TweetFollow Us on Twitter

Imaging In Forensics

Volume Number: 21 (2005)
Issue Number: 2
Column Tag: New Technology

Imaging In Forensics

by George Reis

Imaging in Forensics - An Overview

Been to a crime scene lately? Chances are that the Crime Scene Investigator was using a digital camera. Within minutes, those images may be on a shared network and available for a detective to view, photographs of the fingerprints will be enhanced and searched for matches in the state's database, and images from the security video made available to the press.

Although many agencies throughout the US have not yet moved to digital imaging, many have, and have made substantial use of some of the very cool technology available. Let's take a look at some of the technology and applications of digital cameras, computers and image processing in the forensics world. But first, let's see how this technology evolved from the early days of digital imaging forensics in the 1990's.

A Little History

I was fortunate to be among the early adopters of digital imaging in forensics. This was due as much to luck as anything else, one of those issues of being in the right place at the right time. My background was in photojournalism, and I made an early attempt at freelancing. After a few years, I found that working for someone else would make my mortgage company (and my wife) much happier, so I found work in a commercial photo lab. After a couple of years of smelling like photo chemicals, I answered a classified ad for a "Police Photographer" at the Newport Beach Police Department. That was in 1989, well before the CSI television shows.

In the early 1990's when I was first exploring how digital imaging technology could be used in forensics, information was hard to find, tools were few and far between, and Macs were still the most popular computer for graphics. The Newport Beach Police Department was a Mac lab at the time, but also ran an HP 3000 for our statistics. There wasn't a Mac at every desk, and the secretaries still used typewriters, but we did have a couple of dozen Macs distributed throughout the agency. I wanted one, and I wanted Photoshop, but it was hard to sell management on the idea. I learned to write Quiz reports using a dumb terminal on the HP 3000, and eventually was able to upgrade to an Apple Quadra 950 with a copy of Photoshop 2.5.

Digital cameras were pretty rare in those days. In 1992, Kodak introduced the DCS 200, which was a 2 megapixel digital SLR with an 80 MB hard drive built-in, that went for $10,000. Sony had the ProMavica, which was a 3 chip camera with a resolution of 640 X 480 that cost about the same. Quite a difference from the camera options and pricing of today.

Imaging and Fingerprints - First Steps

There were a handful of people in forensics experimenting with digital imaging at that time. We were mostly looking at ways to enhance fingerprints. We struggled with some very basic concepts, like how to size a digital photograph of a fingerprint to 1:1, or how to trace a fingerprint to enable it to be searched within the Automated Fingerprint Identification System (AFIS).

This need to trace fingerprints was important, as the technology for entering a latent fingerprint for a database search was relatively arcane at the time. NEC was a primary AFIS vendor. In California, most counties had a database of fingerprints of those arrested within their county, and the state maintained a database of fingerprints for the state. The computers to search these databases required an 8.5 inch floppy to boot-up, and had a low-resolution scanner built into the workstation to scan a physical tracing of a fingerprint. Searches often took two to three days to get results (results are usually within 15 minutes today). The method for creating this tracing was almost comical - a latent fingerprint would be photographed with a Polaroid MP4 copy camera to a 5X enlargement. Then a sheet of tracing paper would be taped to the Polaroid and the ridges were traced by hand with a .7mm pencil. When the tracing was complete, it would be photographed at 1:5, to bring the 5X tracing back to the print's original size. Then, this Polaroid photograph of the tracing of the fingerprint was scanned into the AFIS, the tracing would be cleaned up, additional information entered for the search, and three days later there would be roughly a ten percent chance of a match. That is, 90 percent of the fingerprints enlarged, traced, reduced and entered into the system would not match a print in the database - it may have been the victim's print, the print of a customer at the business that was robbed, not enough detail in the print to generate a match, etc.

