An Introduction to Behavioral Evidence Analysis

Behavioural Evidence Analysis Applied to Digital Forensics: An Empirical Analysis of Child Pornography Cases Using P2P Networks

“…Deductive profiling, on the other hand, relates to case-based investigation. It analyses evidence from the case in question focusing on specific behavioural and personality traits, and uses it to develop a profile of the specific characteristics of the probable offender [4]. Whichever method is used in criminal profiling, it does not necessarily identify a specific offender.…”

“…Both the Holmes Typology and the Investigative Psychology approach were developed based on generalization and statistical analysis derived from criminal databases, which make them of limited use in real criminal investigations [3]. They were also criticized for being culturally biased to some extent and cannot be applied worldwide [4]. Further, the Holmes Typology lacked empirical testing, while the use of the Circle Theory in Investigative Psychology was claimed to be ambiguous [3].…”

“…Further, the Holmes Typology lacked empirical testing, while the use of the Circle Theory in Investigative Psychology was claimed to be ambiguous [3]. In an attempt to overcome some of the limitations of the Holmes Typology and Investigative Psychology, Turvey [4] developed the Behavioural Evidence Analysis Model (BEA). This is based on the deductive approach.…”

“…It uses the forensic evidence in a case to understand and reconstruct the behaviour of the criminal. His model consisted of four steps: equivocal forensic analysis, victimology, crime scene characteristics, and offender characteristics [4]. A number of studies have emphasized the effective role of BEA in assisting in conventional criminal investigations (e.g., homicide, sex offences, rape) [9,10].…”

“…Analysing files on the offender's computer (e.g., Internet history files, recently accessed files, time stamps of files, deleted files) can also reveal indicators of suspicious activity, as well as signature behaviours and psychological characteristics of the offender [3]. This helps the investigator to develop leads, and determine the location of additional sources of evidence [4]. After identifying all the supporting evidence in a case, the investigator can create a more solid reconstruction of the crime that aids in understanding what happened, and provides an explainable basis for expert judgment and opinion.…”