• Journal of forensic and investigative science
• /
• v.1 no.2
• /
• pp.5-19
• /
• 2006

Data mining is an information extraction activity to discover hidden facts contained in databases. Using a combination of machine learning, statistical analysis, modeling techniques and database technology, data mining finds patterns and subtle relationships in data and infers rules that allow the prediction of future results. Typical applications include market segmentation, customer profiling, fraud detection, evaluation of retail promotions, and credit risk analysis. Law enforcement agencies deal with mass data to investigate the crime and its amount is increasing due to the development of processing the data by using computer. Now new challenge to discover knowledge in that data is confronted to us. It can be applied in criminal investigation to find offenders by analysis of complex and relational data structures and free texts using their criminal records or statement texts. This study was aimed to evaluate possibile application of data mining and its limitation in practical criminal investigation. Clustering of the criminal cases will be possible in habitual crimes such as fraud and burglary when using data mining to identify the crime pattern. Neural network modelling, one of tools in data mining, can be applied to differentiating suspect's photograph or handwriting with that of convict or criminal profiling. A case study of in practical insurance fraud showed that data mining was useful in organized crimes such as gang, terrorism and money laundering. But the products of data mining in criminal investigation should be cautious for evaluating because data mining just offer a clue instead of conclusion. The legal regulation is needed to control the abuse of law enforcement agencies and to protect personal privacy or human rights.

• Journal of Pharmaceutical Investigation
• /
• v.4 no.4
• /
• pp.17-25
• /
• 1974

1. Neutron acivation analysis of arsenic contained in Korean human liver was studied in the view point of forensic chemistry, using 12 corpses. A sample of 1g was irradiated for 30 mins. in a neutron flux of $1.2{\times}10^{12}n/cm^2/sec$, followed by nitric-sulfuric acid digestion and then by Gutzeit separation. Radio activity was detected by it's scintillation counter. The arsenic content in the liver was found to be $0.01{\mu}g/g$ to $0.15{\mu}g/g$. 2. A rapid and convenient method for the radiochemical determination of minerals by neutron activation analysis was established. After neutron irradiation to the standard soln. of Cu and Mn in pneumatic tube (neutron flux : $1.2{\times}10^{12}n/cm^2/sec$), Cu and Mn were determined by estimating the ratio of the widths under energy peak area in ${\gamma}-ray-spectrogram$. When the standard soln. of Mn and Cu is irradiated for 15 mins. to 18 hrs., recovery test shows that the relative errors are 5.1% and 4.5% for copper and manganese, respectively.

• Analytical Science and Technology
• /
• v.5 no.4
• /
• pp.443-454
• /
• 1992

The analysis, hydrolysis mechanism, oxidation, reduction, thermal decomposition and metabolism of irritant materials such as chloroacetophenone isomers, bromophenylacetonitrile isomers, o-chlorobenzylidenemalononitrile(CS), and ethylisothiocyanate, etc. are interested in forensic science. We had studied hydrolysis of CS in 10% MeOH-$H_2O$ and 10% dioxane-$H_2O$ at pH 1.0~11.0 and various temperatures. As a result, we identified o-chlorobenzaldehyde and malononitrile that were formed by hydrolysis of CS by using gas chromatography/mass spectrometry, UV/Vis spectrometry, and polarographic method.

• Analytical Science and Technology
• /
• v.25 no.5
• /
• pp.284-291
• /
• 2012

Bloody fingerprint is a very important evidence. In this study, we confirmed the enhancement effects of ninhydrin, leucocrystal violet (LCV), fuchsin acid, iodine and dimethylaminocinnamaldehyde (DMAC) on bloody fingerprints which were deposited on paper. Bloody fingerprint were deposited on paper sequentially and used after drying at room temperature. If a ridge of bloody fingerprint was clear, ninhydrin and LCV was the most effective but was not good for invisible ridge. Fuchsin acid reagent dyed paper surface so that the contrast of enhanced bloody fingerprint was decreased. Although bloody fingerprint was enhanced with iodine reagent, but the developed color was very weak after reaction. We thought that the enhancement effect of iodine to bloody fingerprint was negligible. Also, the enhancement effect of DMAC reagent to relatively clear bloody fingerprint was not good. However, it was very effective to faint or invisible ridge. By washing with methanol, contrast of enhanced bloody fingerprint was increased.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.32 no.6
• /
• pp.1113-1120
• /
• 2022

Recently, the investigation has been difficult due to the emergence of messengers that encrypt and store data for the purpose of protecting personal information and provide services such as end-to-end encryption with a focus on security. Accordingly, the number of crime cases using security messengers is increasing, but research on data decoding for security messengers is needed. Element security messengers provide end-to-end encryption functions so that only conversation participants can check conversation history, but research on decoding them is insufficient. Therefore, in this paper, we analyze the instant messenger Element, which provides end-to-end encryption, and propose a plaintext verification of the history of encrypted secure chat rooms using decryption keys stored in the Windows Credential Manager service without user passwords. In addition, we summarize the results of analyzing significant general and secure chat-related artifacts from a digital forensics investigation perspective.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.6 no.1
• /
• pp.98-115
• /
• 2012

