• 한국정보통신학회:학술대회논문집
• /
• 한국정보통신학회 2017년도 추계학술대회
• /
• pp.353-355
• /
• 2017

최근 발달된 디지털기기들은 사이버로 연결되어 사용되고 있다. 디지털기기 사용자들은 사이버에 연결된 단말기들을 활용하여 금융결제, 전자상거래 등 활동을 하고 있다. 사이버거래의 활성화와 함께 사용자에 대한 사이버범죄가 증가하고 있다. 사이버범죄의 수사에서 Forensic 증거자료를 확보하여야 한다. 하지만, 디지털 포렌식 증거자료를 분석하기에는 많은 정보가 함유되어 있다. 이러한 많은 디지털정보에서, 사이버범죄에 증거를 확보하기 위한 Script가 효율적인 방안이다. 본 논문 연구에서는 Script를 활용하여, Forensic 증거자료를 확보하는 방안을 연구한다. EnCase를 통한 증거자료 추출과 Script를 활용한 증거자료 확보 방안을 연구한다. 본 연구는 안전한 국민생활을 위한 사이버 보안의 기초자료로 활용될 것이다.

• 한국멀티미디어학회논문지
• /
• 제24권4호
• /
• pp.558-568
• /
• 2021

The digital image to be accepted as legal evidence, it is important to verify the authentication of the digital image. This study proposes a method of authenticating digital images through three steps of comparing the file structure of digital images taken with iPhone, analyzing the encoding information as well as media logs of the iPhone storing the digital images. For the experiment, digital image samples were acquired from nine iPhones through a camera application built into the iPhone. And the characteristics of file structure and media log were compared between digital images generated on the iPhone and digital images edited through a variety of image editing tools. As a result of examining those registered during the digital image creation process, it was confirmed that differences from the original characteristics occurred in file structure and media logs when manipulating digital images on the iPhone, and digital images take with the iPhone. In this way, it shows that it can prove its forensic authentication in iPhone.

• 한국안전학회지
• /
• 제28권6호
• /
• pp.42-48
• /
• 2013

Forensic engineering is the application of engineering principles covering the investigation of constructed facilities and systems that fail to perform as intended, causing personal injury or damage to property, environmental, economy etc. In the year 2012, two collapsed accidents of the large scaffolding system in national thermal power station occurred one after another, causing many casualties. In this study, we had performed to investigate the collapsed accident of scaffolding system occurred in the a thermal power station of two accidents. First, the investigation about the collapsed accidents site had performed to understand collapsed state and structures of the scaffolding system. Second, reviewing the materials concerning about the applied weight on the scaffolding system had performed. The applied weight is sum of the weights of the 15 workers, additional materials for coating work and dispersed and loaded shot ball on the foothold etc. the applied weight that calculated exceed more three times than the safe working load. Third, we had confirmed the install state of the materials of the scaffolding system by reviewing the quantity of the materials on the manual and the real system. Last, structural analysis had performed to evaluate structural integrity of the scaffolding system using Ansys. Through a series of this processes, the definite accidents causes of the collapsed scaffolding system revealed. Through these studies, the collapse accident that may occur in the scaffolding system in thermal power station can be minimized by performing specialized and systematic investigation on the accidents in terms of Forensic engineering.

• 한국화재소방학회논문지
• /
• 제33권6호
• /
• pp.114-119
• /
• 2019

우리는 LED등기구의 Printed circuit board (PCB)에서 화재의 원인으로 특정할 수 있는 금속 마이그레이션(Metallic migration) 현상을 발견하고, 본 연구를 진행하였다. 금속 마이그레이션 현상 가속화 실험인 물방울 시험을 소량의 물과 저전압(3 V)로 진행하고 절연되어있는 양극에서 직접적으로 금속 마이그레이션의 성장과 회로의 단락을 확인하였다. 그리고 전자주사현미경(SEM)을 통해 형태를 관찰하고 에너지 분산형 분광기(EDS)를 이용하여 성분을 분석한 결과, 절연된 부분에서 전극을 이루고 있는 구리의 성분을 검출하였다.

• 대한의생명과학회지
• /
• 제24권1호
• /
• pp.35-42
• /
• 2018

Postmortem interval (PMI) is very important in the crime scene investigation. However, it is very difficult to estimate of the interval since death after a decomposition. Recently, there have been various studies on the postmortem interval since a decomposition. In particular, the total body score (TBS) and accumulated degree days (ADD) used to estimate the postmortem interval after a decomposition. This study was conducted with the aim of applying the TBS and ADD to estimate the postmortem interval in real forensic caseworks. In first murder case, TBS was 12 and ADD value was 132, respectively. An estimated time of PMI was around 23:00 on June 21, and the suspect's statement was 01:20 on June 22. Our estimated interval since death and the suspect's statement for the PMI differ by only 2 hours and 20 minutes. In second forensic case, TBS was 3 and ADD value was 55, respectively, an estimated time of PMI was around 02:26 on September 23. The suspect's statement was 10:30 on September 23. Our estimated time and the suspect's statement for the PMI differ by 8 hours. In these cases, we were able to have confirmed the feasibility of TBS and ADD on the real forensic cases. Overall, our finding suggested that the quantitative method could be used to produce PMI estimates that are accurate to within days or even hours.

