Admissibility of Digital Photographs in Criminal Trials



Similar documents
Digital Image Integrity

CERTIFIED FOR PUBLICATION APPELLATE DIVISION SUPERIOR COURT OF CALIFORNIA COUNTY OF ORANGE. THE PEOPLE, CASE No

1. Redistributions of documents, or parts of documents, must retain the SWGIT cover page containing the disclaimer.

Use of Check Images By Customers of Financial Institutions. Version Dated: July 14, 2006

TYPES OF EXPERTS. Psychological/Psychiatric Experts are used to determine the mental health of the parties and/or children.

The Indiana Coalition Against Domestic Violence

When E-Discovery Becomes Evidence

Legal view of digital evidence

Overview of Computer Forensics

Simple Computer Backup

Admissibility of Writings ( s, Text Messages, etc.) **************

UNITED STATES COURT OF APPEALS FOR THE NINTH CIRCUIT

IAPE STANDARDS SECTION 16 DIGITAL EVIDENCE

Spoliation of Evidence. Prepared for:

Digital Photography for the Fire Investigator

1. Redistributions of documents, or parts of documents, must retain the SWGIT cover page containing the disclaimer.

Let us now welcome Mr. John Twomey... Digital Photography and the Fire Investigator 1 CFITrainer.net

Hands-On How-To Computer Forensics Training

Computer Forensics: an approach to evidence in cyberspace

Defense of Drug Possession Cases in Municipal Court. 1. What are my chances of beating a drug possession charge in Municipal Court?

SCIENTIFIC WORKING GROUP ON IMAGING TECHNOLOGIES (SWGIT)

Data Mining Minnesota Murder Victim s Cell Phone Reveals. Smoking Gun Evidence

UTILITIES BACKUP. Figure 25-1 Backup & Reindex utilities on the Main Menu

Introduction to Data Forensics. Jeff Flaig, Security Consultant January 15, 2014

You need legal help to protect your livelihood, which requires you to drive every day. Call Mr. Singh right away at

EXPERT WITNESS. When a case involves a technical issue, a person with special training

How To Use A Court Record Electronically In Idaho

Lecture outline. Computer Forensics and Digital Investigation. Defining the word forensic. Defining Computer forensics. The Digital Investigation

CHAPTER 124B COMPUTER MISUSE

MSc Computer Security and Forensics. Examinations for / Semester 1

Animal Cruelty Crime Scene Forensic Photography

Digital Forensics Tutorials Acquiring an Image with FTK Imager

EVIDENCE PHOTOGRAPHY TEST SPECIFICATIONS MODULE 1: CAMERA SYSTEMS & LIGHT THEORY (37)

UNITED STATES NAVY-MARINE CORPS COURT OF CRIMINAL APPEALS WASHINGTON, D.C.

How To Archive s On Groupwise On A Pc Or Mac Or Mac (For Mac) On A Mac Or Ipad (For Pc Or Ipa) On An Ipa Or Mac) (For Ipa).Com (For Pb

Course Forensic Science. Unit II History

BERMUDA ELECTRONIC VEHICLE-REGISTRATION ACT : 21

Electronic Discovery: Litigation Holds, Data Preservation and Production

IN THE UNITED STATES DISTRICT COURT FOR THE EASTERN DISTRICT OF PENNSYLVANIA

FLORIDA HIGHWAY PATROL POLICY MANUAL

Federal Criminal Court

Mobile Devices. New Challenges for Admissibility of Electronic Evidence

UNDERSTANDING E DISCOVERY A PRACTICAL GUIDE. 99 Park Avenue, 16 th Floor New York, New York

NUIX WHITE PAPER THE INVESTIGATIVE LAB: A MODEL FOR EFFICIENT COLLABORATIVE DIGITAL INVESTIGATIONS WHITE PAPER

How To Be A Forensic Investigator

Computer Forensics. Steps to Ensure a Successful Outcome in the U.S. Legal System. Prepared for

Computer Forensics Today

Massachusetts Digital Evidence Consortium. Digital Evidence Guide for First Responders

Computer Storage. Computer Technology. (S1 Obj 2-3 and S3 Obj 1-1)

5. MEDICAL AND CRIMINAL JUSTICE SYSTEM

How To Admit Blood Alcohol Test Results

UNITED STATES COURT OF APPEALS FOR THE NINTH CIRCUIT

Evidentiary Authentication within the EnCase Enterprise Process

PUBLISHED UNITED STATES COURT OF APPEALS FOR THE FOURTH CIRCUIT. No

Boulder Municipal Court Boulder County Justice Center P.O. Box th Street Boulder, CO

The Use of Next Generation Visual Evidence and Its Importance to Expert Witness Testimony and Presentation.