At the time, this technology seemed wonderful - it sure beat the cartooning method (an examiner at one agency would describe, by phone, what the fingerprint looked like to another examiner to see if they may have seen one like it!). But, it is obvious to anyone now that this method needed improvement - virtually no enhancement of the fingerprint could be done. It was possible to make minor global contrast or brightness adjustments through exposure and development times (this was the peel-apart Polaroid material), or by choosing the high contrast Type 55 film. The precision of the sizing of the enlargement and reduction was far from accurate. It is no wonder that finding a method to do this digitally would lead to a higher number of fingerprint matches by having better fingerprint detail and more accurate image sizes. But, simple things like figuring out how to make a digital tracing of the fingerprint before Photoshop had layers wasn't obvious to us back then. We weren't computer experts, we weren't Photoshop experts, we just had jobs that involved photography and fingerprints and we knew that computers could help us do a better job - and we managed to make it work.

Image Analysis

Over the years, image processing in forensics expanded to more areas, including questioned document examination; footwear, tire impression and tool mark examination; blood spatter evidence; bullet striation and primer mark examination, etc. In addition, video analysis moved to the digital realm, bringing with it a new set of experts and tools.

Image analysis and enhancement today is quite different than what we were attempting in the early 90's. Now, we can do quite a bit of non-destructive processes using adjustment layers, we can localize enhancements with layer masks, we can utilize Photoshop's Channel Mixer to extract a fingerprint from a background or to find detail that wasn't visible to the eye. Photoshop plug-ins like FoveaPro and Optipix from Reindeer Graphics give us the capability to apply a Fast Fourier Transform to eliminate patterned backgrounds, apply deconvolution to correct for motion blur or poor focus, and utilize frame averaging to eliminate noise from a sequence of images. Plug-ins like Human Software's PhotoFixLens enable us to correct lens distortion.

With the introduction of the History Log in Photoshop CS, the ability to have an audit trail stored in the file's metadata has been a huge benefit in forensics. There is no court requirement that one have an audit trail, but it is a key feature in validating that good techniques were used and makes it possible to easily repeat most enhancements. The History Log can be invoked through the General Preferences pane in Photoshop CS. The metadata recorded can be viewed by choosing History from the File Info dialog box or in the Metadata tab in Photoshops File Browser.


Figure 1. History Log 1

The History Log is off by default. It can be activated in Photoshop's General Preferences pane, with options for saving in the file's metadata, as a separate test file, or both. The History Log can record sessions only, a concise record, or detailed listings of the tools used and parameters set.


Figure 2. History Log 2

If the History Log is recorded as file metadata, it can be viewed in File Info from the File menu.

An objective in image analysis is often to extract some image data so that it can be seen with the best possible detail. Processes for extracting this information my be as simple as increasing contrast globally or to local areas of the image, increasing the sharpness, controlling the color channels to build contrast between the print and the background, removing a patterned background, etc.

The introduction of Adjustment Layers in Photoshop a few versions ago enabled many adjustments to be made non-destructively. Prior to this, making a Levels Adjustment or a Curves Adjustment would frequently result in the loss of some image data. With The problem with this is that if additional image processing is desired, or if modifications to the original adjustments are needed, it is too late. Adjustment layers resolved this. In addition, Adjustment Layers also retain the adjustment settings, so even if the History Log is not active, or if one is using an older version of Photoshop, the audit trail exists.

As they say on the knife commercial, "but wait, there's more." And there is. Masks can be used with Adjustment Layers to isolate the adjustment to localized areas of the image. This provides substantially more power to this feature, allowing different areas of the image to be treated separately, while maintaining a visual mask to illustrate precisely what areas of the image were affected by an adjustment.


Figure 3. Adjustment Layers

The top image is uncorrected, the bottom image has been given a Levels Adjustment Layer with a Layer Mask, so that the background could be lightened, while keeping the foreground from becoming too bright.

One of the most powerful tools used for image enhancement tasks is the Channel Mixer. This tool allows one to combine the channels of a color space to be mixed in different percentages to affect the tonal contrast between various colors. In forensics, this can extract a fingerprint from a busy background, isolate an endorsement signature from the bank or store imprinting, or even recover "invisible" writing from stolen checks that have been bleached and rewritten.


