Forensic intelligence framework—Part I: Induction of a transversal model by comparing illicit drugs and false identity documents monitoring

Forensic intelligence in Australia and New Zealand: Status and future directions

Forensic science is underutilised. Operating models restricted to the support of court outcomes do not address core requirements of contemporary policing and public security, which are to disrupt criminal activity and prevent crime. Forensic intelligence (FORINT) is a principal means of enhancing the role of forensic science, emphasising proactivity and cross-case, cross-crime domain insights. To catalyse implementation, a FORINT Specialist Advisory Group (SAG) has been established under the Australia & New Zealand Policing Advisory Agency (ANZPAA) National Institute of Forensic Science (NIFS). The SAG has established a concept of operations with four lines of effort - namely, to (i) promote awareness and consistency, (ii) shape the workforce, (iii) develop information management frameworks and (iv) guide operational implementation. This aims to shift Australia & New Zealand from its present state (of substantial interagency variability) to a state of widespread, consistent and effective FORINT delivery in terms of: (a) culture, (b) information management, (c) education & training, and (d) organisation & operating environment. There are risks to implementing FORINT, in terms of privacy/confidentiality, bias/misinterpretation, and resource impost. However, these are not necessarily FORINT-specific, and solutions or mitigations exist. Moreover, these issues are outweighed by the risks of not implementing FORINT - such as a failure to reveal threats, missed opportunities, and poor resource efficiency. This paper is a call to arms. For policing and laboratories - now is the time to implement and entrench FORINT. For academia - now is the time to build foundations for this future. For supporting industries - now is the time to develop partnerships and facilitate delivery.

Development and evaluation of portable NIR technology for the identification and quantification of Australian illicit drugs

The efficient and accurate analysis of illicit drugs remains a constant challenge in Australia given the high volume of drugs trafficked into and around the country. Portable drug testing technologies facilitate the decentralisation of the forensic laboratory and enable analytical data to be acted upon more efficiently. Near-infrared (NIR) spectroscopy combined with chemometric modelling (machine learning algorithms) has been highlighted as a portable drug testing technology that is rapid and accurate. However, its effectiveness depends upon a database of chemically relevant specimens that are representative of the market. There are chemical differences between drugs in different countries that need to be incorporated into the database to ensure accurate chemometric model prediction. This study aimed to optimise and assess the implementation of NIR spectroscopy combined with machine learning models to rapidly identify and quantify illicit drugs within an Australian context. The MicroNIR (Viavi Solutions Inc.) was used to scan 608 illicit drug specimens seized by the Australian Federal Police comprising of mainly crystalline methamphetamine hydrochloride (HCl), cocaine HCl, and heroin HCl. A number of other traditional drugs, new psychoactive substances and adulterants were also scanned to assess selectivity. The 3673 NIR scans were compared to the identity and quantification values obtained from a reference laboratory in order to assess the proficiency of the chemometric models. The identification of crystalline methamphetamine HCl, cocaine HCl, and heroin HCl specimens was highly accurate, with accuracy rates of 98.4 %, 97.5 %, and 99.2 %, respectively. The sensitivity of these three drugs was more varied with heroin HCl identification being the least sensitive (methamphetamine = 96.6 %, cocaine = 93.5 % and heroin = 91.3 %). For these three drugs, the NIR technology provided accurate quantification, with 99 % of values falling within the relative uncertainty of ±15 %. The MicroNIR with NIRLAB infrastructure has demonstrated to provide accurate results in real-time with clear operational applications. There is potential to improve informed decision-making, safety, efficiency and effectiveness of frontline and proactive policing within Australia.

Kirk's 'Ontogeny of Criminalistics' revisited under the lens of the Sydney Declaration

