Forensic Sciences
Technical Contacts:OverviewThe term "forensic" conjures up a vivid association with several major television shows. These shows provide a brief look into the basic principles and theories of forensic sciences and how the sciences are used to solve criminal and civil cases. Although these TV shows imply the investigators commonly are experts in all facets of the scientific disciplines, the reality is, that premise is far from the truth. Scientific research at NIST starts with understanding the fundamentals of science, from which standards are created. These standards are the focal point of the forensic science program at the Office of Law Enforcement Standards (OLES). This supporting research may require several months or several years to come to fruition. Whatever the length of time, the end result is a standard that provides the necessary basis by which forensic analysts provide the scientific results that meet judicial acceptability. The diversity of forensic applications requires a multi-disciplinary approach, and thus work in this area has been distributed across many NIST laboratories. For example, projects relating to computer usage in crimes are based in the Information Technology Laboratory (ITL). These projects address issues such as: the evaluation of investigative software, the prevention of inadvertent modifications of electronic files under investigation and the development of a National Software Reference Library (NSRL) that helps computer analysts to quickly identify suspect files on a hard drive. The Chemical Science and Technology Laboratory (CSTL) has been assigned all aspects of DNA research and the creation of biological standard reference materials (SRMs). The Precision Engineering Division has been assigned projects addressing bullet and cartridge cases and the Building and Fire Research Laboratory (BFRL) handles projects related to burn pattern recognition, measurement and simulation of ignition sources, and computer simulations of actual fire events. The following text highlights a few of the active projects targeting the needs of the forensic analyst. Recent Publications*, **
Project Efforts:Computer Forensic Reference Data Sets (CFREDS)GoalsTo provide a readily accessible Internet site that can be used by computer forensic analysts and management to obtain mock case examples for in-house evaluation. These case examples can be used to test examiners skills as part of accreditation requirements or to evaluate/calibrate equipment prior to use. Customer NeedsThe burgeoning number of crimes committed with the aid of the computer is overwhelming the nation's crime laboratories. To assist with the "controls" and evaluation of analyst's expertise, management desires a quick and assured method for evaluation. In general, they need test sets that have been validated and are freely available for use to determine the functionality of equipment as well as the skill set of an analyst. Technical StrategyThe project participants will continue to converse with individuals knowledgeable in the fi eld to determine the type of test sets needed and in what format. The received suggestions will then be evaluated, verified, and if necessary, used to create an appropriate story line. This includes determining what features to include in the data sets, such as; target strings in files, slack space, unallocated space, file system metadata. The tests will be available through the web site, easily accessible by any individual seeking this type of assistance. Deliverables
Computer Forensics Tools Testing (CFTT)GoalsTo verify the operation and output of software and hardware that is used to examine digital evidence and to provide documentation on the findings for use in judicial proceedings. Customer NeedsComputer forensic investigators and analysts require documented evaluation of currently available software/hardware (tools) that advertise forensic capabilities. This step is essential to support collection, examination, analysis, and court testimony of digital evidence. NIST is highly suited to provide an unbiased determination of a tool's capability and therefore to verify the results produced by these tools. NIST was asked to provide expertise in developing test suites and a testing framework to structure the testing of the products in use. The information provided by NIST as a neutral party is used to determine several factors: whether specific tools should be used in forensic examinations; how the tools should be used; and the limitations of the tools' capabilities. Technical StrategyTo assist the computer forensic community NIST has conducted functionality tests on specific software and hardware products. The selection of a specific software/hardware product and its functionality (e.g., imaging) is accomplished through specific listserv announcements and input from select federal agencies. The actual test results are provided in a report form and posted on two different Web sites: http://www.cftt.nist.gov and http://www.ojp.usdoj.gov/nij/sciencetech/welcome.html. Deliverables
DNA Related ProjectsGoalsTo provide technical support to state and local forensic DNA laboratories regarding the underlying science of available DNA products and STR-based research. To conduct direct instructional support to state and local forensic DNA laboratories through workshops, training sessions and presentations and through continued population of the NIST STRbase web site. Customer NeedsState and local forensic DNA analysts do not have the time or the funds to conduct research into new technologies or evaluate newly released products. In addition, the incorporation of non-evaluated products into a laboratory's standard protocol requires that laboratory to conduct a lengthy validation. To advance the state-of-the-art and alleviate associated time and cost constraints, NIST undertakes the necessary research, development and evaluation tasks. Technical StrategyNIST provides ready access to reference material, new technology and tutorials through a service called strbase, which can be found at http:// www.cstl.nist.gov/biotech/strbase/NISTpub.htm. Through this service analysts have resources at their fingertips. NIST will continue research in such areas as: analysis of degraded DNA through the use of miniSTRs, continue evaluating the applicability of Y-chromosome analysis through the use of Y-SNP markers and Y-STR markers and evaluate and improve tools that will aid state and local crime laboratories in the areas of quality assurance and quality control software, equipment upgrades and variant allele cataloging and characterization. Deliverables
