Police software fast-tracks crime fight

New Zealand Police have implemented an automated system that allows them to search the data content of electronic devices to help collect evidence.

Developed by the New Zealand Police's e-Crime Lab (ECL), Project EVE was launched in August. EVE - the Environment for Virtualised Evidence - is a software system that enables police to immediately analyse the contents of a seized computer using a customised search facility.

It also lets police start the computer and use it as a suspect would have used it, without compromising the original machine - therefore preserving all data.

Police need to investigate electronic crime thoroughly, but also need to extract important evidence in a timely manner.

Until EVE was implemented in 2009, there was an 18-month backlog of exhibits for the ECL's forensic department to process - with more than 16,000 new units added for processing every year.

"We wanted to develop something usable from a desktop by police to give them immediate access to evidence without going through another department," says Maarten Kleintjes, who heads the ECL in Wellington.

"EVE makes a clone of an exhibit [which can be a computer, cell phone or other electronic device] and downloads its content automatically to a network so an officer can decide its relevance without waiting for the ECL team."

While digital technologies and computer-based living has transformed the lives of many New Zealanders, it also offers new opportunities in crime. Computers are used by criminals for record keeping, as communication tools to crime planning, as devices to execute fraud and to transmit pirated software - among a host of other illegal activities.

In some cases computers may simply serve as a silent witness to a crime by storing information about the offence. "People leave evidence everywhere they go without knowing it, and computer activity can be particularly useful in an investigation process," says Kleintjes.

"From startup and shutdown times to files used, computers leave digital fingerprints. Easy access to this information with EVE opens up a huge new avenue - as computers contain evidence you can't avoid leaving behind, and can't control."

A strong technical background is not necessary for police to use it.

"EVE has been designed to be very easy to use. All computer data is easily searchable, as it is presented visually with large buttons and images," says Kleintjes.

"Even deleted and hidden files are presented in simple way. It takes an officer very little time to get used to using the system," he said.

EVE is a world-first solution that was developed without extra staff, equipment or money.

"No-one else in the world was doing it, so in deciding to develop it ourselves we've been able to make it exactly how we wanted," says Kleintjes. He says the development process took two and a half years and required no extra governmental funding.

"We've got a fantastic team of IT specialists in the ECL, so it wasn't hard for us to knock it up - we all knew it was a worthwhile thing to invest our time in."

Since its inception, EVE has attracted attention from several overseas organisations.

"Many other enforcement agencies from countries such as Australia and the United States have expressed interest in this system because of its usability," says Kleintjes. "While we're not sure of the timeline yet, we're definitely looking at implementing it in other countries."

- © Fairfax NZ News