New trend called ubiquitous leads the recent business by standardization and integration. It should be the main issue how to guarantee the integration and accountability on each business, especially in mission critical system which is mainly supported by M2M (Machine to Machine) control mechanism. This study is from the analysis of digital forensics case study that is from the M2M Sensing Control Mechanism problem of the "Imjin River" case in 2009, where a group of family is swept away to death by water due to M2M control error. The ubiquitous surroundings bring the changes in the field of criminal investigation to real time controls such as M2M systems. The needs of digital forensics on M2M control are increasing on every crime scene but we suffer from the lack of control metrics to get this done efficiently. The court asks for more accurately analyzed results accounting high quality product development design. Investigators in the crime scene need real-time analysis against the crime caused by poor quality of mission critical systems. It seems to be every need of Real-Time-Enterprise, so called ubiquitous society on the case. We try to find the efficiency and productivity in discovering non-functional design defects in M2M convergence products focusing on three metrics in study model with quick implementation. Digital forensics system in present status depends on know-how of each investigator and is hard to expect professional analysis on every field. This study set up a hypothesis "Co-working of professional investigators on each field will qualify Performance and Integrity" especially in mission critical system such as M2M and suggests "Online co-work analysis model" to efficiently detect and prevent mission critical errors in advance. At the conclusion, this study proved the statistical research that was surveyed by digital forensics specialists around M2M crime scene cases with quick implementation of dash board.

• Journal of Digital Forensics
• /
• v.12 no.3
• /
• pp.39-54
• /
• 2018

Recently, discussions for the eradication of illegal shooting have been carried out in a socially-oriented way. The government has established comprehensive measures to eradicate cyber sexual violence crimes such as illegal shooting. Although the social interest in illegal shooting has increased, the illegal film shooting case is evolving more and more due to the development of information and communication technology. Applications that can hide confused videos are constantly circulating around the market and community sites. As a result, field investigators and professional analysts are experiencing difficulties in collecting and analyzing evidence. In this paper, we propose an evidence collection and analysis framework for illegal shooting cases in order to give practical help to illegal shooting investigation. We also proposed a system that can detect hidden applications, which is one of the main obstacles in evidence collection and analysis. We developed a detection tool to evaluate the effectiveness of the proposed system and confirmed the feasibility and scalability of the system through experiments using commercially available concealed apps.

• Analytical Science and Technology
• /
• v.17 no.3
• /
• pp.211-216
• /
• 2004

Commercial one-step rapid fecal occult blood (FOB) kit which was used as a screening test to detect traces of blood in stool samples was evaluated for the feasibility of the forensic identification of human blood. The sensitivity was determined and compared with the conventional Leucomalichite green (LMG) method. In addition, the specificity of the kit and the effects of various chemicals and environmental factors were examined. FOB kit was specific for human hemoglobin and more sensitive than LMG test (approximately 100 times). FOB kit showed positive band using at least 1,000,000-fold diluted human blood. The antigen was very stable regardless of storage temperature and boiling. The positive reaction was not affected by LMG and Luminol, the traditional tests for identification of bloodstain. As a results, FOB test kit could be effectively applied to identification of human blood at crime scene and crime laboratories.

• Analytical Science and Technology
• /
• v.20 no.2
• /
• pp.147-154
• /
• 2007

Sweat contents were investigated for using those data to forensic purpose. The experiments of identifying sweat contents were as follow: 1) measurement of amino acids (aspartic acid, serine, glycine etc) by HPLC, 2) anions ($Cl^-$, $F^-$, and $SO{_4}^{2-}$) by IC and 3) trace elements (Cu, Zn, Li, B, etc.) by ICP-MS. Amino acid contents in sweat are varied with individual samples and glycine, threonine, alanine, valine and histidine are detected as the prime one. The detected anions are $Cl^-$(2167~4073 ppm) and $F^-$(454~582 ppm) mostly. Trace elements of Rb, Zn and Cu are detected and those concentrations are relatively very high. The compositions of sweat can be influenced by various factors (diet, anthropometric, characteristics, physical fitness, age, gender and the state of the health).

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.17 no.11
• /
• pp.2595-2601
• /
• 2013

Currently, under being related with confiscation method of digital store medium from the court of justice, "the sorting confiscation method of principle, the exceptional medium confiscation method" from in section3 no.106 of the criminal procedure code disregard the actual fields of investigation. What is more, there are many difficulties to execute cases by observing this for the achievement of confiscation purpose. At this point, I present the problems of the present confiscation search method and the desirable scene confiscation search method and the improvement program under the new technology circumstance.