Ion Mobility Spectrometry (IMS) Trace Drug Detection DevicesGoalsTo research the utilization of the IMS method as applied to contraband drugs to characterize detection efficiency and to develop methods to characterize and standardize swipe-based and portal-based collection efficiencies of contraband drug particles. Customer NeedsDetection of contraband drugs is a high priority for a large number of law enforcement organizations. A promising technology for screening for trace amounts of contraband drugs is Ion Mobility Spectrometry (IMS), which is also used nationally for the detection of traces of explosives at airports and other points of entry. However, there exists a number of deficiencies, including high false positive alarm rates for some drugs and high false negative rates (lack of detection) for other drugs. Agencies require a general understanding of detection limits, reliability, and false alarm rates for IMS-based systems. Technical StrategyTo study an immunoassay instrument marketed for law enforcement applications that should have a similar sensitivity to IMS, but better selectivity. In addition, to study a IMS-based portal detector, and two new desktop IMS instruments. This will require the design of a multivariate experiment that includes at least two desktop instruments and tests for a number of factors including temperature, humidity, sample preparation, and sample matrix. Solid phase microextraction (SPME) used in conjunction with IMS will also be studied. The SPME-IMS approach has the potential to provide a faster, easier, and more portable method of drug analysis in biological samples than those commonly used today. Deliverables
National Software Reference Library (NSRL)GoalsTo provide several library attributes; a collection of actual commercial-off-the-shelf (cots) software products and a validated database of known software, file profiles, and file signatures ("fingerprints") in different hash formats. Customer NeedsThe computer forensic analyst is confronted with the examination of an increasing expanse of files per hard drive and in many instances numerous hard drives per forensic case. In addition, all methods and tools utilized in an examination must meet stringent accreditation and judicial requirements. Technical StrategyTo support the computer forensic investigator or analyst, a validated automated filter program has been created that will either assist in the elimination of thousands of legal files that have no intrinsic forensic value, or provide a quick identification of a specific file of interest. This capability can significantly reduce the amount of examination time required on behalf of the analyst. Legal requirements may also dictate that the computer forensic analyst produce the basis for the hash values used in an examination, or the specific software version used to obtain the hash. To meet this, NIST retains the actual commercial product that was tested in an in-house library. Deliverables
Standard Casing Reference MaterialGoalsTo provide virtual signature standards and NIST Standard Reference Materials (SRMs) standards for casings to be used with equipment that captures images for comparison purposes. Customer NeedsFirearm analysts currently utilize in-house standards for equipment calibration and inter-laboratory evaluation. Laboratory accreditation requirements and federal mandates are dictating the use of traceable reference materials in an effort to establish measurement uniformity. Technical StrategyUtilizing an electroforming process on casings from actual test fires, a set of master casings has been produced. For maximum signature reproducibility, the decay factor for these masters will be determined. Each casing produced will be evaluated through topography measurements to ensure maximum cross correlation factor (CCF). Deliverables
Real Time Forensics Imaging for Analog and Digital Video TapesGoalsTo provide forensic analysts with state-of-the-art, nano-engineered magnetic imaging methods for screening data and recovering data from media that is damaged or was tampered with. This will greatly increase the accuracy of criminal investigations through identification of specifi c types of machines used, whether or not the tapes are original, and to allow investigators to recover data from catastrophic events. Customer NeedsLaw Enforcement and criminal investigators require to "see" signs of tampering in analog audio tapes – erasing, overdubbing and other alterations – while listening to the tapes. It is also important that law enforcement has systems that can evaluate the authenticity of both analog and digital videotape as well as audio recordings. Because magnetic data storage tape is ubiquitous in surveillance and monitoring devices, it is expected that it will remain a challenge to law enforcement forensics teams. The sheer amount of tape (miles on a single roll) and the high density (down track resolution higher than 0.1 micrometer) renders existing techniques, based on magnetic fluids, obsolete. Real-time magnetic scanners will solve this problem. Technical StrategyTo develop a high resolution (1600 pixels/inch) imaging system that operates in real-time. This allows investigators to see signs of tampering in analog audiotapes — erasing, overdubbing and other alterations — while listening to the tapes. In FY04-05 we fabricated three complete systems. One of these systems is built around an audiocassette system, and will be deployed at the FBI Audio Laboratory in Quantico, Virginia. The other two systems are modular, and can be connected to a cassette deck, a VHS video player, or a DAT (digital audio tape) player. The two modular systems will be kept at NIST and used for testing and characterizing the sensor arrays and validating this technology for use and presentation in court cases. In addition, for the LOC, NTSB, and NARA it is necessary to explore the efficacy of these systems for both routine and emergency data recovery from damaged and aged magnetic data storage tape media. In order for this technique to have an impact, it is necessary to do blind and double blind testing of altered and original tapes. These tests will be conducted in close collaboration with the FBI. Validation work in this study will focus on the videotape area. Deliverables
Reractive Index Glass Standard Reference MaterialGoalsTo replenish the depleted NIST standard reference material stock, which is utilized by forensic laboratories that conduct glass analysis. Customer NeedsTo meet quality assurance and accreditation requirements, traceable reference materials must be used when analyzing forensic evidence. The depletion of the NIST glass refractive index standard reference material (SRM) caused some laboratories to seek other options to meet accreditation requirements. Therefore, the forensic community needs a new glass refractive index SRM. Technical StrategyGlass samples have been specially annealed to remove residual stress birefringence to ensure uniform optical quality. 5-decimal place index of refraction values will be extracted from the measurements and glass prism samples (7 in total) will be subjected to index of refraction measurements. This portion of the process has been completed. The remaining aspect in the process is density measurement determination. Deliverables
Accomplishments
*By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to oles@nist.gov **Adobe Reader will be needed to view PDF documents. If you do not have this program, you may download it free of charge. The software is identified in order to assist users of this information service. In no case does such identification imply recommendation or endorsement by the National Institute of Standards and Technology. |
|
Office of Law Enforcement Standards 100 Bureau Drive, M/S 8102 Gaithersburg, MD 20899-8102 301-975-2757 Telephone 301-948-0978 Facsimile |
NIST is an agency of the U.S. Department of Commerce Disclaimer Notice & Privacy Statement / Security Notice Send comments or suggestions to oles@nist.gov NIST Home | NIST Laboratories | Electronics and Electrical Engineering Laboratory | Office of Law Enforcement Standards
Date created: May 31, 2001 |