And each day that a computer or mobile device sits in a police department's backlog waiting to be processed is one that a criminal remains on the street.
Electronic devices routinely contain evidence related in some way to the planning, coordination, commission or witnessing of crimes. And the digital information contained in seized devices is typically sent to specialists in digital forensics laboratories to be processed.
Explosion of digital forensic evidence
Today digital forensics laboratories alone can no longer manage the sheer volume of digital evidence in criminal cases. The backlog of caseloads from law enforcement agencies has grown from weeks to months worldwide. Digital forensic specialists cannot be trained fast enough and the number of specialists required to analyze the mountains of digital evidence in common crimes is simply beyond budget constraints.
According to Luc Beirens, Superintendent of the Federal Computer Crime Unit (FCCU) in Belgium, “the number of seized computers is a multitude of the number that was seized ten years ago. Every person that we search probably owns a desktop computer, a laptop, an iPad, and a smart phone and in addition you may see a pile of external hard disks. All those systems need to be investigated.”
But of equal or perhaps more importance is that sending digital evidence to specialists takes the critical parts of criminal investigations out of the hands of investigators.
Typically, the digital information related to a case requires the detective’s knowledge to determine what information may be relevant and what clearly is not. New tools to triage digital evidence in the field exist, but the capabilities are limited and investigators must still deal with the difficulties of explaining evidence to the digital forensic specialists.
These specialists can examine evidence— when they can get to it—but not in the context of the case or how digital traces relate to other evidence. Not even investigators can know exactly how digital evidence will emerge or its value to a case until they see it themselves.
A targeted, local approach to digital investigations
The Police Zone Schelde-Leie in the East Flanders province of Belgium recently caught a thief red-handed in a store. He defended himself with the classic excuse—he had never stolen anything and he would never do it again. No stolen goods were found during a search of his home and normally the police would have to swallow his excuse. But this time was different.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.