The present commentary reviews the considerations of the famous American criminalist Paul Kirk in his seminal publication of 'The Ontogeny of Criminalistics,' written sixty years ago, regarding the status of forensic science and its fundamental principles. Professor Kirk aimed to examine forensic science as an independent scientific discipline, resulting in the identification of six key topics: 1) The need for fundamental principles; 2) the distinction between 'identification' and 'individualization;' 3) the qualifying elements of a profession; 4) the qualifying aspects of a science; 5) the need for a research-oriented basis; 6) the need for application of statistics and probability. In particular, Kirk deemed the nature of the progress made during his time as technical, practical, and transient at the cost of being fundamental, theoretical, and permanent. Predominantly, it is still the case today, with a post-effect fragmentation of forensic science into a myriad of ultra-specialized subdisciplines and applications. The lack of proper articulation of the most fundamental principles of forensic science was one of Kirk's most pressing concerns. The Sydney Declaration aimed to recapture the current fundamental (ontological and epistemological) status of forensic science, resulting in the redefinition of forensic science and its prime object of study, the trace, and in the consolidation of seven principles. The present commentary attempts to address Kirk's arguments in the Ontogeny in the context of the principles of the Declaration, with particular emphasis on the fundamental principles as well as Kirk's distinction between 'identification' and 'individualization,' which is considered critical to understanding the overall scope of forensic science.

Digital forensic intelligence for illicit drug analysis in forensic investigations

In forensic investigations, forensic intelligence is required for illicit drug profiling in order to allow police officers and law enforcements to recognize crime developments and adjust their actions. In the present paper, we propose a novel framework for Digital Forensic Drug Intelligence (DFDI) by fusing digital forensic and drug profiling data through intelligent cycles, where a targeted and iterative collection of evidence from diverse sources is a core step in the process of drug profiling. Drug profiling data combined with digital data from seized devices collected, examined, and analyzed will allow authorities to generate valuable information about illicit drug trafficking routes and manufacturing. Such data can be stored in seized illicit drug databases to build in an intelligent way, all findings, hypotheses and recommendations, allowing law enforcement to make decisions. Our framework will potentially provide a better understanding of profiling, trafficking and distribution of illicit drugs.

A footwear marks database in Western Switzerland: A forensic intelligence success

Footwear marks database has been the subject of numerous research projects over the past decades with a strong focus on the automation of the process of retrieving candidates for comparison. However, to date, there is still no tool able to perform a fully automate treatment of unknown crime scene marks. Making the assumption that a fully automated tool would not be available before a long time and not necessarily required, a project has emerged in Western Switzerland with the aim to commonly exploit footwear marks across several states. As this type of evidence is mainly collected in the context of volume crime, the exploitation of the footwear marks is mainly focused on the detection of links between cases in order to create forensic intelligence. Nevertheless, the search for associations between unknown marks and seized shoes is also carried out. This project resulted in a database developed in-house and now in operation. Through this tool, several forensic services are able to share their footwear marks, compare them and detect series. The links detected through this database are also shared with criminal analysis and intelligence systems. This project does not exploit any particular technological advance but have led to an operational database. This paper will highlight some of the factors that have led to the development and implementation of a successful footwear marks database connecting several police services.

Forensic intelligence teaching and learning in higher education: An international approach

Over the years, forensic science has primarily positioned itself as a service provider for the criminal justice system, following the dominant and traditional reactive law enforcement model. Unfortunately, this focus has limited its capacity to provide knowledge about crime systems and to support other forms of policing styles through forensic intelligence. Although forensic intelligence research has steadily developed over the last few years, it is rarely covered in the core of academic teaching and research programs. Developing forensic intelligence programs would empower graduates with an awareness of forensic intelligence meaning and models, creating great opportunities to shape their future professional activities and progressively shift the dominant paradigm through a bottom-up approach. In this article, the teaching and learning strategies in forensic intelligence developed at the University of Lausanne (Switzerland) and adapted at the University of Technology Sydney (Australia) and the Université du Québec à Trois-Rivières (Canada) are presented. The objective behind the strategy is to reflect on and work on real case scenarios using a progressive teaching and learning approach that builds upon the theory and practical exercise putting students in real-life situations. Through this innovative learning process, students move away from the Court as the sole end purpose of forensic science. They learn to adopt different roles, adopt a proactive attitude as well as work individually and collaboratively. This teaching and learning strategy breaks the current silos observed in the forensic science discipline by focusing on processes and critical thinking. It can be foreseen, through the evolution of crime and policing models, that the learning and teaching strategy described in this article offers and will offer the students with many new job opportunities. The article concludes with the advantages that such teaching and learning programs in forensic intelligence bring to the forensic science community.