IN THE UNITED STATES COURT OF APPEALS FOR THE FIFTH CIRCUIT

NOT FINAL UNTIL TIME EXPIRES TO FILE REHEARING MOTION AND, IF FILED, DETERMINED

196 Practical Crime Scene Investigations for Hot Zones

MINNESOTA JUDICIAL TRAINING UPDATE

The Proper Acquisition, Preservation, & Analysis of Computer Evidence: Guidelines & Best-Practices

IN THE UNITED STATES DISTRICT COURT FOR THE DISTRICT OF HAWAII. J. MICHAEL SEABRIGHT United States District Judge

The Right to a Speedy Trial

Introduction to Network Security Comptia Security+ Exam. Computer Forensics. Evidence. Domain 5 Computer Forensics

GEORGIA STATE PATROL DUI Case Preparation Summer 2005

5) Familiarity of witness with exhibit for identification

A Victim s Guide to Understanding the Criminal Justice System

Crimes (Computer Hacking)

Computer Forensics in Investigations and in Court

This opinion will be unpublished and may not be cited except as provided by Minn. Stat. 480A.08, subd. 3 (2014).

Case 1:10-cr WSD-LTW Document 69 Filed 01/21/11 Page 1 of 9 UNITED STATES DISTRICT COURT FOR THE NORTHERN DISTRICT OF GEORGIA ATLANTA DIVISION

IN THE COURT OF APPEALS OF INDIANA

CRIME SCENE INVESTIGATION

SUPREME COURT OF PENNSYLVANIA COMMITTEE ON RULES OF EVIDENCE. Title Rules of Evidence [225 Pa. Code ART 1]

ARREST! What Happens Now?

But Your Honor, I Didn t Possess Those Pictures; My Computer Did.

Chain of evidence refers to the continuity of custody of material and items collected as evidence.

On the Trail of the Craigslist Killer: A Case Study in Digital Forensics

INTRODUCTION TO DIGITAL PHOTOGRAPHY

SUPERIOR COURT OF ARIZONA MARICOPA COUNTY LC DT 01/22/2015 THE HON. CRANE MCCLENNEN HIGHER COURT RULING / REMAND

FIRE INVESTIGATOR LEAD EVALUATOR HANDBOOK

Computer Forensic Capabilities

Transcription:

Admissibility of Digital Photographs in Criminal Trials Keith Hodges, Senior Instructor, Keith.Hodges@dhs.gov Federal Law Enforcement Training Center Glynco, GA 1

What we will discuss Digital photos captured by law enforcement. If seized, use your digital forensics folks. Focus on smaller departments. Legal requirements to admit digital photos. And how officers meet them. How the defense attacks our digital photos. And how we meet that challenge. Handling digital photos from scene to court. Altered and enhanced digital photos. 2

Digital Cameras The Bad Resolution not quite as good as film. But good enough in most cases. New equipment and training costs. Judges and prosecutors not digitally literate. Mistrust due to the alteration fairy. 3

Digital Cameras The Good Cheaper than equivalent film cameras. Can see results immediately. Faster and cheaper to share photos. Reduced printing and processing costs. Film is free. Usually easier to use. 4

Are Digital Photos Admissible? Yes. No court has held a digital photo is INadmissible just because it is digital. We are aware of no authority, and appellant cites none, for the proposition that the procedure for admitting pictures should be any different when they were taken by a digital camera. Almond v. State, 274 Ga. 348 (Ga. 2001)... we do not agree that this court should impose a higher burden of proof for the admissibility of digital photographs merely because digital images are easier to manipulate. Owens v. State, 363 Ark. 413, 421 (Ark. 2005) 5

This says it all When, as here, the. photograph is generated as a digital image. the judge must determine whether the image fairly and accurately presents what it purports to be, whether it is relevant, and whether its probative value outweighs any prejudice to the other party. Renzi v. Paredes, 452 Mass. 38, 52 (Mass. 2008) 6

Requirements to Admit Digital Photo Like ALL evidence. Relevant (tends to prove something) And probative value does not substantially outweigh prejudicial effect. Authentic (a foundation) Meets Best Evidence requirements 7

Authentication = Foundation FRE 901(a). The requirement of authentication or identification as a condition precedent to admissibility is satisfied by evidence sufficient to support a finding that the matter in question is what its proponent claims. This is photo is a fair and accurate portrayal of X. 8

Elements of a Foundation 1. The witness is familiar with the object or scene. 2. The witness can explain his/her familiarity. 3. The witness recognizes what is depicted. 4. The photo is a fair accurate true good - depiction of the scene. 5. (No alterations or deletions.) 6. (Enhancements documented.) (Imwinkelried, Evidentiary Foundations) 9

The Foundation Issue Claims the photo has been altered. The alteration fairy defense. Digital photos... Can be easily altered (accidentally or on purpose). Can be deleted (accidentally or on purpose). The above can be hard to detect. Whether realistic unimportant... Judges and juries believe it so. 10

Claims of Alteration Party must offer some evidence of alteration.. we further disagree. that expert testimony of no alteration was required when there was no indication that the still photographs had been enhanced. or altered in any way. Owens v. State, 363 Ark. 413, 421 (Ark. 2005) The fact that it is possible to alter data contained in a computer is plainly insufficient to establish untrustworthiness. The mere possibility that the logs may have been altered goes only to the weight of the evidence not its admissibility. [Alteration of business data]. United States v. Bonallo, 858 F.2d 1427, 1436 (9th Cir. Or. 1988) 11

