoning German chemist Valentin Ross developed a method of detecting arsenic in a victim's stomach, thus advancing the investigation of poison deaths. 1816 - More physical evidence discovered to work in forensics Clothing and shoes of a farm laborer were examined and found to match evidence of a nearby murder scene, where a young woman was found drowned in a shallow pool. 1836 - Chemical testing utilized James Marsh, an English chemist, uses chemical processes to determine arsenic as the cause of death in a murder trial..

HISTORY OF FORENSIC. 1854 - First uses of photos in identification (1854-59 ) San Francisco uses photography for criminal identification, the first city in the US to do so. 1880 - Fingerprints found to be unique Henry Faulds and William James Herschel publish a paper describing the uniqueness of fingerprints. Francis Galton, a scientist, adapted their findings for the court. Galton's system identified the following patterns: plain arch, tented arch, simple loop, central pocket loop, double loop, lateral pocket loop, plain whorl, and accidental. 1887 - Sherlock Holmes and the coroner Coroner's act established that coroners' were to determine the causes of sudden, violent, and unnatural deaths. Arthur Conan Doyle also publishes the first Sherlock Holmes story..

1892 - Fingerprint ID used in crime Juan Vucetich , an Argentinean police officer, is the first to use fingerprints as evidence in a murder investigation. He created a system of fingerprint identification, which he termed dactyloscopy . 1888 - Criminal features reduced to numerical measurements Anthropometry, a system using various measurements of physical features and bones, used throughout the US and Europe. Using the system, a criminal's information could be reduced to a set of numbers. 1901 - Investigations into blood markers Human blood grouping, ABO, discovered by Karl Landsteiner and adapted for use on bloodstains by Dieter Max Richter. 1901 - Fingerprint ID more common Galton-Henry system of fingerprint identification officially used by Scotland Yard, and is the most widely used fingerprinting method to date..

1903 - First fingerprint prisoner ID used NY state prison system implemented fingerprint identification. 1909 - Learning about forensics First school of forensic science founded by Rodolphe Archibald Reiss, in Switzerland. 1910 - Hair now used in forensics Victor Balthazard and Marcelle Lambert publish first study on hair, including microscopic studies from most animals. First legal case ever involving hair also took place following this study. 1912 - Guns are unique Victor Balthazard realizes that tools used to make gun barrels never leave the same markings, and individual gun barrels leave identifying grooves on each bullet fired through it. He developed several methods of matching bullets to guns via photography..

1923 - Crime labs built First police crime lab established in Los Angeles. 1930 - Lie detection Prototype polygraph, which was invented by John Larson in 1921, developed for use in police stations. 1932 - Crime experts build lab FBI establishes its own crime laboratory, now one of the foremost crime labs in the world. This same year, a chair of legal medicine at Harvard was established. 1960 - Voice recording, used as evidence (1960s) A sound spectrograph discovered to be able to record voices. Voiceprints began to be used in investigations and as court evidence from recordings of phones, answering machines, or tape recorders..

1967 - First national crime system FBI established the National Crime Information Center, a computerized national filing system on wanted people, stolen vehicles, weapons, etc. 1974 - Advances in residue detection Technology developed at Aerospace Corporation in the US to detect gunshot residue, which can link a suspect to a crime scene, and can show how close that suspect was to the gun. 1975 - Advanced manual fingerprints First fingerprint reader installed at the FBI 1979 - Auto fingerprint system first used Royal Canadian Mounted Police implement first automatic fingerprint identification system..

1984 - DNA technique for unique ID DNA fingerprinting techniques developed by Sir Alec Jeffreys . 1983- Advances in DNA lead to conviction (1983-86) DNA fingerprinting led to conviction of Colin Pitchfork in the murder of two teenage girls. This evidence cleared the main suspect in the case, who likely would have been convicted without it. 1987- DNA catches the criminal Tommy Lee Andrews convicted of a series of sexual assaults, using DNA profiling. 1996 - DNA evidence certified National Academy of Sciences announces DNA evidence is reliable. 1999 - Faster fingerprint IDs FBI establishes the integrated automated fingerprint identification system, cutting down fingerprint inquiry response from two weeks to two hours..

2001- Faster DNA IDs Technology speeds up DNA profiling time, from 6-8 weeks to between 1-2 days. 2007 - Footwear detection system Britain's Forensic Science Service develops online footwear coding and detection system. This helps police to identify footwear marks quickly. 2008 - Detection after cleaning A way for scientists to visualize fingerprints even after the print has been removed is developed, relating to how fingerprints can corrode metal surfaces..

2011 - Facial sketches matched to photos Michigan state university develops software that automatically matches hand-drawn facial sketches to mug shots stored in databases. 2011 - 4 second dental match Japanese researchers develop a dental x-ray matching system. This system can automatically match dental x-rays in a database, and makes a positive match in less than 4 seconds..

Laws And Principles Of Forensic Science. Principle of exchange Law of progressive change Law of Individuality Laws and Principles of Forensic Science Principle of analysis Law of probability Law of Principle of comparison Circumstantial Facts.