Exploring the added value of portable devices such as near infrared spectrometer in the field of illicit drugs analyses

Facing the problem of backlogs in the forensic laboratories, the field of illicit drugs analyses has recently seen the development of different types of portable devices. Their main purpose is to be used directly by the police in order to reduce the number of specimens that are sent to the laboratories. Several portable devices have shown promising results. To avoid misuses, the added value of these devices should be explored, in order to establish "good practices" and keep the communication channels open between the police and the laboratories. Adapting sampling procedures around the use of portable devices allows for real-time qualitative and quantitative data. Forensic scientists can therefore rapidly assess whether every specimen in a seizure contain illicit drugs and if the seizure is composed of specimens showing different composition. Based on these information, forensic scientists can proceed to an intelligence-led sampling and prioritise specimens that would require further analyses. Additionally, the availability of more analysis data can strengthen the confidence in the reporting of the sampling process and the analyses results. Various scenarios have been tested in an operational context at the Geneva Cantonal Police Force using an ultraportable NIR device. The focus was oriented on sampling issues and the intelligence produced. Results indicate a great potential to detect the different classes within a seizure and therefore to ensure a representative sampling for further analyses.

The Sydney declaration - Revisiting the essence of forensic science through its fundamental principles

Unlike other more established disciplines, a shared understanding and broad acceptance of the essence of forensic science, its purpose, and fundamental principles are still missing or mis-represented. This foundation has been overlooked, although recognised by many forensic science forefathers and seen as critical to this discipline's advancement. The Sydney Declaration attempts to revisit the essence of forensic science through its foundational basis, beyond organisations, technicalities or protocols. It comprises a definition of forensic science and seven fundamental principles that emphasise the pivotal role of the trace as a vestige, or remnant, of an investigated activity. The Sydney Declaration also discusses critical features framing the forensic scientist's work, such as context, time asymmetry, the continuum of uncertainties, broad scientific knowledge, ethics, critical thinking, and logical reasoning. It is argued that the proposed principles should underpin the practice of forensic science and guide education and research directions. Ultimately, they will benefit forensic science as a whole to be more relevant, effective and reliable.

Determining the impact of unknown individuals in criminality using network analysis of DNA matches

Criminal offenders missing from police files limit the capacity to reconstruct criminal networks for criminological research and operational purposes. Recent studies show that forensic DNA databanks offer potential to address this problem, through large-scale analysis of DNA matches, many of which involve unidentified offenders. Applying social network analysis (SNA) to 18 years of DNA match data from Québec, Canada, we found that 1400 unknowns do not occupy more marginal positions in the network than 13,000 known offenders, and explain up to 18% of SNA values (e.g., betweenness centrality) for the latter while supporting 46% of their clustering values. Our results contrast with previous studies, showing moreover that unknown individuals who are positioned centrally in a network may have a larger impact than previously expected on investigation policing with implications for forensic intelligence.

Understanding Australian methylamphetamine drug markets through relational, temporal and spatial analyses

In the area of illicit drugs, forensic case data have proven effective at detecting links between seizures and providing greater insights into illicit drug markets. This research explored the application of mathematical and statistical techniques to several chemical profiles of Australian methylamphetamine seizures. The main aim was to create and deliver a method that would expand the use of illicit drug profiling for strategic intelligence purposes, contributing to the fight against illicit drug trafficking. The use of comparison metrics and clustering analysis to determine links between existing illicit drug specimens and subsequent new specimens was evaluated and automated. Relational, temporal and spatial analyses were subsequently used to gain an insight into illicit drug markets. Relational analysis identified clusters of seizures central to the network. Temporal analysis then provided insights into the behaviour of distribution markets, specifically the emergence and extinction of certain clusters of seizures over time. Spatial analysis aided the understanding of the inter-jurisdictional nature of illicit drug markets. These analyses allowed for the generation of strategic intelligence relating to when and where the Australian methylamphetamine illicit drug market was the most active. Additionally, the strategic level trends identified clusters of seizures that were worth investigating further. These clusters were explored through a case study, which exploited additional chemical profiling data to provide drug market knowledge at an operational level. In turn, the intelligence produced at various levels could allow relevant law enforcement agencies to take necessary measures in disrupting markets.