Figure 4. Color Isolation

In this image, the signature is overwritten by the endorsement. Using the Channel Mixer, the color channels can be adjusted separately to eliminate the color in the endorsement, and isolate the color in the signature, as shown in the bottom image.

Video analysis has several unique features unto itself. Analog video is an interlaced signal - two fields make up a single frame. The odd field contains every other horizontal line of the image, and the even field contains the remaining lines. Combining the two fields makes one frame. In security systems, several camera views are often recorded onto the same tape using a multiplexer, which allows the recording to sequence from camera to camera in a number of different methods. Some systems will even record different cameras on each field of a single frame! Deinterlacing is a readily available tool, an can be done directly in Photoshop and most video applications.


Figure 5. Deinterlace

The image on the left is an example of two cameras each being recorded onto separate fields of the same video frame. Choosing Photoshop's Deinterlace filter enables one to separate the two fields, which are separated on the right of this image.

Separating each camera view into separate movie files is called de-multiplexing, or deplexing. Multiplex systems use hardware to do this task, but it compresses the files, which can ruin the value of the images. Several Windows systems offer the ability to de-multiplex virtually automatically within their software. On the Mac, this can be done manually by exporting a movie file to a still image sequence and manually sorting the files - neither an elegant nor an expedient method.

One aspect of video that is advantageous is that 29.97 frames of video are recorded per second. The advantage of this is that information from several images can be combined to improve the image data. Low light imaging produces a very low signal to noise ratio. The image noise can make an otherwise sharp image virtually useless. Through frame averaging - taking the average value of each pixel in a set of images - the noise can be greatly reduced, thereby, providing information that had been impossible to see. Reindeer Graphics makes a nice Photoshop plug-in for frame averaging. A key to getting the best value from frame averaging is to have each image precisely aligned. Unfortunately, there are not any good tools for image alignment available on the Mac platform at this time. Combining multiple images as separate layers in Photoshop and using the Difference mode is helpful, but limited, especially if there is rotation in the image, or if sub-pixel movements are necessary.


Figure 6. Frame Average

The image on the left is a video frame with too much noise to be able to read the license plate. The image on the right is a Frame Average of five video frames using the Reindeer Graphics Optipix plug-in.

Photography for Documentation

The other main use of digital imaging in forensics application is documenting a crime scene, traffic accident or piece of evidence. In this instance, an analyst isn't comparing one image to another, but attempting to use photography to illustrate to a detective, attorney, judge and/or jury what they saw. Photography has been used for this purpose since at least 1859.

The weaknesses of the early digital cameras were a lack of resolution, high prices and focal length limitations. It wasn't until the mid to late 1990's that digital cameras were exceeding 3 megapixels and moving to an affordable price range. For this reason, evidence photography for documentation continued to be film-based, even for agencies using image processing for image analysis. In many agencies, film was scanned and made available to others for viewing on a network. Prints were made with dye sublimation printers or mini-lab equipment with digital capabilities.

Today, thousands of agencies are using digital cameras to document crime scenes, traffic accidents and photograph evidence.

The key issues involved in evidence photography are to create images that represent the subject matter, maintain a chain-of-custody, and that images can be shared with those who need them (detectives, investigators, attorneys, courts). Because each agency is autonomous and has different staffing and volume, the approaches may vary - but the general concepts are basically the same.

Generally accepted best practice recommendations in forensics are that access to digital images should be limited and that image processing should only be done to copies of the original.

Images stored on a server can restrict access through permissions. Some systems allow one to set security levels to allow specific users to have read and write permissions but not rewrite capability. This helps guarantee that original images cannot be changed.