Weight, and not admissibility Possibility of alteration with no supporting evidence doesn t go to admissibility. It can go to weight. That is, the jury can buy into the alteration fairy. Solution: good foundation testimony. I did not alter, and no one else did. Fair and accurate representation. 12

How bout this??... a mere claim that photographs may be altered should not bar their admission. The proponent is not required to prove a negative. United States v. Harris, 55 M.J. 433, 440 (C.A.A.F. 2001) 13

Is this altered? (Expert required) 14

1 2 15

16

17

Defeating the Defense Reduce opportunities for alteration or deletion (accidental or intentional). Establish a SIMPLE procedure to handle digital photos. And follow it. 18

Opportunities to Alter or Delete Staged scene before photo taken. When photo taken (cropping, lighting, angle, etc.) Right after photo taken Deletion from camera media. Alteration of original media in a camera or computer. While transferring images from camera media to other media. While photo is in later possession of law enforcement Evidence room. On a computer (and LAN). In officer s possession. Credibility Credibility + Procedure 19

Handling Overview GOAL: : Move images to stable, unalterable media ASAP, by: Limiting access to the flash media. Not deleting or altering images. Keeping media away from electronic devices. Burning all images to CD-R/DVD R/DVD-R. R. Confirming burn. Documentation. 20

Recommendation 1 One photographer handles the camera. (or at least, keep media cards separate) So, the witness can testify: I had the camera, and I never altered or deleted any photos. 21

Recommendation 2 Do not delete, alter, or print photos at any time before duplication. (Rotating photo in camera can be an alteration) So, the witness can testify: All the pictures I took, good and bad, are right here. I I did not delete or alter any photos. 22

Recommendation 3 Keep media away from devices that can alter it (until duplication is finished.) 23

Recommendation 4 Immediately burn to quality CD-R / DVD-R directly from media using a write blocker. Putting on hard drive first creates alteration opportunities. Write blocker prevents alteration. Finalized CD-R / DVD-R can t be altered. 24

25

26

Recommendation 5 Before reformatting media card, confirm burn. (Visual plus CRC or hash) Not recommended: Encryption software. Watermarking software. See SWGIT guidelines: www.theiai.org 27

Recommendation 6 Make working copies now from either media card or the CD / DVD. (Burn and confirm). 28

Recommendation 7 Label the CD / DVD and document what Don t use ball point. Use Sharpie type of soft tip, permanent marker. Mark in spindle area. you did. 29

Digital Evidence Custodians Not all are computer literate. Designate digital evidence custodian. (DEC) Bag and tag flash media for DEC. DEC makes the CD / DVD. Simple chain of custody. Not a full time job. 30

31

Current Issues Are CDs and DVDs suitable for archiving? Use secure, RAID servers instead? CDs and DVDs can be damaged. Why not an automated process? 32

Best Evidence Rule (FRE 1001) Bad name it doesn t mean what it says. Original recording / writing rule. Original photo rule. Original data rule. To prove the contents of a writing, recording, photo or data, we must have the original. Some exceptions. 33

What is an original Legal definition is not always the same as the technical. Photo: the negative or print there from. Data: any printout or other output readable by sight shown to reflect the data accurately. Prints are originals. But think of data as the negative. So, preserve the data (CD or DVD). 34

Duplicate = Original Duplicate = original, unless: Genuine question as to the original, or Unfair. Properly made copies of data equivalent to an original. That produced by mechanical or electronic rerecording, or by chemical reproduction, or other equivalent techniques which accurately reproduces the original. 35

Alteration versus Enhancement Alteration: When the content of the photo is changed. We don t alter. Enhancement: No alteration. What is in the image is made easier to see. Still a fair and accurate portrayal. Traditional versus non-traditional enhancements. 36

Enhancements Image enhancement is any process intended to improve the visual appearance of an image. This includes processes that have a direct counterpart in the conventional silver-based photographic laboratory and those that can be accomplished only by using a computer. SWGIT Guidelines, Recommendations and Guidelines for the Use of Digital Image Processing in the Criminal Justice System. 37

Traditional Enhancements Traditional enhancement techniques have direct counterparts in traditional darkrooms. They include: brightness and contrast adjustment, color balancing, cropping, and dodging and burning. These traditional and acceptable forensic techniques are used to achieve an accurate recording of an event or object. SWGIT Guidelines, Recommendations and Guidelines for the Use of Digital Image Processing in the Criminal Justice System 38

Enhanced Images in Court Always have unenhanced image available. Be prepared to replicate the enhancement process. When possible, use software that records the enhancement process. United States v. Seifert, 351 F. Supp. 2d 926, 927 (D. Minn. 2005), aff d 445 F.3d 1043 (8th Cir. Minn. 2006) (dicta) 39

Non-Traditional Enhancements (Experts only!!) Removing noise or clutter. Other filtering. Sharpening, edge enhancement, etc. Certain color balancing. Need to be able to replicate the enhancement. SWGIT (FBI Scientific Working Group on Imaging Technology.) www.theiai.org 40

Admissibility of Digital Photographs in Criminal Trials Keith Hodges, Senior Instructor, Keith.Hodges@dhs.gov Federal Law Enforcement Training Center Glynco, GA 41