Illicit drug profiling practices in Finland: An exploratory study about end users' perceptions

Illicit drug profiling (i.e. chemical and/or physical profiling) to compare and relate illicit drugs samples has been actively used in routine case work at the National Bureau of Investigation (NBI) in Finland. This preliminary and exploratory work reviews NBI's illicit drug profiling practices. Particular emphasis is put on communication of forensic results and how the NBI has promoted the use of forensic data in an intelligence perspective by establishing a case coordination service. Moreover, our study evaluates the comprehension, integration and usefulness of illicit drug profiling from end users' point of view by means of an online survey and face-to-face interviews. Findings are compared with theoretical aspects as described in literature. Results show that in the Finnish context illicit drug profiling is used and useful in the investigation and in court. From end users' perspective, real practical relevance relies in its use as intelligence during the investigation. However, to be truly useful, illicit drug profiling results must be communicated promptly during the investigation, with sufficient clarity and interpreted correctly by end users. Factors influencing the integration of illicit drug profiling in the forensic process are addressed.

Interpreting the link value of similarity scores between illicit drug specimens through a dual approach, featuring deterministic and Bayesian frameworks

Illicit drug trafficking and in particular amphetamine-type stimulants continue to be a major problem in Australia. With the constant evolution of illicit drugs markets, it is necessary to gain as much knowledge about them to disrupt or reduce their impact. Illicit drug specimens can be analysed to generate forensic intelligence and understand criminal activities. Part of this analysis involves the evaluation of similarity scores between illicit drug profiles to interpret the link value. Most studies utilise one of two prominent score evaluation approaches, i.e. deterministic or Bayesian. In previous work, the notion of a dual approach was suggested, which emphasised the complementary nature of the two mentioned approaches. The aim of this study was to assess the operational capability of a dual approach in evaluating similarity scores between illicit drug profiles. Utilising a practical example, link values were generated individually from both approaches, then compared in parallel. As a result, it was possible to generate more informed hypotheses, relating to specimen linkage, due to the greater wealth of information available from the two approaches working concurrently. Additionally, it was shown that applying only one approach led to less information being generated during analysis as well as potentially important links between illicit drug specimens being missed.

A review of the newly identified impurity profiles in methamphetamine seizures

Forensic intelligence of synthetic illicit drugs suffers a problem of continuous introduction of new synthetic methods, modification of the existing routes of manufacture, and adulterations practiced by criminal networks. Impurity profiling has been indispensable in methamphetamine intelligence based on precursors, synthetic routes, and chemical modifications during trafficking. Law enforcement authorities maintain the credibility and integrity of intelligence information through constant monitoring of the chemical signatures in the illicit drug market.

Changes in the synthetic pattern result in new impurity profiles that are important in keeping valuable intelligence information on clandestine laboratories, new synthetic routes, trafficking patterns, and geographical sources of illicit Methamphetamine.

This review presents a critical analysis of the methamphetamine impurity profiles and more specifically, profiling based on impurity profiles from Leuckart, Reductive amination, Moscow, Emde, Nagai, Birch, Moscow route; a recent nitrostyrene route and stable isotope signatures. It also highlights the discrimination of ephedrine from pseudoephedrine sources and the emerging methamphetamine profiling based on stable isotopes.

When does the cutting of cocaine and heroin occur? The first large-scale study based on the chemical analysis of cocaine and heroin seizures in Switzerland

BACKGROUND

Illicit drug profiling can provide knowledge about illicit drug markets, informing on the level of distribution and its evolution in space and time. Illicit drug profiling is usually limited to impurities originally present in the illicit drug (e.g. alkaloids, co-extracted compounds or by-products). However, the benefit of a comprehensive analysis of cutting agents in drug seizures for law enforcement agencies, intelligence and health policy has not been thoroughly investigated in the literature and is the focus of this research.

AIM

This research aims at assessing when and how cutting (i.e. adulteration and dilution) occurs in the supply chain by analysing cocaine and heroin seizures made between 2006 and 2015 in Switzerland.

METHODS

Cocaine and heroin seizures made along the supply chain by law enforcement agencies in the Western region of Switzerland were investigated for adulteration and dilution. A total number of 7841 cocaine and 3476 heroin specimens coming from 1341 and 721 seizures, respectively, were analysed.

RESULTS

The results show that, for both illicit drugs, adulteration and/or dilution occur before arrival into Switzerland as well as in Switzerland. While cocaine is adulterated and diluted, heroin is only adulterated. Interestingly, the same mixture of adulterants (i.e. caffeine-paracetamol) is used to cut heroin at each step in the supply chain.

