At the Information Technology Section we work with information carriers of all types, from examinations of writing, documents and banknotes to technical examination of data, sound and images.
- 1 av 8
- 2 av 8
- 3 av 8
- 4 av 8
- 5 av 8
- 6 av 8
- 7 av 8
- 8 av 8
Information Technology Section
- Completed cases: 2,100 (2018)
- Employees: 68 (December 2018)
In the field of computer forensics NFC carries out acquisition of information that will be used in complex analysis, or where the storage media is corrupted and therefore needs to be repaired in order for data to be accessible. Data analysis includes complex investigations where the questions are complex and/or the data volume is very large. This places high demands on the equipment in the form of servers for processing data and storage space.
Mobile Phone Forensics
The activities in the field of mobile phone forensics are mainly focused on acquisition and interpreting data from heavily damaged or locked mobile phones. These types of cases are still increasing. The work requires expertise on various phone models and how they can be investigated. Almost all mobile phone models must be handled in their own way. Acquisition is often done through so-called chip-off, i.e. directly from a desoldered memory chip. It is necessary to have a variety of tools to perform these investigations. A collaborative project between different competencies and actors has been launched to counteract the growing problems of extracting information from mobile devices.
Due to the high availability of mobile devices and increased deployment of camera based surveillance systems; video evidence is becoming increasingly important in the investigation of many crimes. Video evidence can often give clues about activities, places and persons/objects of interest that many other types of evidence cannot. Thus, information obtained from video can be used to shed light on spatial and temporal relations between other evidence objects. This can also be used to direct investigation efforts by clarifying the circumstances surrounding the commission of a crime.
The most frequent case work includes image comparisons, height measurement in images, camera identification based on PRNU, recovery of image and video files, authenticity, audio enhancement and voice comparisons. One project during the year has focused on automatic classification of recovered images as valid or invalid by using convolutional neural network. The new method outperformed the others.
Even though our daily lives are becoming more digitized, the number of cases including banknotes, ID documents and handwriting are increasing. Questioned document examination is often important to tie a person to a crime. A questioned document can for instance be a letter, notes, driver’s license or other document whose authenticity is disputed. During the year, our international commitment has been expanded and involves both projects and educational efforts. The experiences made have been nationally applied.