Laws And Principles Of Forensic Science. i ) Law of Individuality – Most common example is the human fingerprints; they are unique, permanent and prove individuality of a person. Even the twins did not have the same fingerprints. 2) Law of Progressive Change For example, a road accident on a busy highway may lose all essential evidence if not properly secured on time. 3) Law of exchange As soon as two things come in connection with each other, they mutually interchange the traces between them ..

Laws And Principles Of Forensic Science. 4) Principle of Comparison For example, if the murder is done by a firearm weapon then it is useless to send a knife for comparison. 5) Principle of Analysis The quality of any analysis would be better by collection of correct sample and its correct preservation in the prescribed manner 6) Law of Probability The criminal blood group is also the blood group of various people is high, but the probability of the same occurring in the case is low..

Laws And Principles Of Forensic Science. 7) Law of Circumstantial facts Facts cannot be wrong, they cannot lie not wholly absent but men can and do. 8) Conclusion Forensic science by these principles is used for recognition, identification; individualization of pieces of evidence collected from the scene of crime and guides the criminal proceedings from the discovery of a crime to the conviction of the accused, helping the process of investigation..

COMPUTER FORENSIC. Recovering deleted files Searching unallocated space Tracing artifacts Processing hidden files Running a string-search Employer Safeguard Program.

COMPUTER FORENSICS SERVICES. 1. DATA SEIZURE 2. DATA DUPLICATION/PRESERVATION 3. RECOVERY 4. DOCUMENT SEARCHES 5. MEDIA CONVERSION 6. EXPERT WITNESS SERVICES 7. COMPUTER EVIDENCE SERVICE OPTIONS 8. OTHER MISCELLANEOUS SERVICES.

DIGITAL FORENSIC. It is focused on recovery and investigation of material found in digital devices and cybercrimes. What is the Purpose of Digital Forensics? Criminal cases Civil cases What is Digital Forensics Used For? criminal and private investigations.

Digital Forensics Investigation Process. 1. Seizure 2. Acquisition 3. Analysis 4. Reporting.

The History of Digital Forensics. Before the 1970s, cybercrimes were deal with existing laws The first cyber crimes were recognized in the 1978. Copyright, Unwanted sites. 1980s-1990s was introduce federal laws to incorporate computer offences. In 1984, the FBI launched a Computer Analysis and Response Team and in 1985, the British Metropolitan Police fraud squat launched a computer crime department..

The History of Digital Forensics. 2000s: The British National Hi-Tech Crime Unit was set up in 2001. In 2002, the Scientific Working Group on Digital Evidence (SWGDE) produced Best practices for Computer Forensics. In 2005, an ISO standard for digital forensics was released in ISO 17025. A 2009 paper, Digital Forensic Research. In 2010, Simson pointed out the increasing size of digital media.

What Tools Do Digital Forensic Examiners Use. 1. Disk and data capture tools 2. File viewers 3. File analysis tools 4. Registry analysis tools 5. Internet analysis tools 6. Email analysis tools 7. Mobile devices analysis tools 8. Mac OS analysis tools 9. Network forensics tools 10. Database forensics tools.

What are the Legal Considerations of Digital Forensics.

Challenges Faced By Digital Forensic. increasing variety of file formats Crime as a Service( CaaS ) 1. Technical challenges Different Media format, Encryption, Anti-forensics, Steganography, Live acquisition and analysis 2. Legal challenges Juridical issue, Lack of standard legislation creates the legal challenges, Status as scientific evidence, What is the known or potential rate of error of the method used, whether the theory or method has been generally accepted by the scientific community 3.Resource challenge Volume of data, Time taken to acquire and analyze forensic media, To ensure to satisfied critical investigative and prosecutorial needs at all levels of government.

cyber crime, e-crime, electronic crime, or hi-tech crime. Why do people commit computer crimes. Examples of computer crimes. Child pornography Copyright violation Cracking Cyber terrorism Cyber stalking Creating Malware Denial of Service attack Doxing – Personal information Fraud – Harvesting - account-related information.

CRIMINALISTICS. Application of scientific techniques in collecting and analyzing physical evidence in criminal cases . WHAT DO CRIMINALISTS DO Criminalists use their knowledge of physical and natural science to examine and analyze every piece of evidence from a crime scene. Criminalistics has many fields of specialization. Alcohol and drugs, Blood and tissue spatter, Computer forensics, DNA, Explosions, Serology (examining and analyzing body fluids ),Firearms and tool marks, Trace evidence, Wildlife..

CRIMINALISTICS IN POLICE INVESTIGATIONS. Establishing an element of the crime Identification of a suspect or victim Associative evidence Reconstruction Corroboration.

CRIMINALISTICS IN REAL TIME. Arrival/Initial Response Documentation and Evaluation Processing the Scene Completing and Recording the Crime Scene Investigation The object and categories of criminalistics Modus operandi/method of committing a crime Criminalistic trace evidence Criminalistic identification Methods of criminalistics Methods of criminalistic tactics Crime scene investigation Criminalistic documentation.