CONCLUSION

Gaining knowledge about adulteration and dilution at different stages in the supply chain enhances our understanding of drug markets. It also highlights differences along the supply chain and in the distribution of both drugs in Switzerland.

Forensic intelligence on illicit markets: The example of watch counterfeiting

Counterfeit luxury fashion goods have rarely been the subject of scientific studies. Very little is known about the mechanisms of this illicit market despite the apparent prevalence and their adverse consequences. Counterfeit watches remain one of the preferred targets in the luxury goods segment. The study of marks or traces in a forensic intelligence perspective can contribute to an improved understanding of the phenomenon. The aim of our research was to highlight different types of links that can be drawn between specimens of counterfeit watches, to carry out a thorough study of the information conveyed by the revealed links, to study their complementarity and to get an understanding of the intelligence that can be produced from these pieces of information. Thirty-five counterfeit watches of a commonly counterfeit watch brand including seven popular models were studied in this research. Chemical and physical links were found that corroborated existing knowledge and also revealed new connections between different seizures or specimens. The comparison of chemical and physical features combined with spatiotemporal information on the seized watches enabled us to produce intelligence disclosing possible aspects of the structure and the organisation of production and distribution channels. We were able to reveal or confirm links between watches that were previously unknown or uncertain and demonstrated the interconnection of all watches on a chemical and/or physical level, suggesting an overhead organised network with substructures. Despite the limited set of specimens that was considered, this study illustrates that forensic intelligence on this illicit market can be used to support consistent decision-making from all the key-players involved in the anti-counterfeiting process.

Deliberate fires: From data to intelligence

Deliberate fires are a very common problem affecting all countries around the world. They create a high sense of insecurity within communities, consuming and straining many resources (human and financial). Yet, despite various attempts, significantly tackling and reducing deliberate fires has remained largely ineffective, mainly due to the case-by-case approach implemented in responding to these incidents. Drawing on the repetitive nature of some types of deliberate fires, it was shown that adopting an intelligence-based approach is promising in tackling and reducing repetitive deliberate fires. This paper presents a two-fold procedure developed to produce intelligence on a dataset of fire events that were either deliberate or unknown in origin. Firstly, through the creation of a relevant dataset (which is a peculiar problem due to the specificities of the event of fire) and secondly through the application of specific analyses. This procedure was implemented on a dataset of fire events collated from a nine-year period in the State of Geneva, Switzerland. Results show that rudimentary data and simple processing can already generate valuable intelligence, often unsuspected until then. These results provide responding agencies with a clearer understanding of the problem, which can also support their decision-making process. This study proposes the basis for the development of an integrated real-time intelligence process. Such a process would allow the systematic and real-time monitoring of fire events in general and deliberate fires in particular by providing an immediate view of the problem, detecting recurrent events and revealing linkages between cases indicating repetitions. In terms of policies and governance, such a study should encourage institutions that deal with fires to collectively reshape their objectives, share data and analyses, and coordinate their actions to reduce harm.

Forensic gait analysis - Morphometric assessment from surveillance footage

Following the technological rise of surveillance cameras and their subsequent proliferation in public places, the use of information gathered by such means for investigative and evaluative purposes sparked a large interest in the forensic community and within policing scenarios. In particular, it is suggested that analysis of the body, especially the assessment of gait characteristics, can provide useful information to aid the investigation. This paper discusses the influences upon gait to mitigate some of the limitations of surveillance footage, including those due to the varying anatomical differences between individuals. Furthermore, the differences between various techniques applied to assess gait are discussed, including biometric gait recognition, forensic gait analysis, tracking technology, and marker technology. This review article discusses the limitations of the current methods for assessment of gait; exposing gaps within the literature in regard to various influences impacting upon the gait cycle. Furthermore, it suggests a 'morphometric' technique to enhance the available procedures to potentially facilitate the development of standardised protocols with supporting statistics and database. This in turn will provide meaningful information to forensic investigation, intelligence-gathering processes, and potentially as an additional method of forensic evaluation of evidence.