Asset management applications are not always a part of a forensics workflow. A primary reason for this is that images tend to belong to specific cases, so a simple hierarchical filing system works well. If an agency either also has public relations photographs or wants to search their images by criteria such as crime type or reporting district, an asset manager may be used. Photoshop's File Browser may be adequate to meet some needs, and when something more substantial is needed, an asset manager like Extensis Portfolio may be used. A few companies have created Windows-based asset management applications directed specifically toward the forensics market - some offering image authentication and/or encryption as part of their package. These, however tend to be expensive solutions that don't really offer needed features.


Figure 7. File Browser

This is Photoshop's FileBrowser - on the left are tabs for navigation, a preview image, metadata and adding and searching by keyword, the right side shows thumbnails of any given folder. All pane sizes are adjustable.

It isn't uncommon for crime scene photographs to need some basic image adjustments to correct for incorrect exposures and color shifts from fluorescent or tungsten light.. Most of this is easily done in Photoshop with simple adjustment layers. Localized adjustments can be accomplished with layer masks. As mentioned in the image analysis section, the advantages of non-destructive editing that adjustment layers bring are substantial in a forensics workflow.

The PhotoFixLens Plug-in from Human Software allows one to correct the barrel distortion of wide-angle lenses. The use of wide-angle lenses is common, and often necessary in a forensics environment. The problem with this, however, is that wide-angle lenses are subject to barrel distortion. Fortunately, this can be corrected, so that straight walls don't appear to have curved surfaces.


Figure 8. Lens Correction

In the top image the garage door appears warped because of barrel distortion from using a wide-angle lens. Using PhotoFixLens from Human Software, this can be corrected, as shown in the bottom image.

Multiple photographs are frequently taken to show specific aspects of a piece of evidence. For instance, bodily fluids will fluoresce under UV light, but this lighting makes it difficult to discern the object - only the fluorescence is visible. Another example is photographing a bullet trajectory in the dark, using a laser - the trajectory shows, but the background goes black. To resolve this issue, photographs are taken of the subject with normal lighting, and again under the specialized lighting required in the specific instance. The two images can then be combined as separate layers in Photoshop using the Lighten mode, shich displays the lightest values from each layer.


Figure 9. Trajectory

The top left photograph is of a living room in daylight with flash. The photo beneath it shows a bullet trajectory, made by using a laser pointer with no room illumination. The image on the right combines these two images, and shows the well-lit room with the trajectory by using the Lighten Mode in Photoshop's Layers.

Summary

This article attempted to show some of the uses and tools used imaging by the forensics community. Image processing techniques and digital photography have contributed a lot to the toolbox in this field. Although there isn't yet a "CSI" button on the keyboard, there are many capabilities that were impossible just a few years ago. At the same time, there is a great opportunity for developers to create more tools, and to make those we have more efficient. Hopefully this overview will spark an interest in the Macintosh developer community to build more tools in forensics applications.

And, now the next time you see a Crime Scene Investigator with their digital camera, you'll have a pretty good idea of what will be happening with the images that they take.


George Reis is a Forensic Imaging expert specializing in Digital Imaging Analysis, Enhancement, Photography, Training, and Consulting in the investigative, law enforcement, and legal communities. He can be found at http://www.imagingforensics.com