• 한국컴퓨터정보학회논문지
• /
• 제16권4호
• /
• pp.137-148
• /
• 2011

과거에는 국내 모바일 포렌식에 관한 연구가 휴대폰에 한정되었지만, 스마트폰 사용량의 증가 추세에 따라 스마트폰 포렌식에 관한 연구도 활발히 진행될 것으로 예상된다. 특히, 안드로이드 스마트폰의 시장 점유율은 급속히 증가하고 있기 때문에 안드로이드 스마트폰 포렌식에 관한 연구는 매우 중요하다. 이에 본 논문에서는 논리적 분석 기반의 안드로이드 스마트폰 포렌식 도구 구현을 설명한다. 본 포렌식 도구는 Oxygen Forensic Suite 2010과 비교할 때, 검색 기능을 추가로 제공하며 추출된 미디어 정보에 대한 리소스 링크를 제공하기 때문에 포렌식에 소요되는 시간을 더욱 절약할 수 있다. 아직까지 국내에는 스마트폰 포렌식 도구가 전무하기 때문에 본 논문을 통해 구현된 포렌식 도구는 스마트폰 포렌식 기술 발전에 기여를 할 것으로 기대된다.

• 한국정보통신학회:학술대회논문집
• /
• 한국해양정보통신학회 2011년도 추계학술대회
• /
• pp.287-290
• /
• 2011

스마트폰에서 동기화 기능은 디폴트(default)값으로 설정되어 있다. 동기화가 설정된 스마트폰은 스마트폰 전용 케이블을 이용해 PC에 연결되면 자동적으로 스마트폰 데이터가 백업되어 저장된다. 이 백업 데이터는 일반적인 기술로는 내용을 분석하기가 어려워서 포렌식 기술을 적용하여야 범죄용의자의 정보를 알아낼 수 있다. 따라서 본 논문에서는 동기화 스마트폰의 백업 데이터에 대한 포렌식 분석을 통한 포렌식 증거자료에 대한 연구를 한다. 실험실 환경에서 스마트폰에 개인 금융정보를 보내고, 스마트폰을 훼손하였다고 가정하에 실험을 한다. 스마트폰의 백업 데이터를 포렌식 툴을 사용하여 개인 금융정보 및 범죄 연관 데이터를 분석하고, 포렌식 기술을 적용하여 법정 증거자료로 채택되도록 연구한다. 본 논문을 통해 스마트폰 포렌식 분석에 대한 기초자료로 활용 할 수 있을 것이다.

• 분석과학
• /
• 제36권4호
• /
• pp.170-179
• /
• 2023

Starvation, diabetes, alcoholism and hypothermia cause ketoacidosis in the human body; therefore, the cause of death can be determined by analyzing ketone bodies in the blood of the deceased. In the case of decomposition of the cadaver, however, since collecting intact blood is impossible, ketone body analysis is performed using the spleen. However, the index for diagnosing ketoacidosis is based on blood concentration, and its correlation with ketone bodies present in the spleen remains unknown. In particular, since decomposition proceeds rapidly during summer, when temperature and humidity are high, understanding the correlation between ketone bodies in the blood and spleen is important to estimate the state at the time of death from a decaying body. Therefore, in the present study, the correlation between ketone bodies in the blood and spleen of the deceased was explored. Ketone bodies (beta-hydroxybutyric acid [BHB] and acetone) in the blood and spleen were analyzed and compared from autopsies (>100 mg·L^-1 BHB, blood basis) conducted at the Daejeon Forensic Research Institute from June to December 2021. Moreover, the concentration of ketone bodies in the spleen juice and tissues was compared assuming the scenario of extreme decomposition. Ketone retention concentration in the blood and spleen was positively correlated, and the ratio of BHB concentration in the spleen to BHB concentration in the blood ranged from 0.52 to 1.08 (mean = 0.85 ± 0.12), although the ratio may vary depending on the degree of decomposition of the corpse.

• 대한의생명과학회지
• /
• 제29권4호
• /
• pp.302-313
• /
• 2023

Y chromosomal short tandem repeat (Y-STR) markers have been developed continuously to complement forensic DNA analyses and population genetic studies. Initially, we collected data from previously reported Korean population Y-STR haplotype studies on 1133 individuals. We then conducted a marker expansion analysis using a dataset from the Y-STR Haplotype Reference Database (YHRD), covering up to 29 Y-STRs, referred to as Ymax. Additionally, we examined the impact of rapidly mutating (RM) Y-STRs included in this expanded marker set on the discrimination capacity. We observed that marker expansions both with (0.9896), and without (0.9510), RM Y-STR improved the discrimination capacity. Subsequently, we focused on 16 individuals belonging to seven distinct groups sharing identical haplotypes. These particular haplotypes had been previously identified among 476 unrelated males using 23 Y-STR markers from the PowerPlex^® Y23 System. We expanded the marker panel up to Ymax to explore how discrimination improved with an expansion of Y-STR markers for these 16 individuals. Among the expanded markers, DYS627, which had high discriminatory power, had a high mutation rate (1.10 × 10^-2) and high gene diversity (0.83). In contrast, DYF387S1 displayed high gene diversity (0.95) but a relatively low mutation rate (2.80 × 10^-3). We propose that these findings will be valuable in the selection of suitable Y-STR markers, depending on the objectives of forensic analyses. Additionally, the presence of frequently observed Y-haplotypes in Korean population will facilitate statistical interpretation in Y-STR DNA profiling.

• 대한수사과학회지
• /
• 제1권1호
• /
• pp.5-10
• /
• 2006

In the era of Joseon Dynasty there was a national system of postmortem investigation with literatures of postmortem inspection. The author reviewed the postmortem findings in the literature(Shinjumoowonrok) to compare with recent knowledges of forensic medicine. Characteristics of old system of postmortem investigation was three instance investigation system and was carried out only with a postmortem inspection without autopsy. The postmortem findings described in the old literature were about various kinds of death, such as cases of suicide and homicide and natural and unnatural death. Most of postmortem findings in the Shinjumoowonrok were accurate and reasonable in the aspect of recent knowledges of forensic medicine.