Forensic drug intelligence and the rise of cryptomarkets. Part II: Combination of data from the physical and virtual markets

Technology provides new ways to access customers and suppliers while enhancing the security of off-line criminal activity. Since the first cryptomarket, Silk Road, in 2011, cryptomarkets have transformed the traditional drug sale by facilitating the creation of a global network of vendors and buyers. Due to the fragmented nature of traces that result from illegal activities, combining the results of concurrent processes based on traces of different nature should provide supplementary benefit to understand the drug market. This article compares the data of the Australian virtual market (in particular data extracted from cryptomarkets) to the data related to traditional market descriptors, namely national seizures and arrests, prevalence data, shipping countries of seized post shipments as well as outcomes of specific surveys targeting users' behaviour online. Results revealed the domestic nature of the online illicit drug trade in Australia which is dominated by amphetamine-type substances (ATS), in particular methylamphetamine and cannabis. These illicit drugs were also the most seized drugs on the physical market. This article shows that the combination of different information offers a broader perspective of the illicit drug market in Australia and thus provides stronger arguments for policy makers. It also highlights the links between the virtual and physical markets.

Using handwriting to infer a writer's country of origin for forensic intelligence purposes

Forensic science has traditionally focused the majority of its resources and objectives towards addressing Court-related questions. However, this view restricts the contribution of forensic science to one process and results in a loss of information as the investigative and intelligence roles are largely neglected. A forensic science discipline suffering from this imbalance is handwriting examination, which may be characterised as a time consuming and subjective process that is mostly carried out towards the end of the investigation for the purpose of judicial proceedings. Individual and habitual characteristics are the major handwriting features exploited, however alternate information concerning the author's native language could potentially be used as a key element in an intelligence framework. This research focussed on the detection of characteristics that differentiate Vietnamese and English Australian writers based on their English handwriting. The study began with the extraction of handwriting characteristics from the writing of people from the two populations. The data was analysed using a logistic regression model and a classification and regression tree (CRT). Each recognised four class characteristics that were capable of distinguishing between the two nationalities. The logistic regression and CRT models were both capable of correctly predicting 93% of cases. Their predictive capabilities were then tested and supported using blind exemplars in order to mirror casework settings. It appeared that when using their respective class characteristics, the two models were capable of differentiating English Australians from Vietnamese in the data set. This proof of concept research demonstrated the plausibility of exploiting this additional information from a handwriting trace and taking advantage of it in an intelligence-led framework.

Forensic drug intelligence and the rise of cryptomarkets. Part I: Studying the Australian virtual market

Analysing and understanding cryptomarkets is essential to become proactive in the fight against the illicit drug trade. Such a research seeks to combine a diversity of indicators related to the virtual (darknet markets) and physical (the traditional "offline" market) aspects of the illicit drug trade to provide information on the distribution and consumption as well as to assess similarities/differences between the virtual and physical markets. This study analysed data that had previously been collected on cryptomarkets from December 2013 to March 2015. In this article, the data was extracted from two marketplaces, Evolution and Silk Road 2, and analysed to evaluate the illicit drug trade of the Australian virtual market (e.g. information about the supply and demand, trafficking flows, prices of illicit drugs and market share) and highlight its specificities. The results revealed the domestic nature of the virtual Australian illicit drug trade (i.e. Australian sellers essentially ship their products to local customers). This may explain the coherence between supply and demand. Particularly, the virtual Australian illicit drug trade is dominated by amphetamine-type substances (ATS), mainly methamphetamine and 3,4-methylenedioxymethamphetamine (MDMA), and cannabis. Australia, as a shipping country, accounts for half of the methamphetamine offered and purchased on Silk Road 2. Moreover, it was observed that the online price fixed by Australian sellers for the considered illicit drugs is higher than for any other shipping countries, which is in line with previous studies. Understanding the virtual and physical drug market necessitates the integration and fusion of different perspectives to capture the dynamic nature of drug trafficking, monitor its evolution and finally improve our understanding of the phenomenon so policy makers can make informed decisions.