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

MacFamilyTree 8.2.7 - Create and explore...
MacFamilyTree gives genealogy a facelift: modern, interactive, convenient and fast. Explore your family tree and your family history in a way generations of chroniclers before you would have loved.... Read more
WhatsApp 0.2.8000 - Desktop client for W...
WhatsApp is the desktop client for WhatsApp Messenger, a cross-platform mobile messaging app which allows you to exchange messages without having to pay for SMS. WhatsApp Messenger is available for... Read more
TotalFinder 1.10.7 - Adds tabs, hotkeys,...
TotalFinder is a universally acclaimed navigational companion for your Mac. Enhance your Mac's Finder with features so smart and convenient, you won't believe you ever lived without them. Features... Read more
Box Sync 4.0.7886 - Online synchronizati...
Box Sync gives you a hard-drive in the Cloud for online storage. Note: You must first sign up to use Box. What if the files you need are on your laptop -- but you're on the road with your iPhone? No... Read more
Espresso 5.1 - Powerful HTML, XML, CSS,...
Note from the developer: For the new Espresso, we changed our versioning and licensing approach with more consistent pricing and a simpler development timeline: "X+1". Each new update would increase... Read more
VueScan 9.6.04 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
Slack 3.0.5 - Collaborative communicatio...
Slack is a collaborative communication app that simplifies real-time messaging, archiving, and search for modern working teams. Version 3.0.5: Bug Fixes: An important security update. Security... Read more
VirtualBox 5.2.6 - x86 virtualization so...
VirtualBox is a family of powerful x86 virtualization products for enterprise as well as home use. Not only is VirtualBox an extremely feature rich, high performance product for enterprise customers... Read more
Vivaldi 1.13.1008.40 - An advanced brows...
Vivaldi is a browser for our friends. In 1994, two programmers started working on a web browser. Our idea was to make a really fast browser, capable of running on limited hardware, keeping in mind... Read more
WhatRoute 2.1.1 - Geographically trace o...
WhatRoute is designed to find the names of all the routers an IP packet passes through on its way from your Mac to a destination host. It also measures the round-trip time from your Mac to the router... Read more

Latest Forum Discussions

See All

JYDGE (Games)
JYDGE 1.0.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0.0 (iTunes) Description: Build your JYDGE. Enter Edenbyrg. Get out alive. JYDGE is a lawful but awful roguehate top-down shooter where you get to build your... | Read more »
Tako Bubble guide - Tips and Tricks to S...
Tako Bubble is a pretty simple and fun puzzler, but the game can get downright devious with its puzzle design. If you insist on not paying for the game and want to manage your lives appropriately, check out these tips so you can avoid getting... | Read more »
Everything about Hero Academy 2 - The co...
It's fair to say we've spent a good deal of time on Hero Academy 2. So much so, that we think we're probably in a really good place to give you some advice about how to get the most out of the game. And in this guide, that's exactly what you're... | Read more »
Everything about Hero Academy 2: Part 3...
In the third part of our Hero Academy 2 guide we're going to take a look at the different modes you can play in the game. We'll explain what you need to do in each of them, and tell you why it's important that you do. [Read more] | Read more »
Everything about Hero Academy 2: Part 2...
In this second part of our guide to Hero Academy 2, we're going to have a look at the different card types that you're going to be using in the game. We'll split them up into different sections too, to make sure you're getting the most information... | Read more »
Everything about Hero Academy 2: Part 1...
So you've started playing Hero Academy 2, and you're feeling a little bit lost. Don't worry, we've got your back. So we've come up with a series of guides that are going to help you get to grips with everything that's going on in the game. [Read... | Read more »
What mobile gaming can learn from the Ni...
While Nintendo might not have had things all its own way since it began developing for mobile, one thing it has got right is the release of the Switch. After the disappointment of the WiiU, which I still can't really explain, the Switch felt a... | Read more »
Programmer of Sonic The Hedgehog launche...
Japanese programmer Yuji Naka is best known for leading the team that created the original Sonic The Hedgehog. He’s moved on from the speedy blue hero since then, launching his own company based in Tokyo – Prope Games. Legend of Coin is the... | Read more »
Why doesn't mobile gaming have its...
The Overwatch League is a pretty big deal. It's an attempt to really push eSports into the mainstream, by turning them into, well, regular sports. But slightly less sweaty. It's a lavish affair with teams from all around the world, and more... | Read more »
Give Webzen’s new billiard game PoolTime...
Best known for producing hugely popular MMO titles, South Korean publisher Webzen is now taking aim at a different genre altogether. PoolTime is a realistic eight ball pool simulator, allowing you to compete in real-time matches against players... | Read more »

