Presentation of certification programmes to Law Enforcement Agencies (LEA) at Mykolas Romeris University

The certification programmes for LEA – „Collection of electronic objects“ and „Windows artefacts“ – were presented to investigators, LEA officials, IT specialists and experts at the LEA, academic community and business meeting that took place at Mykolas Romeris University on 24 July of 2015:

  • 1st certification programme „Collection of electronic objects“ is designed for operational groups of officers, criminal police officers carrying out an investigation, forensic specialists participating in the crime scene investigations, which are often faced with problems in collecting electronic objects at crime scene. The purpose of the programme - to prepare qualified investigating officer (investigator) who is able to work on crime scene investigation, search and seizure, when electronic objects are detecting.
  • 2nd certification programmes “Windows artefacts” is prepared and dedicated to criminal police officers carrying out an investigation of the most popular and commonly used Windows operational system (OS). The purpose of the programme – to develop the skilled professionals who are able to carry out a detailed examination of the Windows operating system.

While cybercrime is growing rapidly, and in most cases the offense or on the spot the electronic items are found (computers, mobile phones, tablet, etc.), not all officers and experts investigating at the crime scene are familiar with computer technology architectures and therefore often making inadequate decisions.

Not all officials are aware of the most common forms of external storages, so part of potential evidences with digital information is not collected, or vice versa, a surplus of machines and equipment are often collected, whose seizure, recording, logistics, storage and investigation burden LEA work organisation. It is not always the networks at crime scene, access to them and information found in networks are analysed. The information from the peripheral devices or computerised systems of the general infrastructure is not always collected, the analysis of live system at the crime scene is usually not carried out and that leading to a loss of part of information and evidences. Seeking to tackle these problems a certification programme „Collection of electronic objects“ was prepared.

Demand in 1st certification programme is huge, because all investigators and operational officers going to crime scene must collect the electronic objects properly. There is planning to train under this certification programme over 1800 officers across Lithuania.

Windows operational systems (Windows 7, XP, 8, 8.1, Vista) amounted to 98.88% of all used operational systems (hereinafter – OS) in 2014. (Source: Kaspersky Safe Web Report: Windows usage and threats. KasperskyLab, 2014).

According to the data of Vilnius County Police Headquarters (hereinafter – VCP) IT investigation with involvement of specialists (VCP specialists, specialists self-performing or seeking to carry out IT investigations or specialists included into the formal list of professionals on IT objects investigation at Lithuanian Police) amounted just 0.07 percent from all recorded crimes in Vilnius county in 2014. Thus, there remains a probability that some of the information in electronic items with Windows OS are not picked up or lost.

However, the Windows OS exploration could be carried out by specialists with higher education in information technology only, and namely, the specialty - IT specialists for Criminology/ forensics – is not preparing by any higher education institution in country.

Therefore, one of the quickest ways is to train already employed criminologists - specialists and experts to investigate the electronic objects with Windows OS at searching for digital evidences and taking them.

While forensic experts and IT professionals who work in law enforcement, constantly improving qualifications at the best foreign institutions or bodies such as OLAF, CEPOL, EnCE, IACI, ACFE, ACE, CCME, E.CT.EG and so on, however a number of such training event is limited, therefore the systematic qualification is lacking at larger scale. A lack of specialists and experts affects the 2-3 years long queues to carry out IT investigations at Lithuanian Forensics Centre, Lithuanian Police Forensic Science Centre and other bodies.

Developed 2nd certification programme will allow in significantly shorter time to train and prepare qualified experts and specialists who will able to perform Windows OS artefacts analysis. Numerous proceedings illustrations help to learn how to properly perform Windows artefact analysis.

Both certification programmes were presented to interested parties, Lithuanian Forensics Centre, Forensics Bureau of Lithuanian Police, academic community in order to get feedback, comments about the programmes drawn up proposals for their improvement and applicability under Lithuanian conditions.

The developed certification programmes were based on the Spanish Certification Programmes “Collection of electronic objects” and “Windows artefacts analysis” via localisation and adaptation to the needs of Lithuanian LEA and to IT investigations carried out in Lithuania.

Development of both certification programmes were funded by the Commission under ISEC programme in frame of the project “Lithuanian Cybercrime Centre for Training, Research and Education”, implementing by Mykolas Romeris University together with Lithuanian Cybercrime Center for Training, Research and Education (L3CE), company Ekonomines konsultacijos ir tyrimai (Economic Consulting and Researches), Kaunas Technology University, Vilnius County Police Headquarters (all LT), University College Dublin Cybersecurity and Cybercrime investigation Centre (Ireland) and S21Sec Institute (Spain).

Rašyti komentarą

  Saugos kodas Change  
  Do not enter anything here  

Naujausi komentarai

Komentarų kolkas nėra