The use of handwriting examinations beyond the traditional court purpose

Traditionally, forensic science has predominantly focused its resources and objectives on addressing court related questions. However, this view restricts the contribution of forensic science to one function and results in lost opportunities as investigative and intelligence roles are often overlooked. A change of perspective and expansion of the contributions of forensic science is required to take advantage of the benefits of abductive and inductive thought processes throughout the investigative and intelligence functions. One forensic discipline that has the potential to broaden its traditional focus is handwriting examination. Typically used in investigations that are focused on both criminal and civil cases, the examination procedure and outcome are time consuming and subjective, requiring a detailed study of the features of the handwriting in question. Traditionally, the major handwriting features exploited are characteristics that are often considered individual (or at least highly polymorphic) and habitual. However, handwriting can be considered as an information vector in an intelligence framework. One such example is the recognition of key elements related to the author's native language. This paper discusses the traditional method generally used around the world and proposes a theoretical approach to expand the application of handwriting examination towards gaining additional information for intelligence purposes. This concept will be designed and tested in a future research project.

Image processing of false identity documents for forensic intelligence

Forensic intelligence has recently gathered increasing attention as a potential expansion of forensic science that may contribute in a wider policing and security context. Whilst the new avenue is certainly promising, relatively few attempts to incorporate models, methods and techniques into practical projects are reported. This work reports a practical application of a generalised and transversal framework for developing forensic intelligence processes referred to here as the Transversal model adapted from previous work. Visual features present in the images of four datasets of false identity documents were systematically profiled and compared using image processing for the detection of a series of modus operandi (M.O.) actions. The nature of these series and their relation to the notion of common source was evaluated with respect to alternative known information and inferences drawn regarding respective crime systems. 439 documents seized by police and border guard authorities across 10 jurisdictions in Switzerland with known and unknown source level links formed the datasets for this study. Training sets were developed based on both known source level data, and visually supported relationships. Performance was evaluated through the use of intra-variability and inter-variability scores drawn from over 48,000 comparisons. The optimised method exhibited significant sensitivity combined with strong specificity and demonstrates its ability to support forensic intelligence efforts.

The interface between forensic science and technology: how technology could cause a paradigm shift in the role of forensic institutes in the criminal justice system

In this paper, the importance of modern technology in forensic investigations is discussed. Recent technological developments are creating new possibilities to perform robust scientific measurements and studies outside the controlled laboratory environment. The benefits of real-time, on-site forensic investigations are manifold and such technology has the potential to strongly increase the speed and efficacy of the criminal justice system. However, such benefits are only realized when quality can be guaranteed at all times and findings can be used as forensic evidence in court. At the Netherlands Forensic Institute, innovation efforts are currently undertaken to develop integrated forensic platform solutions that allow for the forensic investigation of human biological traces, the chemical identification of illicit drugs and the study of large amounts of digital evidence. These platforms enable field investigations, yield robust and validated evidence and allow for forensic intelligence and targeted use of expert capacity at the forensic institutes. This technological revolution in forensic science could ultimately lead to a paradigm shift in which a new role of the forensic expert emerges as developer and custodian of integrated forensic platforms.

The use of fingerprints available on the web in false identity documents: Analysis from a forensic intelligence perspective

Fingerprints present in false identity documents were found on the web. In some cases, laterally reversed (mirrored) images of a same fingerprint were observed in different documents. In the present work, 100 fingerprints images downloaded from the web, as well as their reversals obtained by image editing, were compared between themselves and against the database of the Brazilian Federal Police AFIS, in order to better understand trends about this kind of forgery in Brazil. Some image editing effects were observed in the analyzed fingerprints: addition of artifacts (such as watermarks), image rotation, image stylization, lateral reversal and tonal reversal. Discussion about lateral reversals' detection is presented in this article, as well as suggestion to reduce errors due to missed HIT decisions between reversed fingerprints. The present work aims to highlight the importance of the fingerprints' analysis when performing document examination, especially when only copies of documents are available, something very common in Brazil. Besides the intrinsic features of the fingermarks considered in three levels of details by ACE-V methodology, some visual features of the fingerprints images can be helpful to identify sources of forgeries and modus operandi, such as: limits and image contours, fails in the friction ridges caused by excess or lack of inking and presence of watermarks and artifacts arising from the background. Based on the agreement of such features in fingerprints present in different identity documents and also on the analysis of the time and location where the documents were seized, it is possible to highlight potential links between apparently unconnected crimes. Therefore, fingerprints have potential to reduce linkage blindness and the present work suggests the analysis of fingerprints when profiling false identity documents, as well as the inclusion of fingerprints features in the profile of the documents.