Price Scanner via MacPrices.net

9.7-inch 2017 WiFi iPads on sale starting at...
B&H Photo has 9.7″ 2017 WiFi #Apple #iPads on sale for $30 off MSRP for a limited time. Shipping is free, and pay sales tax in NY & NJ only: – 32GB iPad WiFi: $299, $30 off – 128GB iPad WiFi... Read more
Wednesday deal: 13″ MacBook Pros for $100-$15...
B&H Photo has 13″ #Apple #MacBook Pros on sale for up to $100-$150 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 13-inch 2.3GHz/128GB Space Gray... Read more
Apple now offering Certified Refurbished 2017...
Apple has Certified Refurbished 9.7″ WiFi iPads available for $50-$80 off the cost of new models. An Apple one-year warranty is included with each iPad, and shipping is free: – 9″ 32GB WiFi iPad: $... Read more
10″ iPad Pros on sale for $50-$75 off MSRP, n...
B&H Photo has 10″ and #Apple #iPad Pros on sale for up to $75 off MSRP. Shipping is free, and B&H charges sales tax in NY & NJ only. Note that some sale prices are restricted to certain... Read more
Apple refurbished Mac minis available startin...
Apple has restocked Certified Refurbished Mac minis starting at $419. Apple’s one-year warranty is included with each mini, and shipping is free: – 1.4GHz Mac mini: $419 $80 off MSRP – 2.6GHz Mac... Read more
Amazon offers Silver 13″ Apple MacBook Pros f...
Amazon has new Silver 2017 13″ #Apple #MacBook Pros on sale today for up to $150 off MSRP, each including free shipping: – 13″ 2.3GHz/128GB Silver MacBook Pro (MPXR2LL/A): $1199.99 $100 off MSRP – 13... Read more
Sale: 12″ 1.3GHz MacBooks on sale for $1499,...
B&H Photo has Space Gray and Rose Gold 12″ 1.3GHz #Apple MacBooks on sale for $100 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 12″ 1.3GHz Space... Read more
Apple offers Certified Refurbished 2017 iMacs...
Apple has a full line of Certified Refurbished iMacs available for up to $350 off original MSRP. Apple’s one-year warranty is standard, and shipping is free. The following models are available: – 27... Read more
13″ MacBook Airs on sale for $120-$100 off MS...
B&H Photo has 2017 13″ 128GB MacBook Airs on sale for $120 off MSRP. Shipping is free, and B&H charges sales tax for NY & NJ residents only: – 13″ 1.8GHz/128GB MacBook Air (MQD32LL/A): $... Read more
15″ Touch Bar MacBook Pros on sale for up to...
Adorama has Space Gray 15″ MacBook Pros on sale for $200 off MSRP. Shipping is free, and Adorama charges sales tax in NJ and NY only: – 15″ 2.8GHz MacBook Pro Space Gray (MPTR2LL/A): $2199, $200 off... Read more

Jobs Board

*Apple* Solutions Consultant - Apple (United...
# Apple Solutions Consultant Job Number: 113384559 Brandon, Florida, United States Posted: 10-Jan-2018 Weekly Hours: 40.00 **Job Summary** Are you passionate about Read more
Art Director, *Apple* Music + Beats1 Market...
# Art Director, Apple Music + Beats1 Marketing Design Job Number: 113258081 Santa Clara Valley, California, United States Posted: 05-Jan-2018 Weekly Hours: 40.00 Read more
*Apple* Pay & Wallet Engineering Manager...
# Apple Pay & Wallet Engineering Manager, Apple Watch Job Number: 83769531 Santa Clara Valley, California, United States Posted: 06-Nov-2017 Weekly Hours: 40.00 Read more
UI Tools and Automation Engineer, *Apple* M...
# UI Tools and Automation Engineer, Apple Media Products Job Number: 113136387 Santa Clara Valley, California, United States Posted: 11-Jan-2018 Weekly Hours: 40.00 Read more
Senior Product Architect, *Apple* Pay - App...
# Senior Product Architect, Apple Pay Job Number: 58046427 Santa Clara Valley, California, United States Posted: 04-Jan-2018 Weekly Hours: **Job Summary** Apple , Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.